Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05e6c0b5-6bbc-3af2-a814-fd465d973d52.roa
File:                     05e6c0b5-6bbc-3af2-a814-fd465d973d52.roa (raw, json)
Hash identifier:          WgqjEvXDfZYb0sJTAfLPxrRU4BEeQvmr193RHggSHhg=
Subject key identifier:   4D:DB:5E:76:09:25:9D:28:FD:93:9D:8C:03:55:3D:F7:B6:1C:F2:C5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F8F3DBD9EE9CBFC5A9A104E80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05e6c0b5-6bbc-3af2-a814-fd465d973d52.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     401152
IP address blocks:        108.165.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:bd:9e:e9:cb:fc:5a:9a:10:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=cf6fb08b-7ec5-4891-8aeb-beb16d3cb400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:21:5a:07:4b:af:65:ea:ae:3e:82:6e:d8:ce:
                    2c:4f:5c:aa:59:89:68:b0:ad:27:d1:4a:92:21:ac:
                    90:4a:16:d9:7b:58:b5:cd:b8:3f:93:d0:40:16:c8:
                    46:5d:9d:31:ab:4b:8e:b4:cd:7f:a9:90:06:96:fc:
                    af:16:a9:3f:a3:b1:6b:2e:85:af:22:bb:05:ef:0a:
                    08:bb:2f:08:75:28:54:d7:d3:3f:b9:e0:48:bb:7c:
                    f9:17:52:d9:34:24:df:6d:c1:69:47:eb:e3:1e:9e:
                    cb:55:ef:45:60:b1:e6:82:c9:c0:bf:9f:79:2c:c5:
                    61:b3:26:d9:b3:b9:07:1f:a1:88:fe:1c:40:34:72:
                    bb:50:8c:c9:84:17:79:a4:fe:c3:b4:c1:ab:ee:cd:
                    f4:ee:45:18:1d:fe:db:83:49:d6:6e:3b:fa:c8:5d:
                    89:fc:a9:39:5a:ca:62:75:89:56:2f:ed:7a:75:db:
                    86:0f:7c:9c:f2:9b:52:04:a8:d1:a7:d1:15:58:32:
                    20:8a:c3:32:fb:ff:09:3b:14:24:fc:4a:04:1f:f1:
                    33:2d:7f:f4:d0:f3:af:f2:1d:6d:78:21:35:0a:53:
                    aa:5c:56:ba:02:69:0d:a2:df:d6:54:d3:d9:8e:ca:
                    3a:70:07:7e:a7:d3:4c:76:ad:05:50:3f:6f:6a:29:
                    17:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DB:5E:76:09:25:9D:28:FD:93:9D:8C:03:55:3D:F7:B6:1C:F2:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05e6c0b5-6bbc-3af2-a814-fd465d973d52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:46:3d:e0:a5:31:f8:3f:ca:78:8c:71:e0:b8:84:14:43:cd:
         f9:dd:ec:04:90:e3:93:ba:ed:79:2c:06:d4:16:64:bf:f8:47:
         14:f9:a9:72:3e:6e:75:0a:69:92:28:43:0a:64:be:f0:74:f6:
         24:69:1a:96:5e:bc:a9:ca:ca:aa:6c:79:52:8d:23:84:87:80:
         be:f9:56:6c:ab:54:ad:75:64:ad:58:34:87:8c:87:03:d3:d9:
         8e:c9:c6:67:22:f8:8f:b4:34:23:99:87:e1:67:5c:f3:72:3d:
         c4:e3:b3:05:a7:6c:7e:c8:ca:63:10:ac:2c:a0:c2:e5:2c:40:
         1d:9c:e8:56:b9:8a:56:53:69:bf:a1:77:e8:1f:e7:ec:73:b3:
         94:fe:6f:6e:fa:9c:3a:64:c3:1d:40:2b:f9:d8:05:3e:8e:ff:
         c8:b2:18:3e:7b:02:1e:2f:e7:5a:44:2f:c2:f3:64:08:ab:0d:
         2e:94:66:89:6a:8b:43:a8:ad:66:69:3e:a9:02:ef:e8:21:e5:
         d0:ae:98:26:c5:73:7f:d5:80:24:55:f9:cb:32:9d:9b:78:25:
         fc:cf:d2:45:2f:b8:1b:e1:46:88:f6:0e:e9:ac:5c:9b:b3:07:
         76:a0:6b:b9:9a:4d:37:cd:80:16:68:64:cb:37:b9:a4:1b:d6:
         0b:40:2d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 20:55:16 2026 by rpki-client