Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/186c5ae5-7975-39d0-b7e3-43333a40f533.roa
File:                     186c5ae5-7975-39d0-b7e3-43333a40f533.roa (raw, json)
Hash identifier:          gapwSyjhDnqTFOv6mCd1DeAcs7FEVQszJYFDQ4KWxHA=
Subject key identifier:   0A:BB:89:CB:B6:98:10:DE:1B:15:40:C3:C6:AF:1B:D7:A9:6B:A6:7C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E718A8E3B41115CAB0E5AE0CC
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/186c5ae5-7975-39d0-b7e3-43333a40f533.roa
Signing time:             Thu 09 Jul 2026 16:54:02 +0000
ROA not before:           Thu 09 Jul 2026 16:54:02 +0000
ROA not after:            Wed 07 Oct 2026 16:54:02 +0000
asID:                     834
IP address blocks:        108.165.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:71:8a:8e:3b:41:11:5c:ab:0e:5a:e0:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  9 16:54:02 2026 GMT
            Not After : Oct  7 16:54:02 2026 GMT
        Subject: CN=061c7374-8cfe-4714-93c7-57a395e87e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b6:bd:2c:c6:d8:b9:5d:e5:b6:c1:f9:bd:ca:
                    52:a9:c7:ff:0b:da:6b:12:95:ca:78:f6:0a:1d:00:
                    7f:4e:e4:be:fa:c5:f4:da:23:d6:4b:3a:59:d6:69:
                    1a:2e:f7:9e:fa:72:02:0f:69:84:7a:da:5c:0c:e7:
                    75:84:d7:8b:6e:83:1e:43:e8:72:d4:4b:7b:c1:d7:
                    3d:d6:17:2c:46:e3:bb:09:8a:d0:df:9d:0f:d7:ab:
                    16:5b:ee:17:17:c9:bc:70:06:6f:c3:2b:e1:cc:fe:
                    ce:b8:32:c3:e2:c3:f3:85:37:7a:0a:65:c4:24:a9:
                    73:5b:ca:91:c8:4e:09:05:d8:d2:19:a0:fc:c1:3d:
                    00:3d:3d:82:2a:dc:3c:7a:8b:90:39:84:e5:e9:27:
                    98:00:34:6b:f2:21:a5:49:4c:4f:6b:9a:0c:2c:09:
                    4d:1b:b6:18:56:bb:15:09:85:cb:80:67:56:fb:f8:
                    64:49:cd:3a:ff:af:46:a9:56:f9:8e:82:ee:ad:a9:
                    1b:cf:6d:0a:80:a1:2b:df:b2:d3:09:d1:d9:87:fb:
                    b3:27:c2:4e:d9:ea:c7:e4:92:2b:b2:35:3b:67:32:
                    13:a4:1a:91:e9:1f:3a:64:f5:00:da:55:a9:fe:37:
                    5c:36:14:34:11:2e:b1:87:8c:7b:2c:6c:40:d2:c8:
                    94:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BB:89:CB:B6:98:10:DE:1B:15:40:C3:C6:AF:1B:D7:A9:6B:A6:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/186c5ae5-7975-39d0-b7e3-43333a40f533.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:60:79:92:7e:b3:21:a7:ec:c2:e7:16:26:be:d6:eb:89:25:
         92:85:0d:63:23:11:f8:f0:62:b2:3c:da:50:89:6a:9f:ca:25:
         59:13:53:3f:20:93:00:15:00:3c:01:d0:8e:cc:a9:ff:b5:21:
         7f:3d:5a:65:15:b5:22:c5:b1:30:1d:d4:24:a8:8d:30:4a:29:
         1a:fe:cf:4a:1c:13:5f:54:1a:17:ec:ea:0d:46:bc:56:32:c0:
         a9:d2:e9:71:69:b0:9d:ad:3b:5f:c1:20:f3:50:83:12:2b:2c:
         9b:92:32:26:c6:19:5c:b4:3f:7d:cd:38:cf:13:29:11:df:df:
         e1:9f:48:5e:7e:64:b6:ab:b6:52:23:f2:3a:2e:c1:34:c7:6f:
         de:a4:74:7d:3a:a8:df:3f:2e:09:29:f2:62:5d:69:72:8d:e4:
         f7:fa:81:03:9d:b8:00:86:3a:95:fb:27:ba:78:56:c3:44:07:
         88:0f:8a:f1:80:9c:84:13:ea:cc:d9:ad:2f:8b:e0:40:b6:59:
         d5:9a:4b:9a:9f:8f:94:9a:67:9b:fc:c1:d5:31:7f:a9:40:c8:
         50:1a:58:6a:b7:97:a1:32:0b:60:b0:df:87:bd:1c:01:ec:29:
         4b:ba:b2:98:91:1c:1c:fc:98:8f:cc:5d:b8:38:04:9a:4b:3a:
         48:45:26:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 10:10:59 2026 by rpki-client