Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/19542bc1-46f6-36e5-9407-9fa15ba6d595.roa
File:                     19542bc1-46f6-36e5-9407-9fa15ba6d595.roa (raw, json)
Hash identifier:          wacplq61RKF7SHOonXVXk3ZwirqV4jyymu0C+3xhsAc=
Subject key identifier:   38:6D:8A:2C:29:D3:4C:AE:25:CD:F7:CC:10:77:20:56:23:9F:88:DD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DF9EB7FFEEE00F12849D0F930
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/19542bc1-46f6-36e5-9407-9fa15ba6d595.roa
Signing time:             Wed 27 May 2026 20:32:21 +0000
ROA not before:           Wed 27 May 2026 20:32:21 +0000
ROA not after:            Tue 25 Aug 2026 20:32:21 +0000
asID:                     2914
IP address blocks:        108.165.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f9:eb:7f:fe:ee:00:f1:28:49:d0:f9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 27 20:32:21 2026 GMT
            Not After : Aug 25 20:32:21 2026 GMT
        Subject: CN=1199aaee-dda0-4dfa-993c-b7b425d7f415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:2e:c4:17:5d:d8:ef:19:29:80:a9:8b:75:
                    4c:58:bc:ee:2f:12:02:8b:08:c2:ca:f1:b4:e8:b6:
                    45:f9:87:3d:68:f1:d6:b6:b9:46:6f:f7:36:ee:d8:
                    48:2a:10:fb:a5:e0:2e:42:c0:a3:7f:0c:ca:c3:4d:
                    40:08:7e:f8:f0:96:50:e9:3a:ca:a0:d9:ab:d2:ae:
                    e3:50:88:a8:c9:e5:18:6f:c3:49:d9:7a:07:3f:98:
                    fb:90:2e:fe:40:ef:fd:9c:57:8f:67:56:f6:ff:52:
                    1a:27:00:3f:9b:09:e5:44:57:4e:f4:0c:3d:1d:bf:
                    62:11:99:99:ef:43:d8:b2:72:d5:44:91:30:e1:46:
                    cf:af:11:c1:38:c1:24:2a:69:36:47:b6:53:93:e6:
                    4d:1b:6f:57:aa:28:4e:2d:f1:50:4a:5a:8a:20:0b:
                    63:bc:08:9e:5f:64:a6:12:6e:0b:6e:90:18:d1:63:
                    c3:9b:b4:ee:db:27:70:d1:26:0e:2c:f1:1f:80:9c:
                    5b:21:1c:e4:b1:09:1a:0f:ae:2b:29:e1:36:29:f9:
                    8a:89:fa:ab:7c:01:66:c2:f5:cf:ff:82:91:15:66:
                    00:c7:be:7c:17:bc:f9:96:5b:bd:be:cf:58:31:71:
                    c0:dc:a7:60:4e:0c:a3:87:63:76:cb:d4:89:fe:42:
                    1c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6D:8A:2C:29:D3:4C:AE:25:CD:F7:CC:10:77:20:56:23:9F:88:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/19542bc1-46f6-36e5-9407-9fa15ba6d595.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:40:9d:fc:b9:f0:30:14:0f:8e:5b:e0:e7:ef:3c:5f:b4:1c:
         f5:15:fd:13:74:c6:3e:13:ad:2a:d1:9c:0d:29:53:28:4e:32:
         b8:43:a3:0a:3d:8d:67:78:0e:d2:a4:38:19:c3:0d:38:7d:ee:
         a3:00:a1:ae:e7:60:ea:a1:f0:90:6a:3f:75:fd:69:c6:5e:18:
         9d:c6:e3:83:04:57:e8:53:86:df:7c:3b:38:77:12:ad:04:a2:
         5b:22:a4:1b:9d:fa:74:e8:ee:a2:57:30:39:9b:d0:b3:30:2c:
         1b:16:93:f3:de:5f:0a:87:39:28:a4:3a:ab:5d:54:5e:7a:0a:
         77:cb:7a:41:4c:38:63:45:c4:57:12:fb:11:1d:4c:cd:77:77:
         1c:ac:48:c3:06:f0:ab:6f:01:9d:8f:4b:88:9c:4e:1e:72:ae:
         53:3a:8f:cd:a5:20:36:15:ec:c5:e4:f5:e6:b8:e8:2c:e7:81:
         da:06:cc:7b:ee:76:e3:b2:54:e4:56:2b:ef:eb:b9:a6:b1:df:
         46:5b:e9:9e:48:9a:3b:68:36:bc:4b:7a:08:24:b8:78:8b:5e:
         dc:e5:b8:5d:87:35:56:5a:56:fe:86:05:9d:74:ef:ed:d4:46:
         49:d4:88:7b:9b:a9:27:d2:d0:e0:57:e0:0e:02:1f:00:d0:1a:
         54:3e:10:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 04:53:34 2026 by rpki-client