Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/228e30d1-1924-3bfd-ad85-0703f7ba73fb.roa
File:                     228e30d1-1924-3bfd-ad85-0703f7ba73fb.roa (raw, json)
Hash identifier:          geUpH/pSCVeE/5PhmayrN7NyksytzcEZQRl+dW3DgZg=
Subject key identifier:   64:5F:41:FD:80:84:24:4F:BB:77:D1:1D:48:F4:C3:48:0C:DC:AA:1D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EF4E800A746695532C232C880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/228e30d1-1924-3bfd-ad85-0703f7ba73fb.roa
Signing time:             Tue 25 Aug 2026 18:13:12 +0000
ROA not before:           Tue 25 Aug 2026 18:13:12 +0000
ROA not after:            Mon 23 Nov 2026 19:13:12 +0000
asID:                     3257
IP address blocks:        108.165.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:e8:00:a7:46:69:55:32:c2:32:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 25 18:13:12 2026 GMT
            Not After : Nov 23 19:13:12 2026 GMT
        Subject: CN=3a3ec0b6-8c32-4efd-b2c8-671f9eac0ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:35:a3:b1:d3:14:65:fd:60:09:9f:20:bd:e9:
                    2d:38:ff:52:40:de:f2:05:21:f0:85:a0:80:b9:c2:
                    25:7e:52:c4:65:05:1e:d0:fa:e8:70:0a:8a:f0:14:
                    61:42:dd:28:71:9f:c3:0f:c3:15:2d:08:88:d8:34:
                    f0:90:ae:32:3e:a9:ab:21:39:63:61:45:dd:24:1d:
                    d3:83:20:8c:b9:2e:5d:7f:d0:a3:e4:e0:78:06:50:
                    92:0e:8b:7d:c8:bd:6e:f7:40:5f:7f:07:fe:dd:ed:
                    c1:79:6b:c4:f1:e3:16:4c:04:db:0e:b2:2b:39:84:
                    60:92:bc:a1:a8:bb:2a:92:85:0a:25:1a:2a:e6:9c:
                    d5:bc:46:5b:ba:a6:06:66:97:95:50:e2:46:df:7d:
                    8c:0e:7e:3a:12:93:e2:93:3d:95:57:a9:c0:67:e2:
                    98:d7:17:db:3e:3b:6c:2b:3b:0d:1f:67:8b:79:d1:
                    6e:8f:aa:50:ee:f3:23:aa:eb:87:f2:a9:46:81:66:
                    22:cb:d4:76:0a:5b:0c:65:98:4a:56:71:21:ad:bd:
                    eb:ae:fb:d4:38:fa:20:3c:f0:a9:3e:d6:80:b4:a5:
                    57:f1:fb:96:24:1f:41:b3:f4:df:92:df:0c:bb:d7:
                    62:be:3c:13:28:d2:66:f0:fd:68:50:02:5f:c6:e7:
                    1c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:5F:41:FD:80:84:24:4F:BB:77:D1:1D:48:F4:C3:48:0C:DC:AA:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/228e30d1-1924-3bfd-ad85-0703f7ba73fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:c6:3c:6d:8a:cd:43:ce:0d:4d:19:a3:2c:e7:12:38:c7:fd:
         d8:d0:40:df:83:3e:b7:98:0b:ab:a3:43:00:74:ee:c9:45:85:
         80:34:58:f8:e2:ed:df:db:1a:57:6a:08:6f:a0:23:f6:42:84:
         11:89:ce:64:21:46:fc:cf:1c:a9:a2:6b:4b:e8:b3:40:23:74:
         a6:d4:dd:49:fa:0a:11:c7:62:e0:c4:ec:0a:15:27:c5:18:3c:
         88:ed:03:86:e4:d0:fd:52:78:f3:3d:34:a9:07:ab:a8:4c:e3:
         47:73:c2:3d:4d:f5:dd:89:dd:fe:7b:a9:e5:d4:d3:73:26:f8:
         ba:46:96:0a:44:f6:c7:96:c4:3e:e0:d2:6c:ab:bf:cf:3e:f6:
         ab:05:d4:34:eb:55:8e:18:01:9c:15:96:77:52:c9:08:ec:26:
         fb:1d:b4:9a:a9:a2:c2:1c:23:56:11:f5:6c:22:72:bf:40:17:
         5d:2c:58:d1:78:e9:af:ce:54:9b:41:16:9d:b4:ce:f3:49:4c:
         50:e5:6b:13:a5:6a:83:f5:56:cb:88:6a:20:8b:33:76:aa:96:
         30:b4:44:e2:9a:56:35:22:47:a4:23:36:72:ca:46:3d:43:52:
         71:0c:52:c5:dc:2f:ad:b6:c8:e5:d9:3e:c4:91:6a:a2:2a:84:
         fa:b9:83:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:27:59 2026 by rpki-client