Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/247aa729-3fbc-30b1-b195-c013af53147b.roa
File:                     247aa729-3fbc-30b1-b195-c013af53147b.roa (raw, json)
Hash identifier:          32zS4Dyep0h+Qw+lCiQW36to1xBehNsOUpf0Od6Txik=
Subject key identifier:   B4:3F:FB:8F:9A:2C:56:A1:F0:91:79:CE:88:9A:F4:E8:0E:EC:D5:44
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B970D063AB0A0629E6264FA00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/247aa729-3fbc-30b1-b195-c013af53147b.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     401152
IP address blocks:        108.165.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0d:06:3a:b0:a0:62:9e:62:64:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=0caf3645-cc29-48fd-99d1-7f8f475c4e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4c:21:af:00:aa:50:88:de:93:eb:78:31:f7:
                    97:67:5a:e1:69:bb:41:79:75:fb:89:02:c8:bf:f2:
                    84:aa:df:7d:14:13:ea:8b:e4:8a:7b:ee:ac:2a:f9:
                    42:67:2f:40:5b:19:c0:0a:c2:88:d0:d3:dd:64:b6:
                    4d:06:73:ec:8a:e8:8d:4d:d2:6a:33:52:46:bb:f7:
                    61:ff:b4:78:5d:00:49:bd:69:e8:d9:77:7a:5b:23:
                    79:0f:35:3b:0c:4a:3f:99:48:f9:74:59:7f:3d:eb:
                    3f:b0:09:cd:ad:1d:bc:af:70:14:a0:d9:42:4b:d0:
                    14:fa:88:dc:04:9c:21:a8:22:27:f6:b9:83:dc:16:
                    18:ae:e5:e0:1e:fa:5e:97:76:39:0a:43:4b:0f:1e:
                    f2:84:96:fd:70:64:21:fd:23:b4:73:d3:f4:20:7b:
                    92:37:73:15:c3:24:49:9d:85:a9:78:b5:d3:03:a8:
                    c9:04:f9:cf:98:8c:6f:60:50:15:b3:30:f4:02:a7:
                    10:8e:40:20:bf:c4:f6:b2:0c:d1:be:f5:28:f9:a9:
                    45:4c:0a:f4:e2:e5:22:86:ef:a5:4a:0d:0a:cd:a3:
                    2c:c8:f1:89:01:b9:7d:96:0e:83:28:73:40:f6:d2:
                    fb:bf:1c:31:59:de:8d:40:ae:1e:f9:cc:5d:07:d5:
                    1a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3F:FB:8F:9A:2C:56:A1:F0:91:79:CE:88:9A:F4:E8:0E:EC:D5:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/247aa729-3fbc-30b1-b195-c013af53147b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:32:6c:60:6d:c4:35:e4:2d:26:89:d8:e3:45:6d:61:5a:a2:
         bc:6e:e7:f1:88:a8:e1:99:1c:69:22:ce:89:0e:e5:75:5a:06:
         29:1a:df:73:87:d5:7b:be:d9:ee:5f:6e:5e:85:77:34:40:b7:
         4a:a1:5e:fd:a8:ef:46:71:47:a9:62:f6:f1:84:e8:33:bc:d3:
         f0:db:bf:46:d9:24:45:8f:ff:c3:26:d3:8a:d3:c8:dc:13:98:
         a7:32:1c:fa:98:18:d8:74:65:ae:bb:f0:02:85:2a:11:c4:cf:
         30:57:61:64:73:6f:80:73:93:49:9a:c4:b7:55:c3:dc:b0:7c:
         ed:48:33:b9:32:f6:c3:4d:9a:71:7d:57:d6:e9:35:1f:c1:66:
         e9:fa:cd:41:1b:6f:57:c7:60:2b:13:36:b4:c0:85:f9:6d:79:
         94:c8:90:d1:d0:3b:a7:48:22:c0:82:f6:8b:a1:5f:8a:c0:b2:
         be:ea:2b:77:3e:a7:de:ad:c2:82:2b:8b:5a:90:88:15:51:8d:
         79:66:97:24:82:0d:11:50:84:da:7b:15:d9:cb:e1:33:ca:f3:
         80:91:99:e4:d2:ff:28:a9:9c:6c:c9:7e:2d:19:05:40:0f:a8:
         33:84:12:f0:3d:f8:6c:2b:14:0d:16:d8:98:07:88:bb:cf:3a:
         dc:fb:f1:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDQY6sKBinmJk+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk
MGNhZjM2NDUtY2MyOS00OGZkLTk5ZDEtN2Y4ZjQ3NWM0ZTFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0whrwCqUIjek+t4MfeXZ1rhabtBeXX7iQLI
v/KEqt99FBPqi+SKe+6sKvlCZy9AWxnACsKI0NPdZLZNBnPsiuiNTdJqM1JGu/dh
/7R4XQBJvWno2Xd6WyN5DzU7DEo/mUj5dFl/Pes/sAnNrR28r3AUoNlCS9AU+ojc
BJwhqCIn9rmD3BYYruXgHvpel3Y5CkNLDx7yhJb9cGQh/SO0c9P0IHuSN3MVwyRJ
nYWpeLXTA6jJBPnPmIxvYFAVszD0AqcQjkAgv8T2sgzRvvUo+alFTAr04uUihu+l
Sg0KzaMsyPGJAbl9lg6DKHNA9tL7vxwxWd6NQK4e+cxdB9UaVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLQ/+4+aLFah8JF5zoia9OgO7NVEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjQ3YWE3MjktM2ZiYy0z
MGIxLWIxOTUtYzAxM2FmNTMxNDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAEybGBtxDXkLSaJ2ONFbWFaorxu5/GIqOGZHGkizokO5XVaBika33OH
1Xu+2e5fbl6FdzRAt0qhXv2o70ZxR6li9vGE6DO80/Dbv0bZJEWP/8Mm04rTyNwT
mKcyHPqYGNh0Za678AKFKhHEzzBXYWRzb4Bzk0maxLdVw9ywfO1IM7ky9sNNmnF9
V9bpNR/BZun6zUEbb1fHYCsTNrTAhflteZTIkNHQO6dIIsCC9ouhX4rAsr7qK3c+
p96twoIri1qQiBVRjXlmlySCDRFQhNp7FdnL4TPK84CRmeTS/yipnGzJfi0ZBUAP
qDOEEvA9+GwrFA0W2JgHiLvPOtz78Zk=
-----END CERTIFICATE-----
Generated at Sun Nov 2 16:49:30 2025 by rpki-client