Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2a1515ff-6abd-310d-b868-e865576adb3b.roa
File:                     2a1515ff-6abd-310d-b868-e865576adb3b.roa (raw, json)
Hash identifier:          +yrVbGLTrheeUfiTeqTK31GAs4xDtT4C7Yvelxl3mqo=
Subject key identifier:   F6:AB:43:37:9E:B5:7D:D9:DA:13:DB:79:1A:53:08:62:DD:D0:99:50
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D62C2BD85CA6A9ACA20194440
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2a1515ff-6abd-310d-b868-e865576adb3b.roa
Signing time:             Fri 03 Apr 2026 17:03:10 +0000
ROA not before:           Fri 03 Apr 2026 17:03:10 +0000
ROA not after:            Thu 02 Jul 2026 17:03:10 +0000
asID:                     8881
IP address blocks:        108.165.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:c2:bd:85:ca:6a:9a:ca:20:19:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  3 17:03:10 2026 GMT
            Not After : Jul  2 17:03:10 2026 GMT
        Subject: CN=e799626e-7f96-421f-84f0-2632ebc77a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f8:bf:00:d3:f3:3b:80:2b:fb:ee:52:7a:d9:
                    7d:5d:a6:5d:bf:53:27:02:4d:2d:41:b1:93:cd:47:
                    d0:a3:3c:0b:69:95:25:74:c6:91:a0:80:f8:3c:43:
                    ae:c9:1b:8d:77:b4:f1:6b:20:4b:15:a0:4d:be:18:
                    e6:a9:04:d4:45:58:fe:37:92:cf:52:cc:ea:9f:40:
                    2a:e8:10:1f:fc:6d:e8:23:27:0c:ff:61:c5:9f:a1:
                    47:41:b8:87:06:6e:0e:f0:ae:0e:cb:6e:b3:e3:c9:
                    00:9a:d9:14:a7:eb:df:28:55:63:9b:6a:ac:8c:85:
                    cf:9f:df:33:b0:01:90:79:dc:d7:97:43:47:e0:0f:
                    2d:0b:0f:3b:8d:93:48:32:fa:1a:64:16:16:aa:c0:
                    3d:92:4b:9c:4b:9d:66:06:2f:28:20:2f:2d:40:35:
                    5f:38:2d:df:65:0d:34:80:e6:71:de:31:77:da:09:
                    5f:32:13:01:8b:87:66:ad:b6:f4:2b:68:1a:ba:b5:
                    e5:f5:73:28:e7:27:e6:50:30:b6:c5:17:80:e7:ce:
                    3b:ad:4c:3e:ec:03:86:6c:c2:b8:2c:92:bb:11:45:
                    c7:67:3f:30:1a:e0:4f:bd:86:47:86:12:95:71:22:
                    64:9c:9a:e6:6a:63:4c:9d:cb:68:74:73:69:65:ae:
                    ff:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AB:43:37:9E:B5:7D:D9:DA:13:DB:79:1A:53:08:62:DD:D0:99:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2a1515ff-6abd-310d-b868-e865576adb3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:31:17:4c:7c:7a:9f:d8:91:da:25:23:fe:9a:9a:3c:77:9f:
         58:29:7e:1d:39:58:f8:9b:14:e9:fd:23:95:3f:0b:6e:7c:f0:
         c8:ff:70:7f:f6:91:75:b9:41:6e:0d:a6:03:7f:bd:57:a7:b4:
         aa:25:11:97:b5:6e:c8:24:fd:21:df:68:0c:cd:d1:da:a5:0d:
         ef:a3:fd:21:71:9f:a2:df:d9:b7:95:15:3e:9d:e4:31:7c:48:
         6d:aa:12:26:1d:c0:eb:fd:54:56:01:2a:ba:4b:e5:c2:40:30:
         64:ee:b8:f4:9f:be:0f:3e:fc:69:b7:c9:b1:a9:89:60:66:05:
         c0:6a:8b:79:63:38:04:fa:79:0f:75:13:5d:95:28:4d:96:cf:
         66:f4:41:a1:9f:6f:89:1d:5f:18:35:2b:0b:07:12:9d:0a:2c:
         0e:b4:ab:ff:9a:95:63:3c:7a:4e:98:18:b8:c2:53:a3:3d:e4:
         38:62:b6:62:5a:ff:c9:05:db:91:db:f7:71:30:31:9f:de:ed:
         99:df:89:81:13:c1:c2:e6:20:90:b5:db:09:45:25:c1:6e:ea:
         64:dc:2c:6c:80:67:eb:27:90:f9:16:a1:9e:4d:a2:ed:1d:d8:
         c0:c5:43:56:95:6b:13:65:d7:33:a7:c0:a8:a9:16:1c:a2:a5:
         ba:52:75:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 4 15:28:19 2026 by rpki-client