Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3450b1f1-05a7-3385-8484-9b0078ecbc9b.roa
File:                     3450b1f1-05a7-3385-8484-9b0078ecbc9b.roa (raw, json)
Hash identifier:          X9HXKP/CSISKFX42/wyLQmdcGwHku9Uu1icaeaBL78c=
Subject key identifier:   B0:36:FE:31:34:73:EF:A3:03:10:0E:32:C9:AF:81:7B:F4:56:EF:8D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E428F2F05FCDD435EB152FB10
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3450b1f1-05a7-3385-8484-9b0078ecbc9b.roa
Signing time:             Mon 22 Jun 2026 21:00:12 +0000
ROA not before:           Mon 22 Jun 2026 21:00:12 +0000
ROA not after:            Sun 20 Sep 2026 21:00:12 +0000
asID:                     8881
IP address blocks:        108.165.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:8f:2f:05:fc:dd:43:5e:b1:52:fb:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 22 21:00:12 2026 GMT
            Not After : Sep 20 21:00:12 2026 GMT
        Subject: CN=0c8fd610-2126-4ec7-aac8-8c82cff88f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:dc:d9:8b:7c:73:36:87:9b:bf:4c:b4:9d:01:
                    e4:73:ad:2a:29:fa:77:f3:34:0c:c0:5f:26:e8:00:
                    76:dc:d5:5b:b8:77:5f:1d:23:82:c0:5e:ff:29:80:
                    ba:86:c5:a2:c1:5b:e9:e0:68:47:95:04:06:8f:5b:
                    e0:a9:ee:6f:6f:3c:ec:2e:24:be:4b:2b:17:b3:c0:
                    31:86:76:ce:c9:11:c9:f7:2f:1d:8b:82:89:fd:1c:
                    12:08:dc:24:ce:fb:0d:07:95:5a:f4:b5:63:6b:6a:
                    d4:a4:50:bc:9a:8e:75:e4:8c:2e:95:0d:88:77:6b:
                    37:d2:fa:7e:59:cb:cc:12:13:bb:86:09:38:28:c7:
                    34:07:b4:32:63:7a:cd:a8:ce:10:b5:f9:8a:1b:67:
                    b7:bd:b4:2d:0e:3e:e5:af:7a:c3:99:28:33:c7:dd:
                    26:ae:16:a8:74:5e:4d:f7:96:00:0c:0c:9a:bb:5c:
                    94:df:75:a4:52:28:29:58:f2:83:50:18:04:a5:87:
                    3c:09:0c:31:2e:b4:55:87:a0:74:50:c0:a5:91:e9:
                    bd:5b:73:16:4d:4d:3a:a9:95:96:86:c8:43:e7:ab:
                    a1:fc:13:3c:ba:9e:c2:7d:6c:1d:86:03:3b:a2:f6:
                    6d:57:25:7f:90:87:32:e3:6b:f9:fe:27:0d:2f:88:
                    b4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:36:FE:31:34:73:EF:A3:03:10:0E:32:C9:AF:81:7B:F4:56:EF:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3450b1f1-05a7-3385-8484-9b0078ecbc9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f7:6a:09:ae:94:ba:8d:51:d4:e9:bd:07:a5:25:5e:d8:4f:
         94:6f:64:2a:a1:ef:99:05:73:05:ff:da:1c:5c:3f:46:f5:be:
         b3:b2:c7:33:a4:fc:21:b0:da:ff:46:b9:2c:37:83:ce:a3:d2:
         3c:3d:6f:f9:47:15:71:32:1e:ac:f5:a0:be:06:9c:04:86:2f:
         2d:3f:66:4c:e1:71:08:e8:c1:cd:17:a8:ff:a6:bb:f3:9c:61:
         ce:d7:4a:5d:82:0f:e8:0d:df:0f:c3:41:37:76:35:db:d7:aa:
         0b:66:4b:a8:9d:62:7a:a6:35:0a:50:0f:a5:88:b9:cb:83:10:
         0d:a1:b6:d0:a5:d3:de:f8:d9:3f:cc:33:e1:91:d7:89:b9:24:
         ae:5d:c4:88:8e:04:d4:ff:0a:28:b4:6b:32:cd:63:25:38:4b:
         d2:18:b3:31:60:c6:39:31:7f:45:2c:36:8f:9c:38:bf:8c:05:
         ea:01:05:74:e4:fe:cc:6d:6c:cd:ae:bc:f4:4d:22:23:d4:31:
         42:a2:47:d3:39:fb:82:e4:ac:b0:9e:d4:0a:aa:d0:71:11:ed:
         b9:8c:e8:fc:9f:15:bf:2a:7e:cf:c0:e2:6f:b8:de:8d:49:8d:
         a1:d5:29:95:03:33:52:2a:22:9b:bc:e6:1d:59:bd:ea:e3:7c:
         ff:a0:c3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 04:32:03 2026 by rpki-client