Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b42c4b2-0b3f-30ca-bde5-e277f26ebc14.roa
File:                     3b42c4b2-0b3f-30ca-bde5-e277f26ebc14.roa (raw, json)
Hash identifier:          Kg7aPpK64aKwXaZdtfNxdt3QngHx3arYar6jwjfdPKc=
Subject key identifier:   D8:4D:A6:28:6B:DD:50:EA:87:44:D6:BE:94:8B:58:99:0A:86:15:A2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D4461DAAD6A5059337BEAEC80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b42c4b2-0b3f-30ca-bde5-e277f26ebc14.roa
Signing time:             Mon 23 Mar 2026 19:53:42 +0000
ROA not before:           Mon 23 Mar 2026 19:53:42 +0000
ROA not after:            Sun 21 Jun 2026 19:53:42 +0000
asID:                     11798
IP address blocks:        108.165.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:61:da:ad:6a:50:59:33:7b:ea:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 23 19:53:42 2026 GMT
            Not After : Jun 21 19:53:42 2026 GMT
        Subject: CN=220630ca-a846-4d34-863e-8b9c790c4972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:aa:da:ab:15:44:35:66:78:5e:89:16:80:7f:
                    bc:7d:48:8c:c9:d5:09:54:33:4e:9a:8b:bc:10:d4:
                    41:fe:83:1a:ef:36:e4:86:3f:1c:a3:83:10:8a:82:
                    52:c2:0a:db:80:d6:e4:14:06:76:60:df:4d:69:22:
                    86:19:2c:da:7e:6c:cb:e9:0b:bf:68:5d:8d:49:d6:
                    04:63:d7:33:0b:ab:a3:44:6a:40:e6:8b:e8:dd:7f:
                    f8:54:7f:bb:73:09:bf:28:15:e9:85:b0:94:f7:b2:
                    95:c6:e7:1e:12:cc:b7:20:55:90:30:55:2a:a4:37:
                    20:06:5b:97:2d:3a:dd:5a:46:aa:c5:8b:c9:af:d1:
                    7e:86:cd:ad:7c:da:c7:9d:37:0a:72:af:13:3d:5a:
                    ce:db:dd:ac:70:4a:ba:56:bd:c5:e4:ae:06:39:13:
                    59:7c:a9:eb:0b:da:fc:29:4e:3b:2c:81:ee:c8:6f:
                    89:63:60:97:ea:99:1b:32:1f:09:54:00:eb:3a:1f:
                    4d:60:8d:da:76:95:f3:4f:4c:c1:64:04:bd:5a:b8:
                    e7:12:93:e1:e8:95:6b:0e:36:37:fc:da:53:e8:a3:
                    7e:b7:df:ca:a4:d3:ec:c6:e6:0d:1b:93:d7:d6:1e:
                    e3:93:ff:50:35:97:9f:6c:c7:28:d2:d7:95:69:50:
                    7b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4D:A6:28:6B:DD:50:EA:87:44:D6:BE:94:8B:58:99:0A:86:15:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b42c4b2-0b3f-30ca-bde5-e277f26ebc14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:49:4c:46:22:54:23:13:fe:dc:69:05:a0:fe:b4:1f:b8:be:
         0c:60:63:b8:e9:0f:b2:c8:fd:1c:34:54:4f:97:f6:83:23:01:
         6f:48:4c:bd:de:31:3a:8b:64:9d:d3:67:37:aa:c1:0e:02:42:
         9f:62:71:36:9f:05:b2:a0:d1:01:ad:32:d0:6c:21:bd:b8:eb:
         0a:11:e2:d3:ad:fa:5d:5d:ed:e4:32:74:08:9c:22:ee:2c:46:
         06:ce:c1:a9:93:c4:c8:c7:55:f2:63:c5:b4:6a:0b:36:a8:aa:
         c9:49:4f:f2:38:9f:f0:c9:aa:02:c9:e6:6b:1a:ed:e1:d3:44:
         ae:cc:ba:8f:fd:30:6b:32:99:dd:53:4a:9c:55:7e:e3:52:06:
         67:65:a2:56:8e:d3:5e:5c:b0:16:4f:6a:5d:78:eb:83:22:ee:
         5d:06:87:a7:3e:26:cc:f7:05:2d:09:27:40:d2:3e:7d:fd:5c:
         d8:b9:c7:84:9e:de:49:00:a9:1f:70:3c:fe:4a:d6:63:75:d2:
         2b:32:cd:3d:1f:fb:4f:d0:ca:bb:20:20:7c:89:cf:e6:1c:05:
         b5:67:ed:e4:41:3e:f7:03:83:5e:2e:f0:dd:50:e0:dc:6c:50:
         35:7e:b8:f4:f1:49:be:58:a2:74:31:05:2c:73:7c:09:06:6d:
         9f:e4:d0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 22:30:03 2026 by rpki-client