Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f5ba5bb-b675-3252-867d-042fc5360e20.roa
File:                     3f5ba5bb-b675-3252-867d-042fc5360e20.roa (raw, json)
Hash identifier:          zyshgg5TJKZ7EGV9vy6KcRkDhV//NvwYKL6cK/nyPkQ=
Subject key identifier:   1F:53:99:4C:BF:6A:13:C1:38:4B:CC:30:92:17:64:00:74:87:33:C6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EB57C4D892F994554AF750300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f5ba5bb-b675-3252-867d-042fc5360e20.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     263812
IP address blocks:        108.165.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Aug 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:4d:89:2f:99:45:54:af:75:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=6eab4ab8-64a6-41c5-a612-f6372f4551c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:08:48:c0:9b:18:63:97:63:1a:df:28:1f:7b:
                    4f:9f:99:a0:e0:d7:44:c0:74:47:e1:61:98:53:f6:
                    d0:03:19:1b:81:61:05:60:47:96:c6:44:05:d4:1d:
                    da:a3:bb:e1:3b:88:1f:a9:2f:e4:c0:8e:95:b0:ae:
                    e0:18:d7:05:86:e6:fe:9c:80:ba:8f:40:2d:12:f3:
                    0c:81:ca:13:de:ad:a7:6e:d5:96:30:3a:ab:21:81:
                    c1:e7:eb:12:ae:95:a5:b4:51:40:de:bf:b6:5c:0e:
                    5c:38:1c:80:c2:75:46:91:50:b8:dc:94:d7:a5:7c:
                    ff:a1:ba:c3:52:a2:04:2a:74:c6:e6:2e:74:87:ce:
                    dc:10:df:ad:a3:0b:14:e3:31:a0:74:4f:c1:26:7a:
                    37:9f:8f:bc:ae:f6:84:03:da:c5:4f:11:1d:6f:f0:
                    af:54:c5:c4:56:6c:70:3f:05:e6:e1:bc:0d:4d:f1:
                    96:92:f6:d5:5e:44:61:1e:de:0d:3d:47:eb:23:d9:
                    61:d1:1e:8a:5d:80:bc:f1:17:14:fc:92:97:db:a6:
                    41:cc:0d:ac:5c:53:16:98:b7:38:79:5f:47:0c:70:
                    9e:61:95:f7:bd:36:59:7e:41:bb:34:48:e1:b8:47:
                    0b:75:4e:27:1b:f6:60:d0:da:ec:0b:0e:84:5d:ea:
                    b4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:53:99:4C:BF:6A:13:C1:38:4B:CC:30:92:17:64:00:74:87:33:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f5ba5bb-b675-3252-867d-042fc5360e20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:51:10:10:d7:08:bc:f0:d6:b6:4b:de:90:49:00:83:16:3d:
         b2:43:3d:84:a4:fc:47:51:75:79:52:bd:0a:ad:a4:b0:f0:f5:
         2b:81:72:b7:01:bd:96:de:28:9f:9e:50:8d:30:9a:4d:25:5f:
         63:60:26:e3:d6:f4:ac:58:dc:ee:25:f9:e1:ef:4e:db:68:26:
         d0:bc:cd:21:34:69:70:c0:2d:20:a1:f3:09:a6:9f:64:1a:e7:
         58:56:35:73:0c:68:b2:9b:df:63:31:e0:1c:0e:4d:1c:fa:32:
         d2:f1:42:25:fd:89:c2:c3:c8:50:6e:e5:a5:7e:b9:a0:fd:b8:
         63:90:98:f4:9d:07:c9:76:56:78:6c:5f:0b:3f:33:6d:31:84:
         ce:61:89:15:64:4f:4c:bf:3a:bf:d6:b7:5b:83:42:16:8f:5f:
         7c:dc:32:7d:c3:c8:bf:36:fc:ed:9d:a9:46:6e:28:0d:a3:d4:
         11:4e:b2:40:68:1b:c4:7e:4a:20:30:af:19:f0:49:e5:25:19:
         55:55:fe:f2:92:bb:80:22:71:2b:59:04:f6:c4:e9:8f:79:98:
         26:83:e3:4a:c8:08:7c:2d:95:a7:5b:8f:00:06:78:07:1e:40:
         ec:7e:c6:e2:2d:49:b5:0d:4c:7b:cd:13:e8:fc:2e:61:37:4b:
         2c:de:27:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 01:15:21 2026 by rpki-client