Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/414bd657-d141-3cbc-826b-0133cfdfe864.roa
File:                     414bd657-d141-3cbc-826b-0133cfdfe864.roa (raw, json)
Hash identifier:          g0dWuPuYBQ29Us367+ORsoyfZ69Y1rNHvNKs8qXCi2E=
Subject key identifier:   C5:D1:2A:C1:8F:EA:B6:F7:76:50:A5:C3:5F:49:C0:AB:A4:69:56:DB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DE5807F75C23508B55C196200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/414bd657-d141-3cbc-826b-0133cfdfe864.roa
Signing time:             Wed 20 May 2026 13:00:31 +0000
ROA not before:           Wed 20 May 2026 13:00:31 +0000
ROA not after:            Tue 18 Aug 2026 13:00:31 +0000
asID:                     149440
IP address blocks:        108.165.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e5:80:7f:75:c2:35:08:b5:5c:19:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 20 13:00:31 2026 GMT
            Not After : Aug 18 13:00:31 2026 GMT
        Subject: CN=43fcbc37-3b9e-4501-823c-6436d49f04bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4a:3f:45:92:76:46:46:8a:6b:77:11:3a:cb:
                    fa:82:23:ef:6c:8d:dc:6b:52:8d:bf:a2:64:65:da:
                    70:f5:13:31:17:a9:17:e4:d6:4c:f2:72:50:b4:a1:
                    75:08:e9:3d:34:83:28:a9:c3:4e:d4:4c:a6:c4:68:
                    c4:a6:52:ca:80:f5:e1:09:3f:cd:e5:a0:8b:90:2d:
                    63:97:fa:31:33:34:84:71:48:5e:72:17:a3:87:18:
                    76:1c:89:e2:69:9f:28:99:cb:de:a9:38:e7:92:b7:
                    63:4b:7e:59:d3:4b:93:97:46:d9:cd:b6:bb:33:9a:
                    51:d4:32:3f:17:aa:9f:99:e2:f8:58:b9:11:53:bd:
                    5a:c4:c0:da:07:22:cd:2f:79:0c:f0:b5:f5:5c:d9:
                    24:97:73:44:66:58:60:92:b6:41:bf:70:fd:73:aa:
                    a0:16:cb:aa:b0:0d:bb:be:72:85:8e:4b:3a:61:ab:
                    a0:7a:9d:58:b2:8a:bf:3b:dc:1d:52:c4:1a:4e:43:
                    89:24:ec:95:ea:ea:fd:70:a9:9a:ec:be:9b:1c:01:
                    5f:d1:7e:1b:78:83:da:c3:c2:dd:cb:25:d9:2f:dc:
                    41:4f:da:f9:d4:c2:a9:71:27:58:40:67:07:32:79:
                    d2:a3:b4:27:4f:80:87:82:35:c2:10:31:75:8e:a6:
                    5e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D1:2A:C1:8F:EA:B6:F7:76:50:A5:C3:5F:49:C0:AB:A4:69:56:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/414bd657-d141-3cbc-826b-0133cfdfe864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:55:b2:5f:7c:99:bd:0d:a1:c1:e4:56:f7:b0:9f:5e:f7:97:
         b7:5c:06:a9:63:d1:ee:a9:5d:ad:99:06:57:ff:f2:30:ee:55:
         48:8d:31:3c:f3:d5:af:bf:8f:48:6b:1b:61:27:c2:b8:1c:56:
         0b:ee:75:05:83:83:5c:70:3a:83:47:3d:54:69:0d:e6:ba:d7:
         a8:90:16:60:94:d3:9e:8f:e8:b1:41:d1:3c:92:d6:28:77:dc:
         c9:03:6e:e8:51:8e:fa:2d:81:17:48:d8:cc:0a:46:5a:0d:d8:
         9d:a1:10:69:64:a4:bf:f1:0e:ed:cc:87:50:ec:20:7c:17:09:
         d7:da:50:44:0b:c5:e9:03:91:cc:7c:c6:d1:f4:81:1b:16:17:
         3c:bd:2f:79:b5:57:7f:27:fe:30:1c:fa:f1:80:e6:c1:13:96:
         d4:4a:99:60:ce:21:16:91:6f:1b:e5:0d:e0:22:35:f6:1f:a6:
         d4:c6:d8:6c:5c:31:4e:5f:ef:16:cd:fd:59:9d:74:3e:3f:4e:
         57:15:32:7c:cd:79:6e:73:19:36:d3:b6:31:bb:e3:fe:3e:12:
         30:b6:0d:de:69:95:ed:42:3f:82:1f:67:7d:34:83:b1:0c:85:
         20:5a:1c:c6:1e:92:8f:09:b4:c8:8d:f1:d9:0f:3c:4a:6a:1b:
         1d:51:f2:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3lgH91wjUItVwZYgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDUyMDEzMDAzMVoXDTI2MDgxODEzMDAzMVowLzEtMCsGA1UEAxMk
NDNmY2JjMzctM2I5ZS00NTAxLTgyM2MtNjQzNmQ0OWYwNGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEo/RZJ2RkaKa3cROsv6giPvbI3ca1KNv6Jk
Zdpw9RMxF6kX5NZM8nJQtKF1COk9NIMoqcNO1EymxGjEplLKgPXhCT/N5aCLkC1j
l/oxMzSEcUhechejhxh2HIniaZ8omcveqTjnkrdjS35Z00uTl0bZzba7M5pR1DI/
F6qfmeL4WLkRU71axMDaByLNL3kM8LX1XNkkl3NEZlhgkrZBv3D9c6qgFsuqsA27
vnKFjks6Yaugep1Ysoq/O9wdUsQaTkOJJOyV6ur9cKma7L6bHAFf0X4beIPaw8Ld
yyXZL9xBT9r51MKpcSdYQGcHMnnSo7QnT4CHgjXCEDF1jqZeCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMXRKsGP6rb3dlClw19JwKukaVbbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDE0YmQ2NTctZDE0MS0z
Y2JjLTgyNmItMDEzM2NmZGZlODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHJVsl98mb0NocHkVvewn173l7dcBqlj0e6pXa2ZBlf/8jDuVUiNMTzz
1a+/j0hrG2EnwrgcVgvudQWDg1xwOoNHPVRpDea616iQFmCU056P6LFB0TyS1ih3
3MkDbuhRjvotgRdI2MwKRloN2J2hEGlkpL/xDu3Mh1DsIHwXCdfaUEQLxekDkcx8
xtH0gRsWFzy9L3m1V38n/jAc+vGA5sETltRKmWDOIRaRbxvlDeAiNfYfptTG2Gxc
MU5f7xbN/VmddD4/TlcVMnzNeW5zGTbTtjG74/4+EjC2Dd5ple1CP4IfZ300g7EM
hSBaHMYeko8JtMiN8dkPPEpqGx1R8mA=
-----END CERTIFICATE-----
Generated at Sat Jun 6 15:58:15 2026 by rpki-client