Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4257857b-c738-39e5-a9d5-5ed409b12519.roa
File:                     4257857b-c738-39e5-a9d5-5ed409b12519.roa (raw, json)
Hash identifier:          vnTN2ymJ47lemz9y8zf9EmHj+FeO+RFcTtfmNn9Qcts=
Subject key identifier:   25:D0:CA:04:D3:E5:80:A7:DF:AF:DB:39:89:84:DD:01:59:3D:4A:7E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DB340301CDF5073D5EF12BDC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4257857b-c738-39e5-a9d5-5ed409b12519.roa
Signing time:             Sat 02 May 2026 13:00:31 +0000
ROA not before:           Sat 02 May 2026 13:00:31 +0000
ROA not after:            Fri 31 Jul 2026 13:00:31 +0000
asID:                     21859
IP address blocks:        108.165.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b3:40:30:1c:df:50:73:d5:ef:12:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  2 13:00:31 2026 GMT
            Not After : Jul 31 13:00:31 2026 GMT
        Subject: CN=01f3d78c-53f8-4a16-b48b-d1e89729f899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:81:93:5f:ee:9a:5c:b2:44:73:1e:2d:ba:8d:
                    66:b7:fa:57:eb:cc:53:55:b9:1b:ce:55:3f:fd:12:
                    7c:85:4c:d0:df:e4:e4:fd:e3:2b:46:0e:42:f7:c5:
                    d0:37:f8:e9:86:57:2d:ac:f6:46:8f:af:0f:17:42:
                    4c:4c:bf:01:5f:5b:39:14:a1:3a:df:2c:e3:50:a0:
                    ed:c5:97:c2:5f:97:3a:9b:21:8e:90:4c:a9:45:91:
                    6d:ca:f1:72:cc:c7:4d:b6:5d:f7:a2:d8:8c:dd:fa:
                    f4:50:c5:00:93:a7:c8:88:60:d5:aa:f8:2c:15:ec:
                    e7:59:d5:dc:0d:56:0f:ca:94:84:de:68:b9:a1:41:
                    51:e4:e0:d0:9d:f0:86:25:93:93:b6:c0:49:3a:f7:
                    a0:fb:80:eb:33:5c:35:57:be:77:cc:90:ed:93:12:
                    0a:2a:b1:e5:82:7b:a0:21:34:c0:4d:ea:e2:d8:da:
                    2d:a7:02:91:dd:66:bd:a7:59:5e:21:69:11:49:8e:
                    83:1f:34:e4:35:c2:60:12:28:ed:d9:e1:a7:14:d5:
                    1e:cc:58:2f:8a:53:93:de:0d:da:aa:da:48:a8:15:
                    6f:2f:5f:de:06:60:f9:21:d2:09:cd:a1:5e:c4:70:
                    fb:88:da:e2:21:3a:d0:c8:2d:81:84:e8:97:59:31:
                    14:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D0:CA:04:D3:E5:80:A7:DF:AF:DB:39:89:84:DD:01:59:3D:4A:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4257857b-c738-39e5-a9d5-5ed409b12519.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:a7:ee:8e:55:b4:c6:6b:2e:90:23:10:27:a9:da:ee:e4:e8:
         00:6f:7c:06:37:f0:ef:80:e6:76:16:3e:55:23:35:3e:8d:0d:
         4d:4a:26:93:95:bd:fd:9d:27:c8:9c:64:4c:c6:8c:7c:db:67:
         05:02:a5:2e:48:39:12:ac:e5:bd:74:ca:ba:4f:79:c9:29:3c:
         07:6e:9d:e6:47:4e:bb:4c:f5:d2:e9:ea:76:a2:02:21:8f:1d:
         35:39:8f:0f:c4:0e:8f:6a:03:da:4e:a0:ee:d7:5d:41:e9:9f:
         cb:5b:d5:f9:2a:c8:0d:4a:da:26:d8:f2:d9:21:1c:d3:ea:49:
         b0:04:f8:6c:50:3f:e7:2d:1b:0f:b2:9f:cc:29:66:66:74:65:
         a5:3b:7d:fc:60:40:b7:53:2b:5d:80:a8:88:fb:f5:f9:48:2a:
         17:4f:de:02:dc:19:bb:ea:ff:47:95:6e:16:20:b5:ee:1b:7b:
         dc:96:dc:f3:93:fe:76:a6:ad:ce:66:7d:ea:9e:de:ae:14:29:
         68:e1:58:df:5b:a3:ce:cc:1a:cb:31:79:75:8c:72:e5:c6:63:
         6c:b0:6a:96:1f:97:1e:c5:dd:53:ce:39:6e:4f:f7:99:29:92:
         dc:3b:37:ad:d6:88:aa:7e:07:31:e8:db:6f:1b:f4:fe:a2:a4:
         c4:35:1f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 12:58:12 2026 by rpki-client