Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/448baffd-252b-3484-97af-bddb551eb8a5.roa
File:                     448baffd-252b-3484-97af-bddb551eb8a5.roa (raw, json)
Hash identifier:          Tp6f52sB3yPpW1u4mv83ELLZ7+tjZdvHryYmkQnH0k0=
Subject key identifier:   5E:6C:0A:B0:B5:87:20:D8:05:11:9A:23:D8:5A:29:73:48:9A:70:00
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DB3402FEF57822685BC15A640
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/448baffd-252b-3484-97af-bddb551eb8a5.roa
Signing time:             Sat 02 May 2026 13:00:31 +0000
ROA not before:           Sat 02 May 2026 13:00:31 +0000
ROA not after:            Fri 31 Jul 2026 13:00:31 +0000
asID:                     21859
IP address blocks:        108.165.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b3:40:2f:ef:57:82:26:85:bc:15:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  2 13:00:31 2026 GMT
            Not After : Jul 31 13:00:31 2026 GMT
        Subject: CN=c6424048-4970-4b20-9651-f291d86651bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4c:2f:61:7c:16:d7:f6:49:68:6d:0e:fb:58:
                    4f:f0:32:fd:65:69:a7:64:ec:29:f6:5a:fd:6a:f6:
                    43:c3:39:de:48:db:ae:14:1a:66:3b:90:92:81:91:
                    7c:6c:a7:36:85:13:0c:c1:44:e2:6b:1c:0a:0a:74:
                    ea:48:4d:37:b5:c3:30:59:ca:75:70:d6:6e:06:33:
                    f0:8c:b5:4c:64:eb:ce:da:e6:7c:7c:ef:42:00:11:
                    3f:c5:1f:f0:0b:6d:de:02:d2:c7:85:ba:11:c9:5d:
                    bc:d2:14:1d:a3:86:f8:79:57:f6:1d:67:f1:08:20:
                    72:6b:1c:22:ad:40:71:b7:a2:09:cc:93:d8:ab:87:
                    96:47:61:ec:ec:9d:64:46:e6:2a:bd:64:d4:c0:0e:
                    a7:be:96:a9:4e:8d:61:3e:48:81:1b:c7:bf:1e:01:
                    8a:d5:50:da:54:11:b5:e8:83:ed:f5:78:72:9b:8a:
                    ca:be:50:01:1b:ec:71:51:2f:da:ed:0f:4f:5f:ee:
                    94:10:4f:58:43:04:6b:7a:03:af:d4:3d:72:c9:0d:
                    1d:d2:0f:1c:fa:70:64:4d:dc:28:e3:80:42:b3:5c:
                    e2:a3:a5:69:b5:b3:52:b2:b8:4b:e8:84:3b:71:d2:
                    f1:bb:ac:15:d4:d1:22:f9:fc:06:dd:1a:31:bd:d5:
                    93:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6C:0A:B0:B5:87:20:D8:05:11:9A:23:D8:5A:29:73:48:9A:70:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/448baffd-252b-3484-97af-bddb551eb8a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:5f:ff:e7:9a:36:5a:f9:ca:98:89:14:a7:1b:2b:da:01:fa:
         23:8e:b4:3f:4c:9c:91:9d:70:62:2a:99:70:bd:c1:01:43:0d:
         a9:cc:bc:9d:ca:8c:d0:8c:c4:01:d2:18:9e:e8:6a:49:f6:f0:
         c0:c4:6f:4c:f8:4c:a3:d8:c0:68:dd:7d:97:66:29:d0:cc:d0:
         7d:33:0f:c6:8b:a5:06:08:bb:20:91:78:8f:e5:e9:cd:75:bc:
         71:fd:2b:37:be:64:31:85:e9:1d:6a:06:94:48:e7:44:95:8b:
         9e:8d:af:09:f7:9e:ea:b6:3d:d3:d6:1a:c9:32:eb:8a:27:94:
         47:40:78:bf:85:fa:eb:78:0c:0f:a6:52:43:75:49:5e:41:f9:
         94:e6:01:1b:95:12:7d:d0:f6:4f:99:ba:7b:c8:e8:80:75:10:
         0f:98:82:e5:90:10:b1:9f:6a:ee:d3:5b:55:ff:ed:d8:75:5d:
         82:4b:82:3b:50:33:94:b2:3a:db:46:9b:d6:31:2b:ea:b5:ca:
         46:a0:7b:3b:c8:a9:28:03:90:64:53:4f:97:ed:27:04:01:94:
         8e:26:ac:df:16:5d:e3:19:f6:69:2c:cf:65:95:18:87:bb:d6:
         51:d1:a0:a5:ad:f0:35:ec:17:5a:92:66:1a:47:86:ef:d1:1b:
         a0:94:c5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 12:55:19 2026 by rpki-client