Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/511104a5-ef73-3c85-a40f-65aebf1b2839.roa
File:                     511104a5-ef73-3c85-a40f-65aebf1b2839.roa (raw, json)
Hash identifier:          QRPMF9H/ZRxC65Mk+Wbdef7rmyPlIuBRF0cL9L6tFNA=
Subject key identifier:   91:6B:3B:75:0E:77:E3:85:C8:57:06:D8:9B:5F:90:70:B1:44:D4:A1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F655E6BC25F7258B23B969178
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/511104a5-ef73-3c85-a40f-65aebf1b2839.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     62610
IP address blocks:        108.165.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:6b:c2:5f:72:58:b2:3b:96:91:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=69223061-226d-403d-b97b-56257c2eb42a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:af:c3:c3:74:6f:27:b6:1e:ad:e5:72:c8:0f:
                    8c:10:5d:03:18:79:ed:30:26:9a:1f:b9:8d:74:c2:
                    3c:7c:15:bd:8b:b2:3f:ba:ef:86:59:43:25:d1:32:
                    7d:94:e1:5d:23:01:50:b6:12:56:6e:1a:ae:f7:bf:
                    84:49:93:89:fb:b7:21:8b:07:74:da:84:82:89:c4:
                    38:27:6e:75:31:de:a8:d2:f8:db:9c:be:fb:7f:37:
                    aa:93:a6:eb:72:3d:7c:27:09:f4:6b:c8:4f:d0:9e:
                    8e:00:3a:d1:46:ae:e9:e3:9e:34:2d:f2:6d:fe:93:
                    90:4f:df:7f:0c:d4:b6:27:f4:78:00:e3:96:4c:17:
                    6a:11:a2:ce:4d:d1:04:aa:98:00:c5:c7:1c:ef:f0:
                    00:73:d2:9d:fa:65:3b:5e:df:cf:99:ca:9e:1d:59:
                    bf:01:4b:7b:14:70:7e:22:e8:c5:5f:70:1f:69:74:
                    b4:3c:0c:31:40:a4:5b:3b:d9:a4:8c:e7:53:c1:2d:
                    85:4a:45:d1:5b:40:ea:8f:e1:d7:62:e2:3f:33:42:
                    b2:71:3b:da:e5:f3:4e:e7:31:d7:07:54:f6:25:d5:
                    d1:e2:ed:80:74:60:d9:70:60:eb:31:0d:83:a7:49:
                    ca:7b:0f:b6:55:2a:57:fb:ba:b9:1a:e1:4f:70:76:
                    cb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6B:3B:75:0E:77:E3:85:C8:57:06:D8:9B:5F:90:70:B1:44:D4:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/511104a5-ef73-3c85-a40f-65aebf1b2839.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:13:dd:58:9a:7d:8d:a6:f0:aa:55:5b:da:c7:27:77:19:ce:
         cb:b1:b9:7f:bd:fd:02:04:18:64:2f:4b:eb:66:d2:56:d8:8e:
         a7:b6:72:a9:75:16:8b:a7:61:90:6d:4b:82:c8:8e:1c:19:b1:
         2d:a6:7e:9f:e1:1c:cb:cb:33:45:f4:d7:7a:3b:84:01:6b:50:
         89:80:8d:8f:f8:f9:c8:04:7b:9b:f6:71:ac:ea:09:02:6e:07:
         cd:b2:b0:4a:47:1b:05:60:15:03:55:4b:43:8a:ae:53:69:c0:
         9d:3d:3d:0c:00:14:99:f2:08:c9:77:67:c6:ad:ab:64:59:ac:
         33:65:b9:1e:5e:0f:99:80:24:63:6c:1c:c9:25:3d:9d:b3:e5:
         a9:41:21:f5:9c:86:31:b0:cd:24:39:71:28:ec:76:6a:bf:e4:
         be:91:e6:bc:8a:4d:36:19:38:6e:79:0a:ba:0f:86:61:ae:c0:
         a1:a1:e3:db:d6:83:a4:fd:e3:41:c8:4d:a6:bd:85:e0:51:4a:
         ca:e8:3a:cf:36:82:07:bd:39:c1:40:72:66:69:8f:4b:60:d4:
         3b:5f:dd:28:33:d3:86:45:5f:86:62:4a:62:25:de:2f:38:8b:
         9e:d5:ca:ec:7a:ae:67:dd:a8:8e:88:4b:c7:27:a2:4a:86:f2:
         d0:a5:f9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:54:31 2026 by rpki-client