Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5f4b0c5f-0d68-3775-ba18-fb6ebe7dbeea.roa
File:                     5f4b0c5f-0d68-3775-ba18-fb6ebe7dbeea.roa (raw, json)
Hash identifier:          PWNvaBHICsdAmwauTNnqhyCTwS2Oa66OCOM+a9jj8Ns=
Subject key identifier:   08:DC:A3:7F:16:9F:CF:68:B9:D5:76:DE:F2:0E:74:0D:0F:3E:6A:F3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F4973ACE364725CF0651D6FC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5f4b0c5f-0d68-3775-ba18-fb6ebe7dbeea.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     55720
IP address blocks:        108.165.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:ac:e3:64:72:5c:f0:65:1d:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2436870a-b68b-42d7-a0e1-e2c936f9b117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6f:de:e2:83:b9:f6:47:85:56:6b:67:e4:5a:
                    74:a3:be:ee:8a:66:68:3f:3f:f6:b5:c4:aa:8c:5c:
                    c0:48:d9:30:db:de:70:07:16:48:a1:73:05:9c:b5:
                    5c:6d:f4:3b:09:88:ef:dc:e0:b4:75:10:a5:3b:62:
                    c2:7d:cc:f7:6d:48:39:ed:21:62:61:9c:a7:a9:b5:
                    ed:ef:84:2d:e0:3a:eb:b9:37:30:47:31:b1:6e:5f:
                    53:c2:ee:5c:8f:ec:1e:3a:41:7e:81:9d:aa:62:5f:
                    41:83:a6:18:98:90:74:c2:5e:6e:7c:f0:22:d1:41:
                    1a:56:58:af:a7:7a:9f:e2:57:a5:9c:6f:b8:c5:26:
                    bd:f3:dd:f3:23:ec:94:f9:e4:d2:50:bd:91:5e:22:
                    35:2d:19:7b:1d:87:97:4c:66:ce:ec:c7:4c:04:e8:
                    cc:d6:3d:22:80:b9:98:7f:07:c2:3b:e3:97:b7:2c:
                    aa:1e:f2:e1:b2:c4:ab:18:14:06:84:92:51:2b:5c:
                    94:56:fd:78:d9:02:1e:1e:bb:3c:fe:99:85:30:0d:
                    d2:52:9a:63:de:8e:53:a9:72:42:5b:2d:5b:40:76:
                    c9:3b:3a:f4:25:4e:f2:66:b4:25:dc:9a:4b:7a:6b:
                    52:5d:c3:61:aa:79:12:f8:8c:f3:d0:d2:dc:76:25:
                    bc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DC:A3:7F:16:9F:CF:68:B9:D5:76:DE:F2:0E:74:0D:0F:3E:6A:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5f4b0c5f-0d68-3775-ba18-fb6ebe7dbeea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:f3:4e:af:36:aa:db:53:f6:29:65:56:a8:db:02:ff:43:74:
         e7:1c:50:66:6f:09:0c:54:42:58:4c:a6:43:96:9c:0d:52:91:
         24:26:83:b2:1a:e1:1d:80:a2:91:4f:3c:eb:2a:8e:90:68:ee:
         db:17:04:1b:d9:f7:ef:cb:8d:c4:b2:33:e9:0b:f3:c3:0a:93:
         71:fd:c1:af:a5:78:d9:92:53:c1:a6:ae:0f:ac:39:65:63:b4:
         72:5c:58:3c:af:e7:3b:2c:7e:59:dc:30:55:ce:51:09:04:9c:
         48:60:ab:03:93:28:b7:f0:28:ea:19:be:5b:9a:ed:22:94:7b:
         46:8d:a1:1e:c9:1d:62:18:90:b8:7b:fd:79:72:9e:d0:76:8e:
         a2:68:c6:38:e3:de:36:30:8c:ad:cb:f6:63:fc:1d:93:5c:f6:
         26:0d:35:e2:94:69:99:96:c6:d9:c0:32:4e:1e:f1:78:0e:6c:
         98:8a:a7:75:f0:57:d3:7f:7a:0a:16:91:d5:4e:94:7c:ba:db:
         39:e6:41:37:75:66:92:f5:fe:3e:c1:63:16:c4:cf:38:3e:e8:
         c9:c4:6f:32:40:4e:d4:2a:f1:4c:6a:eb:7f:64:ac:46:ae:34:
         41:66:4b:09:73:a9:64:a7:8d:55:69:84:f4:f0:b7:d4:3d:cc:
         9a:cb:d5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 17:53:39 2026 by rpki-client