Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/62edf8cc-3e20-3dea-8f7a-99752594298d.roa
File:                     62edf8cc-3e20-3dea-8f7a-99752594298d.roa (raw, json)
Hash identifier:          Hz0IiBr63oBn2P7SK7EtBNcYYq5O7RA+2X4sjAl6Zjc=
Subject key identifier:   5E:9E:E6:47:6B:E0:76:2D:54:88:5F:89:60:E6:EA:81:0B:23:B9:E6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F655D6EB186452A5D8A364700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/62edf8cc-3e20-3dea-8f7a-99752594298d.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     49791
IP address blocks:        108.165.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:6e:b1:86:45:2a:5d:8a:36:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=75e6d281-1323-412d-ae22-e185fbbfb2be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:36:90:1e:9d:95:a1:ab:d2:4a:76:6a:35:98:
                    81:8b:fc:8a:b3:09:dd:4b:ef:57:ff:cf:65:d4:2a:
                    d1:f9:71:d7:6c:ac:ea:a5:b1:b7:b6:2c:3c:fc:c2:
                    5e:25:30:61:40:2a:4d:54:d7:12:2e:9a:ad:b7:89:
                    59:b3:1c:f6:8e:26:df:a0:48:aa:4d:f3:d6:2b:1f:
                    58:7f:89:a4:79:19:f2:31:3a:05:13:d7:fa:27:21:
                    05:4d:27:c9:f8:c6:58:40:a6:94:33:49:08:58:90:
                    93:86:d2:5b:2d:f0:20:2c:0f:80:fa:2f:63:c1:22:
                    20:43:f4:5b:6c:62:96:2b:a9:57:75:29:e3:29:96:
                    3b:22:e4:0e:a0:f4:1b:ec:62:5e:b5:8e:29:09:ad:
                    36:d7:aa:be:c7:83:9b:7d:4f:de:9a:4a:38:5b:2e:
                    8d:f4:fd:b8:bf:5d:27:d8:2f:8a:05:19:a6:0b:ce:
                    9e:ad:4e:76:fa:6a:ad:e1:7b:4f:4e:30:b2:49:b3:
                    2a:ec:fb:72:66:be:c0:41:ee:1a:17:fe:2e:72:37:
                    46:c6:99:08:d3:ad:8e:48:23:5e:ef:5e:c9:f5:a6:
                    92:35:32:b1:74:45:ca:f8:a8:59:d7:50:dc:a5:be:
                    64:45:3d:99:9d:fb:d3:09:f6:f5:d2:bf:8a:68:67:
                    90:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9E:E6:47:6B:E0:76:2D:54:88:5F:89:60:E6:EA:81:0B:23:B9:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/62edf8cc-3e20-3dea-8f7a-99752594298d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:8d:66:65:54:15:e8:84:0f:c1:bd:ca:3b:59:5d:1e:ee:07:
         6e:13:29:ff:5c:62:cb:00:70:5d:66:ac:fb:bf:1b:d0:2c:9a:
         fb:36:a4:89:19:25:43:5d:ab:42:b7:f0:d4:ed:f5:39:1c:3d:
         1a:76:80:4d:c5:89:fd:9e:dd:29:f2:71:31:0b:bd:fb:15:b1:
         49:a9:61:ed:24:66:3c:93:15:4e:db:4e:dc:ca:7a:c2:db:9f:
         49:d9:4b:09:50:f6:e6:5e:1d:89:0f:9f:0a:0e:f9:4e:8a:1c:
         f6:7c:2a:81:57:c4:25:7f:c4:e7:ca:8a:84:fb:ec:36:c7:11:
         4c:21:98:cb:1e:0e:09:91:02:4b:db:17:9b:3c:53:cb:b4:22:
         64:4d:a3:5d:31:5f:61:b1:09:3d:21:53:79:33:69:74:ed:6e:
         62:98:23:45:d9:72:d9:96:fa:8b:e5:d0:ef:a6:1c:0a:dc:c1:
         44:fa:a6:bd:a2:9e:42:8a:09:36:49:de:10:af:c1:43:8e:e0:
         a0:91:c4:37:f6:ee:fe:a6:c5:6d:28:d8:fe:ae:f0:96:d4:63:
         41:de:50:f8:71:29:e7:0e:c2:4f:eb:c9:1e:41:96:22:4f:c9:
         97:18:94:6b:98:07:00:ec:cd:aa:f6:e8:a3:3e:29:ca:0b:bf:
         7b:06:c6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:21:31 2026 by rpki-client