Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/67ad98ee-94c2-3d6d-93b3-d6b4db348dde.roa
File:                     67ad98ee-94c2-3d6d-93b3-d6b4db348dde.roa (raw, json)
Hash identifier:          cPkTOBmFrTlc5cz2i6cE6vCJFISFQX9og2oqkdJ5fAo=
Subject key identifier:   D3:C5:ED:6B:D7:96:99:1D:45:81:B6:AB:9B:28:5D:E1:C7:02:2B:5E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EC371B1D6BC5E99E550BADA80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/67ad98ee-94c2-3d6d-93b3-d6b4db348dde.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     42161
IP address blocks:        108.165.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:b1:d6:bc:5e:99:e5:50:ba:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=0f8f6b3a-2afc-4b45-b971-2c76b0c402b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6e:46:70:28:dc:bd:44:74:a8:b9:ed:56:96:
                    89:21:08:d0:54:5d:9d:f0:02:d7:4f:3f:14:ec:6d:
                    54:85:69:bc:4f:55:36:86:c0:9a:31:bc:da:e5:12:
                    e7:c0:44:d4:4b:33:e9:b5:78:30:48:7f:07:04:ca:
                    f5:73:e5:56:b6:1d:1a:6c:02:27:75:e8:83:cd:35:
                    65:fe:3a:ad:ca:24:26:30:e7:99:07:e7:2a:d3:d1:
                    33:f3:7e:74:8b:86:06:4b:a2:8f:ea:5a:78:61:6c:
                    79:fa:ed:53:85:49:fc:04:97:f0:02:e7:b6:e7:c3:
                    28:5d:7c:e7:9c:86:91:b5:81:ab:dd:bc:37:ef:1a:
                    11:60:71:d5:4e:d1:a4:df:7e:a1:09:0f:64:88:4f:
                    0b:cd:60:be:fd:94:da:c2:dd:64:0b:a3:6c:5d:77:
                    82:26:54:73:4f:ce:cd:2e:f8:ca:49:e3:ae:9e:9c:
                    68:0e:fa:9c:94:cd:23:75:2f:5c:42:ec:43:df:38:
                    82:ec:78:6e:9e:c5:fd:73:da:d6:db:f1:3e:84:89:
                    c9:b4:c1:c4:69:a0:2f:fe:c5:c8:a2:df:39:8e:5d:
                    d1:5c:92:e1:79:b4:ee:1b:d9:b0:05:29:14:1f:f9:
                    0c:5c:b7:a1:be:c3:9e:81:c6:97:fb:44:c1:b9:e9:
                    df:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C5:ED:6B:D7:96:99:1D:45:81:B6:AB:9B:28:5D:E1:C7:02:2B:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/67ad98ee-94c2-3d6d-93b3-d6b4db348dde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:21:10:af:63:a0:35:34:fe:0d:9f:f6:56:36:11:45:89:31:
         32:03:5a:5e:14:da:fb:a3:ca:9b:dc:c2:01:4a:a8:33:06:ad:
         90:93:eb:df:8a:ba:99:96:20:62:d8:0c:50:d3:68:a2:77:99:
         3b:ad:26:9d:dd:e3:c1:4d:b0:11:4c:e1:b1:ab:c5:b9:88:a2:
         ae:de:4b:ec:41:fb:90:17:f4:4f:79:2f:ba:03:c5:1a:e3:db:
         04:7c:c6:23:b0:3d:19:a4:14:a9:68:47:9e:11:ae:2e:ad:1c:
         18:e3:ec:71:8f:2f:92:84:cb:80:1e:17:92:00:8a:d6:da:42:
         77:b7:af:b4:78:ae:47:94:cf:70:52:91:40:b2:49:27:c5:79:
         f8:33:4c:df:8b:1b:6a:5f:af:bb:f4:fe:3d:3d:90:32:6e:ae:
         e5:df:8e:e1:e5:17:1a:b0:c4:db:9e:d1:a4:53:9e:44:da:fb:
         ea:d1:5c:bc:58:90:9c:cb:87:b9:7a:5b:42:25:c7:20:77:19:
         6d:99:a6:a9:ce:f2:6b:24:01:33:6b:4c:8b:f3:22:7e:56:28:
         b1:2e:d5:72:97:d9:d1:75:19:74:b0:24:71:29:c0:6b:05:3a:
         61:42:2b:0f:64:83:c9:df:a4:b3:6f:09:02:4f:6d:ce:12:9d:
         ae:f9:c4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:59:43 2026 by rpki-client