Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/685ab3ea-1839-32f6-9076-633be25e5e28.roa
File:                     685ab3ea-1839-32f6-9076-633be25e5e28.roa (raw, json)
Hash identifier:          cK2b3GCPDje2wkeGWemDOLrpKgzRlWGjNmhl04Jqx+s=
Subject key identifier:   79:08:BD:60:09:26:65:D8:B2:B4:BB:1A:5F:C6:04:72:07:A1:27:4E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E1AF131FD146106DCA29A3F40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/685ab3ea-1839-32f6-9076-633be25e5e28.roa
Signing time:             Mon 08 Jun 2026 16:25:30 +0000
ROA not before:           Mon 08 Jun 2026 16:25:30 +0000
ROA not after:            Sun 06 Sep 2026 16:25:30 +0000
asID:                     198566
IP address blocks:        108.165.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:f1:31:fd:14:61:06:dc:a2:9a:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  8 16:25:30 2026 GMT
            Not After : Sep  6 16:25:30 2026 GMT
        Subject: CN=ccce167e-3dc3-4382-96ca-de242b4eae3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:37:ec:f8:2a:78:b7:91:15:6a:50:93:0b:2a:
                    63:ef:a3:82:51:d6:e6:44:10:1e:76:ea:1c:6c:07:
                    c3:3e:b7:68:e7:78:89:43:54:04:fc:93:43:85:f8:
                    e7:78:e2:08:b9:27:a5:5b:a1:ae:46:f0:7b:b8:e4:
                    29:f1:44:cb:a7:a2:c7:9a:ea:b4:ce:90:3d:a5:6b:
                    22:4f:f5:b7:8e:1e:18:d2:13:45:89:c7:fa:d3:fb:
                    d3:e5:ab:79:92:81:ef:c6:8b:02:48:64:99:af:76:
                    fa:b4:5c:98:9e:5f:19:f8:36:07:72:1a:32:f7:98:
                    27:c3:f3:06:61:42:8b:b9:c5:aa:5c:e8:0b:32:86:
                    b8:9e:af:60:d8:60:49:b0:83:e9:3e:5f:88:b1:8e:
                    7a:9c:a5:32:61:9f:55:eb:2e:ab:e2:97:1b:fa:97:
                    e8:7a:30:41:45:ce:7d:67:39:98:c0:de:ac:dd:85:
                    39:e0:dd:f5:98:29:9d:7f:27:f5:0d:4a:c6:61:61:
                    66:52:1c:e4:cd:27:40:61:74:93:b6:33:e0:b5:78:
                    4d:22:e6:01:96:5e:9b:8b:a9:11:37:0b:04:76:5e:
                    98:d5:41:08:02:94:13:4d:cd:73:0f:a8:53:ad:c2:
                    b1:7d:87:a2:61:e9:3c:0f:e8:cd:40:68:b4:6a:34:
                    3d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:08:BD:60:09:26:65:D8:B2:B4:BB:1A:5F:C6:04:72:07:A1:27:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/685ab3ea-1839-32f6-9076-633be25e5e28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:d5:91:5a:a3:4c:ca:67:fe:0c:4a:90:8c:db:81:d8:0e:ca:
         4d:32:1f:24:46:96:c3:89:18:cb:28:ab:55:32:62:b6:dc:ce:
         1b:a5:ec:1a:28:2e:f9:71:ec:6b:ac:db:fd:27:b8:e8:86:1e:
         f2:49:8e:90:7b:c6:15:d8:f2:a9:f6:d5:e0:b8:7e:10:cb:e4:
         cc:be:a4:fc:45:f8:45:41:09:82:b5:54:76:0a:98:bd:0f:41:
         1b:83:1a:a8:79:67:68:24:17:2a:cf:f6:d4:81:56:cc:2e:cf:
         9b:c6:81:a6:f9:26:0d:6a:d6:79:51:61:97:81:a0:bf:84:28:
         4e:16:94:07:3d:2f:31:a9:46:b9:36:36:60:49:c7:5b:20:84:
         24:b5:1a:3a:1f:b6:d5:8a:4f:d2:fa:cc:31:63:e5:35:1a:90:
         0e:2d:67:3b:4c:fc:21:60:40:c4:94:40:f4:3a:ed:49:8b:5d:
         15:bc:dc:fc:2f:18:4d:7e:5f:0f:a1:df:01:67:b8:a8:60:9c:
         d1:02:a3:7d:72:a4:af:13:d8:3d:c2:7d:c2:95:61:6c:f9:67:
         0c:ec:49:ce:e1:f6:7e:c1:52:de:42:fe:e6:e8:f9:61:1c:0c:
         80:5e:87:c5:ff:b5:bb:62:c6:53:b7:22:b8:a7:7c:60:78:d2:
         32:08:1e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 11:11:35 2026 by rpki-client