Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6bc20021-d905-3ec8-bbfd-896749510a77.roa
File:                     6bc20021-d905-3ec8-bbfd-896749510a77.roa (raw, json)
Hash identifier:          6cCUJTyTGHs0P3OcLvfPohJ8Xb5Fswf7WVqla7pSLVQ=
Subject key identifier:   25:9B:93:15:18:D8:FA:F0:03:C1:B9:A0:57:84:E2:48:F0:19:08:BD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DB34034F75D3539D2A282EBC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6bc20021-d905-3ec8-bbfd-896749510a77.roa
Signing time:             Sat 02 May 2026 13:00:31 +0000
ROA not before:           Sat 02 May 2026 13:00:31 +0000
ROA not after:            Fri 31 Jul 2026 13:00:31 +0000
asID:                     21859
IP address blocks:        108.165.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b3:40:34:f7:5d:35:39:d2:a2:82:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  2 13:00:31 2026 GMT
            Not After : Jul 31 13:00:31 2026 GMT
        Subject: CN=87f81658-cf0d-4f6d-82b8-24411ccc47e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:20:7f:0c:a6:59:1c:96:f7:9d:76:39:13:0d:
                    0a:55:d5:67:5c:2b:0d:ba:af:49:ae:28:77:64:58:
                    f2:ce:9d:1f:49:77:32:b9:b6:3c:f9:88:7a:07:5a:
                    3e:8e:d5:7d:fd:40:ae:5b:62:ed:e2:ee:5b:09:e0:
                    3b:8f:94:3b:2c:f3:87:3d:3b:4a:e1:a7:ff:e1:1a:
                    51:e5:6d:85:a7:17:90:82:42:1f:a6:9e:4d:7b:9d:
                    f3:2e:ce:bc:eb:ee:84:0f:bf:c5:db:55:87:a9:51:
                    2d:93:ee:15:6b:5f:8a:ff:ad:1d:22:82:e0:cb:88:
                    ef:08:40:2c:68:c8:37:51:b7:96:c8:ff:63:6e:f9:
                    82:40:81:a8:7f:f1:f3:f7:f2:ba:d5:9a:32:03:ff:
                    c1:4f:82:cc:ad:a0:64:72:cf:0c:95:19:a2:53:8a:
                    78:0e:42:cc:f1:d5:26:f2:55:af:27:10:6b:8b:37:
                    a6:f3:35:66:8c:27:a2:b7:02:fe:05:8d:b4:54:f9:
                    a6:37:8f:ef:d3:a3:6f:20:60:94:da:e7:0d:ef:4c:
                    a2:36:d7:4c:8f:e3:b5:31:10:60:50:19:61:72:08:
                    04:6e:6d:ea:10:e0:60:77:55:94:be:32:54:1d:5b:
                    2b:77:51:91:0f:b5:6e:19:bc:3c:fe:25:0c:c5:9d:
                    83:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9B:93:15:18:D8:FA:F0:03:C1:B9:A0:57:84:E2:48:F0:19:08:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6bc20021-d905-3ec8-bbfd-896749510a77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:4f:03:8c:59:b2:a0:be:c6:2a:69:74:fc:0d:f2:0a:2a:bc:
         30:82:7f:09:a3:19:3a:81:dd:98:b2:42:3e:1f:c8:b9:a4:eb:
         7d:97:ed:ac:87:5a:dd:d6:96:93:79:ce:f2:23:14:74:20:a1:
         1a:34:62:bf:a5:bc:73:50:7e:29:df:04:67:8d:59:67:80:5f:
         f1:95:4f:04:7a:cc:3f:a5:76:91:78:b6:dc:a8:89:93:ad:eb:
         e4:66:f8:d1:e7:93:51:3f:dc:9f:88:8b:9b:8d:28:4a:03:bc:
         f4:d0:06:7c:23:c2:e8:78:ca:3a:0a:2c:d2:a1:06:7a:8a:91:
         2b:68:e4:69:f1:9a:31:a8:6f:8b:7c:aa:ee:fe:d2:c9:22:77:
         be:23:41:39:8b:07:65:b2:85:97:39:60:fd:28:3a:b9:35:f1:
         43:f2:2c:9c:fb:6e:fb:8e:6f:eb:77:b3:7c:ec:27:85:9f:cd:
         b2:b6:c2:fe:20:9d:c7:65:d2:ec:04:ac:e0:52:0c:75:17:f9:
         80:96:96:3b:28:9d:89:e8:bc:99:0d:6a:7a:b3:17:20:bb:ef:
         c0:91:25:ec:27:ed:97:fc:0f:63:b7:f0:39:b0:33:fc:ba:76:
         2f:79:8f:a6:85:af:a3:34:cf:be:24:00:46:25:c7:7d:6a:34:
         57:3c:e3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 12:57:30 2026 by rpki-client