Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6c025a85-cfb5-34a9-a062-f53da221cc49.roa
File:                     6c025a85-cfb5-34a9-a062-f53da221cc49.roa (raw, json)
Hash identifier:          zSPQTqP0jgOCWDtXc8LLx8dLEz5hOms4nTsAv6kkCBI=
Subject key identifier:   BF:DD:07:AE:D6:EA:CA:CC:55:B2:4D:05:DC:64:18:68:E0:82:9D:E1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F9BCDC71A1A8D736C553B3C38
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6c025a85-cfb5-34a9-a062-f53da221cc49.roa
Signing time:             Sat 24 Oct 2026 13:00:12 +0000
ROA not before:           Sat 24 Oct 2026 13:00:12 +0000
ROA not after:            Fri 22 Jan 2027 14:00:12 +0000
asID:                     49770
IP address blocks:        108.165.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9b:cd:c7:1a:1a:8d:73:6c:55:3b:3c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 24 13:00:12 2026 GMT
            Not After : Jan 22 14:00:12 2027 GMT
        Subject: CN=bcffa40c-de11-4806-8d68-da4a7e684d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:31:aa:f6:bf:06:e9:61:d1:c5:2b:a6:1d:09:
                    d6:ef:85:29:24:23:6d:7b:af:f4:a2:16:97:ab:ca:
                    96:f4:d8:0e:ba:93:99:80:52:e4:7e:ce:a0:b6:0b:
                    a9:c1:d8:23:f0:98:d2:21:42:1a:31:88:8a:3b:9c:
                    b9:99:c3:a7:08:8b:7d:7a:8a:79:df:21:4e:87:90:
                    d8:e1:bd:7f:1f:0f:fd:53:7d:ac:7f:c7:52:b6:2d:
                    e2:0e:97:e1:cd:91:a4:cb:54:3e:77:b2:17:3a:32:
                    a0:38:e8:2d:de:21:0a:2c:e8:c6:3b:eb:60:98:bd:
                    b1:2d:06:83:94:3d:0c:3f:56:ba:e4:fe:e2:9e:9e:
                    c7:5e:2d:5d:0a:43:80:80:86:85:64:de:4b:ed:5b:
                    3c:bc:42:ae:9d:fb:64:c3:48:45:31:72:6a:79:92:
                    22:8d:53:71:7b:e6:db:39:a5:72:33:61:5f:d4:71:
                    92:3b:fd:9d:0d:15:6a:d3:41:1f:e0:35:e9:51:43:
                    c1:89:d3:df:47:26:a1:8f:9f:ec:64:9c:ab:02:c6:
                    cf:69:bc:03:f1:7c:b6:0f:06:fd:d7:f6:e0:5f:d3:
                    a9:4f:98:8f:9b:1d:97:7d:bf:26:68:f3:0d:f6:77:
                    65:14:8c:a0:38:28:f5:21:7a:d0:42:20:1c:3e:c9:
                    30:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DD:07:AE:D6:EA:CA:CC:55:B2:4D:05:DC:64:18:68:E0:82:9D:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6c025a85-cfb5-34a9-a062-f53da221cc49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:00:77:cb:0a:2a:60:ff:b9:22:66:46:93:73:52:25:08:27:
         4b:87:a7:c2:74:e9:b6:73:8f:4b:04:01:e7:73:30:ee:38:9e:
         8f:70:22:ce:f0:36:20:2c:72:cd:69:85:73:c3:3f:53:45:1d:
         b4:39:94:67:3e:7f:82:eb:47:f3:c4:ce:36:fc:eb:aa:21:0c:
         fc:bb:ce:3a:cf:98:4c:2a:d1:1b:29:e2:06:41:53:42:0d:08:
         8c:d2:88:b7:1d:7d:ff:cb:18:d3:ae:e5:3a:b1:45:d6:fd:2a:
         f6:a6:ae:ee:1c:1c:89:e0:73:59:c1:9b:0b:e0:1d:b5:e7:73:
         79:92:69:f0:7c:fd:43:a5:f6:d7:68:cf:6a:35:fc:09:71:22:
         27:f0:9a:35:7b:bb:39:01:45:fa:39:f9:2c:93:14:31:ae:ce:
         b8:7e:6d:5c:11:c0:eb:c2:b2:7d:08:71:4c:2d:c6:42:d7:bf:
         bc:00:a6:0e:7f:09:8e:4f:6e:c2:1a:e9:12:a8:c1:fb:5c:66:
         57:68:2d:85:b1:78:68:7f:53:de:89:41:8f:c3:3c:3d:c1:a8:
         f4:49:a6:95:07:35:55:6b:60:c7:d9:0c:7f:ca:08:c1:87:d5:
         43:bc:91:17:87:47:2b:2c:63:da:f5:b6:b3:9b:16:fe:9b:2b:
         38:ae:8c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 21:14:11 2026 by rpki-client