Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7a79a897-cbc4-3cd2-a92f-7dbcfee6fa43.roa
File:                     7a79a897-cbc4-3cd2-a92f-7dbcfee6fa43.roa (raw, json)
Hash identifier:          LNzt8WNJWduUmXGVw1Qo/wIeK20h5OS+zoBlijXt79Q=
Subject key identifier:   3D:4E:33:2E:B4:B3:5B:69:71:90:D6:78:5D:D0:93:6B:90:4E:BD:FB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D1FB0C9B64691338244EEB440
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7a79a897-cbc4-3cd2-a92f-7dbcfee6fa43.roa
Signing time:             Tue 10 Mar 2026 16:27:50 +0000
ROA not before:           Tue 10 Mar 2026 16:27:50 +0000
ROA not after:            Mon 08 Jun 2026 16:27:50 +0000
asID:                     401152
IP address blocks:        108.165.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:b0:c9:b6:46:91:33:82:44:ee:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 10 16:27:50 2026 GMT
            Not After : Jun  8 16:27:50 2026 GMT
        Subject: CN=2dacf5c7-48f1-4cf5-a7b9-5f1d4316fad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:20:0a:58:ec:2a:8d:86:0c:4a:28:01:45:95:
                    7b:31:df:39:ef:5d:3a:d9:fb:5a:fb:6c:f1:26:8f:
                    56:38:96:f8:e0:64:d6:15:a4:1b:c9:ee:3e:41:92:
                    78:67:40:24:6d:de:96:80:b0:76:7b:d0:c7:71:74:
                    51:3f:22:81:5c:b9:49:31:f7:08:7d:76:d4:cb:99:
                    b8:35:dd:d9:e3:09:38:f7:1e:71:4a:b7:67:ee:75:
                    9c:21:7f:8b:bb:4a:5b:12:2a:65:db:3d:45:1a:8b:
                    f7:d8:44:1d:b8:e6:8d:b8:c0:11:9f:ba:09:3f:60:
                    d8:ef:9f:64:2e:cf:c9:c7:38:f5:df:87:2f:7b:f0:
                    cf:dd:60:99:e8:83:54:23:54:24:c8:8f:b9:29:61:
                    1a:fc:26:10:f5:b4:e4:f4:31:db:89:16:5d:1b:00:
                    83:35:15:61:0f:16:ba:ed:a5:a6:d5:7d:73:c2:0c:
                    39:c9:57:2c:04:73:e0:3d:87:7f:5f:27:85:96:5a:
                    cc:b5:5e:62:35:1c:2c:60:e2:98:5a:da:ad:d8:d6:
                    11:c4:e7:97:ed:c1:5e:9c:9f:17:26:31:21:19:d9:
                    2c:81:58:2e:5a:79:ef:58:b8:8e:f8:41:e9:c3:9b:
                    0f:d9:86:10:d0:c3:46:f8:00:f6:3c:a8:ee:be:19:
                    14:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:4E:33:2E:B4:B3:5B:69:71:90:D6:78:5D:D0:93:6B:90:4E:BD:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7a79a897-cbc4-3cd2-a92f-7dbcfee6fa43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:20:de:42:0b:8b:2b:f9:b4:aa:de:89:67:af:e2:e1:d4:82:
         f1:4f:20:ff:6a:16:c6:a5:bd:cf:bc:b0:fd:8f:dc:bd:a8:e5:
         ae:09:3d:80:6c:e7:5f:5a:24:7d:1f:b2:68:70:85:08:bc:2a:
         e7:3c:3f:e9:73:46:2a:36:bf:d3:43:24:34:1b:ff:e4:7d:7b:
         bd:ec:15:8e:5a:37:e7:8a:c9:f6:81:c1:8c:03:ae:58:85:5e:
         99:33:26:02:e9:0d:3f:e8:f8:81:23:22:4d:bf:2d:14:28:7f:
         cc:48:98:28:bd:8e:74:e7:70:57:2e:05:ce:30:5e:0d:b6:d8:
         b9:54:ac:ac:ae:8e:12:fc:65:7b:05:d1:d7:9c:b5:c9:97:7c:
         fb:bd:4c:14:24:6b:5c:52:7f:94:01:21:f0:c4:2f:3c:89:0e:
         cf:3c:1f:fc:ec:45:b3:96:8c:f2:08:3f:a2:02:9e:ba:95:71:
         cc:b4:9f:d0:40:6f:46:d9:0b:21:22:41:f1:15:5a:5d:9e:00:
         f7:61:07:17:2b:cd:df:4d:5d:ac:76:02:eb:fe:42:75:32:01:
         e6:2d:68:50:8a:8f:3e:fe:01:e8:4a:52:87:45:36:07:e1:2e:
         0a:3f:9d:0d:dd:53:f8:13:04:b2:62:31:4f:51:8d:ae:33:3e:
         65:99:f1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:55:20 2026 by rpki-client