Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7adeaabb-bb52-3c21-abad-e6f8fa33f2e3.roa
File:                     7adeaabb-bb52-3c21-abad-e6f8fa33f2e3.roa (raw, json)
Hash identifier:          uOtIwqccm4dfOO73Fw4u+Hgd9ubm3uwOPjQ/tllGqqc=
Subject key identifier:   3F:A4:0B:9B:D5:52:5C:22:64:B6:80:0C:78:84:A1:DD:D8:01:28:0D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D0CFB1C5B264FFBFE942E7E74
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7adeaabb-bb52-3c21-abad-e6f8fa33f2e3.roa
Signing time:             Tue 03 Mar 2026 23:37:14 +0000
ROA not before:           Tue 03 Mar 2026 23:37:14 +0000
ROA not after:            Mon 01 Jun 2026 22:37:14 +0000
asID:                     55154
IP address blocks:        108.165.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0c:fb:1c:5b:26:4f:fb:fe:94:2e:7e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  3 23:37:14 2026 GMT
            Not After : Jun  1 22:37:14 2026 GMT
        Subject: CN=b6f5cada-504a-42e5-863b-a4d07667e653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:40:cb:b8:9a:19:23:4c:43:ea:5b:ce:34:d6:
                    36:e0:58:c1:94:31:ed:ad:bf:79:4e:cd:2b:c8:4f:
                    fe:20:4b:bc:41:8a:0f:2f:26:09:83:63:05:57:d7:
                    34:56:36:c7:07:6f:91:60:c5:b9:6e:33:fa:5f:c5:
                    0a:d4:bc:0e:6b:e8:2b:4b:1f:9a:56:f6:85:4d:99:
                    3d:36:d6:1c:74:20:38:51:3c:45:b4:93:29:d4:3e:
                    2a:39:70:b5:e6:5b:8f:24:7f:f8:f5:7c:56:7c:00:
                    71:2f:42:57:22:08:44:74:1e:35:17:d7:9b:45:89:
                    c2:0a:ed:17:b5:73:80:e0:ae:b1:ec:99:c9:d6:94:
                    01:87:30:17:80:5a:4e:6c:c9:0b:6c:34:04:06:fb:
                    b7:dc:fa:34:e0:de:d0:0b:5f:21:b2:74:a2:f2:3e:
                    5a:90:65:85:2e:cc:7c:90:a7:69:d5:d0:0d:58:59:
                    84:f2:67:cc:f8:9a:99:87:10:7b:3a:e3:77:34:5e:
                    f2:c5:0f:18:05:5b:11:f3:ee:10:4d:f8:95:c5:ad:
                    e1:ea:c4:cd:12:4c:cc:ab:27:a9:f6:24:dc:8d:df:
                    fe:44:28:be:65:cf:e7:4d:df:3b:6f:8d:c5:d3:59:
                    d6:19:ba:b1:51:08:06:1c:5c:92:f1:3a:4b:10:54:
                    81:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A4:0B:9B:D5:52:5C:22:64:B6:80:0C:78:84:A1:DD:D8:01:28:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7adeaabb-bb52-3c21-abad-e6f8fa33f2e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:e5:88:61:17:1f:db:19:7c:08:28:46:fa:f2:9e:8f:9d:f5:
         44:2b:60:88:71:94:27:b0:dd:c6:75:f6:a9:65:04:44:58:74:
         62:b6:91:cf:aa:aa:93:14:61:9f:8e:94:3c:09:07:7d:15:7a:
         44:bb:e4:10:00:22:0d:df:83:61:6b:d8:a8:03:c4:2c:cf:aa:
         a6:0c:83:de:45:4e:36:38:30:0d:ad:00:09:2c:33:07:77:df:
         20:85:33:e4:36:ea:5f:8a:82:e4:a1:52:db:29:55:27:01:72:
         bd:38:5e:17:58:ec:4e:4d:16:9f:84:b0:67:fd:66:5c:e9:d2:
         ce:2c:db:8e:9d:08:57:37:c0:20:70:3f:84:ea:3b:a6:37:99:
         37:48:d6:40:84:2e:0b:34:d5:5f:a7:e8:f9:ea:b1:dd:76:3c:
         98:a5:b9:52:a8:8a:43:1f:8a:56:e2:d9:d6:74:26:89:22:d6:
         fa:cc:bd:b2:d2:66:08:bd:8f:99:31:d0:5f:6c:be:7d:fd:cc:
         d3:01:6c:64:05:3a:e4:49:35:76:00:a0:18:b5:ec:55:14:35:
         fa:5f:1e:6f:b0:59:ba:05:60:69:50:dd:44:19:b7:19:fa:0e:
         8a:3f:5d:cb:3e:2c:e5:e3:5c:5e:a8:0b:d6:31:04:5a:24:c4:
         f3:bc:ce:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 10:42:07 2026 by rpki-client