Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8279905f-bc5f-3c96-8b4c-80a08c6afc34.roa
File:                     8279905f-bc5f-3c96-8b4c-80a08c6afc34.roa (raw, json)
Hash identifier:          QckYxs4EcqfS74YJcB2wKo55vSte5J2tAfImAfJx32w=
Subject key identifier:   44:C3:DE:3D:23:F9:9A:92:E5:2D:A3:F4:E8:34:DE:75:42:D9:F1:23
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D4461D9ED785647F726213100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8279905f-bc5f-3c96-8b4c-80a08c6afc34.roa
Signing time:             Mon 23 Mar 2026 19:53:42 +0000
ROA not before:           Mon 23 Mar 2026 19:53:42 +0000
ROA not after:            Sun 21 Jun 2026 19:53:42 +0000
asID:                     11798
IP address blocks:        108.165.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:61:d9:ed:78:56:47:f7:26:21:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 23 19:53:42 2026 GMT
            Not After : Jun 21 19:53:42 2026 GMT
        Subject: CN=35863d09-a65c-472c-971c-7944cc1893be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2f:d5:8e:11:0a:9d:4d:ef:6d:6a:b2:44:25:
                    51:fd:8e:9d:bd:60:a3:b8:72:43:ca:1a:34:70:d7:
                    af:ee:83:3e:81:f4:1a:14:0f:d5:14:5d:e7:a9:15:
                    d0:89:32:0a:9b:c0:71:d8:22:77:2f:24:a0:04:ab:
                    ad:c4:b5:d2:ea:09:50:f9:0b:73:95:9c:d4:ad:bd:
                    53:45:b0:c6:13:48:cc:4d:a0:9d:46:e0:32:c0:31:
                    91:de:e1:f2:a4:c4:76:9f:f9:9b:94:e7:81:2d:cd:
                    56:63:b0:a2:f4:12:4d:16:31:45:2f:9f:34:76:f8:
                    92:b1:5d:43:e8:b6:3c:80:fc:9d:f2:eb:92:d4:b4:
                    9b:35:18:b0:d6:ba:0d:7e:78:d3:89:9c:3b:b2:e5:
                    9d:36:84:c5:e9:c5:0b:dc:1b:6c:a1:10:c0:19:2a:
                    5b:aa:aa:99:3a:4f:38:0e:97:85:9c:de:f4:a5:d3:
                    3e:d1:1c:6f:8e:d2:c9:f1:78:ee:b4:f2:75:25:73:
                    d6:7b:a8:42:cb:30:af:71:31:f4:4a:52:a6:8e:15:
                    18:5b:58:20:94:74:f4:50:34:4d:83:c7:1c:2f:61:
                    df:e7:74:7d:b3:39:e6:5a:15:5a:aa:da:72:27:91:
                    f9:7f:d7:f3:86:5e:53:ad:a9:f2:a1:55:c4:54:3a:
                    8b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C3:DE:3D:23:F9:9A:92:E5:2D:A3:F4:E8:34:DE:75:42:D9:F1:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8279905f-bc5f-3c96-8b4c-80a08c6afc34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:be:3d:b0:19:ed:03:51:6a:c4:bb:5e:77:a6:56:1f:ab:5a:
         30:2c:78:d6:ab:a4:5c:34:a0:71:32:9c:4c:30:9b:6d:75:64:
         41:f7:46:05:47:79:2c:c3:d1:a2:cc:d8:f2:3c:aa:58:1c:63:
         8b:93:01:67:de:a4:33:99:f7:9a:8c:9a:ea:30:83:27:59:59:
         d7:32:7c:8c:63:95:35:26:5a:f8:99:c2:a7:fd:0d:e4:5b:3d:
         22:68:36:8c:ba:b3:dc:c5:cc:72:5c:25:31:d8:e2:f0:43:57:
         0e:73:cf:d5:99:e9:01:44:e4:4f:39:6c:dd:2c:9f:fb:58:70:
         a5:48:e8:e0:dd:39:31:56:32:3d:68:5d:fb:99:7f:e9:75:b6:
         c4:59:14:73:12:98:d2:80:e2:86:45:bf:13:92:b4:88:ff:db:
         36:85:00:a4:5c:65:de:2b:2f:e2:98:32:b6:09:06:5c:72:ae:
         70:67:2f:4f:bf:d4:c6:ea:dc:82:ef:e1:ef:5a:1e:5d:40:bc:
         9e:87:93:03:ea:a6:e5:41:d5:31:c9:cf:39:d9:96:f9:80:8c:
         ee:73:a3:32:33:c4:49:90:ff:27:91:89:2b:96:b1:51:13:8a:
         b7:9d:b8:19:11:42:f5:50:63:30:8e:82:6d:7d:82:f3:dc:dc:
         90:2a:8f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 22:32:37 2026 by rpki-client