Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/872aa645-4463-32fb-98a9-59ece036f497.roa
File:                     872aa645-4463-32fb-98a9-59ece036f497.roa (raw, json)
Hash identifier:          KJQKfV8JhRJ38+frhfWIDzFvXNPi6vnO+Pidlz3vjYo=
Subject key identifier:   FD:4A:8A:53:B7:AF:F7:2D:1E:AC:9F:FF:DF:2B:87:71:EA:BD:6E:5F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584ED6FC82DAD723EFF869377A00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/872aa645-4463-32fb-98a9-59ece036f497.roa
Signing time:             Sat 15 Aug 2026 01:00:12 +0000
ROA not before:           Sat 15 Aug 2026 01:00:12 +0000
ROA not after:            Fri 13 Nov 2026 02:00:12 +0000
asID:                     9318
IP address blocks:        108.165.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d6:fc:82:da:d7:23:ef:f8:69:37:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 15 01:00:12 2026 GMT
            Not After : Nov 13 02:00:12 2026 GMT
        Subject: CN=b35e6e30-b7bf-41d5-ba53-4bac785d32cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8c:0f:c1:5e:22:e4:59:a5:a9:8a:a1:a4:c7:
                    54:f9:33:a7:a7:f9:fd:90:54:91:63:7c:0d:ff:8d:
                    83:77:ab:92:7c:c3:59:d9:20:ca:ea:b0:19:3e:ed:
                    25:f4:ea:49:7c:39:51:4a:b1:b7:fa:74:e6:8c:40:
                    b7:11:4e:fc:75:37:90:2d:dd:ca:93:4d:16:8c:85:
                    9f:49:4b:2a:37:89:c0:13:44:05:5e:15:8d:7a:c1:
                    90:38:7e:29:76:91:36:88:ee:df:68:b2:73:4a:30:
                    21:cd:56:16:95:53:39:86:8b:a5:7a:5e:ef:8a:27:
                    eb:bc:9b:02:82:a5:83:44:e5:67:9a:1e:e4:28:f4:
                    d4:81:a0:7e:ab:01:b1:aa:1d:d2:40:e6:90:fe:5c:
                    42:74:7a:5d:66:f0:8a:61:36:6a:d8:ab:11:e9:3e:
                    de:fc:d4:2d:e1:4c:58:80:0a:cc:5d:74:79:27:60:
                    d3:b1:7b:6c:2b:26:90:0a:a1:da:95:0c:6b:22:ec:
                    47:8c:e5:ae:c1:a2:81:00:71:c5:c7:9a:46:4c:d8:
                    e4:9a:31:76:df:b4:14:87:b2:a8:01:94:54:0f:00:
                    76:81:f7:1a:d6:a0:ee:2e:1e:31:56:71:4b:8a:ad:
                    e7:2c:21:dd:7e:df:61:58:41:3b:05:60:94:34:a7:
                    60:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4A:8A:53:B7:AF:F7:2D:1E:AC:9F:FF:DF:2B:87:71:EA:BD:6E:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/872aa645-4463-32fb-98a9-59ece036f497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:2d:c8:92:2f:3a:34:5a:1b:28:26:62:2c:db:c5:70:e5:82:
         89:6f:20:ff:e0:37:40:ec:d9:f2:42:85:1d:7d:35:65:de:9c:
         2e:e2:48:38:53:b3:79:93:c7:8b:ae:f7:fc:5d:5b:87:1e:06:
         f1:f7:c0:68:31:80:6c:73:8c:aa:59:7a:44:9f:35:2a:7b:67:
         eb:ad:99:ff:b4:a0:33:65:7b:ee:46:56:81:dc:bd:b7:fc:d0:
         b3:5c:a4:a0:cc:60:90:dc:97:7b:be:6f:59:a8:0f:d7:75:3c:
         66:c9:72:d5:63:03:ed:93:f2:54:31:3e:53:39:bc:11:56:0c:
         77:28:60:92:2f:2d:91:71:57:c8:e5:81:cd:f2:32:9f:91:05:
         db:ab:33:58:09:22:ed:78:8e:d4:aa:e5:51:44:8e:d2:1a:68:
         d2:1e:8d:fa:8d:a4:b1:c6:4a:40:92:db:9f:9c:b9:15:93:18:
         af:69:ca:a8:4b:50:59:39:62:9d:a7:44:cf:d4:48:e8:ce:82:
         d6:fa:44:c4:cc:d7:38:67:06:3f:fc:ef:ff:c4:4a:de:b0:3b:
         e8:41:c7:75:0f:05:0e:96:c5:7f:74:e2:01:d1:14:a5:33:42:
         d6:b8:2e:43:80:a3:9a:6e:25:91:55:5f:21:4b:3d:b3:bb:84:
         bf:11:e2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 18:01:15 2026 by rpki-client