Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8f33dc52-f3ee-3fef-a4f5-b518c4ef291d.roa
File:                     8f33dc52-f3ee-3fef-a4f5-b518c4ef291d.roa (raw, json)
Hash identifier:          Rm3fCsqRs6BLRl37Z0J9+/nDci2/xHm/NgLaNAfc5nI=
Subject key identifier:   1C:59:5B:40:CF:C4:4B:76:E7:1B:99:CD:63:D9:43:0B:AD:A0:0D:E8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D0CFB1C67A30DCDE10458A880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8f33dc52-f3ee-3fef-a4f5-b518c4ef291d.roa
Signing time:             Tue 03 Mar 2026 23:37:14 +0000
ROA not before:           Tue 03 Mar 2026 23:37:14 +0000
ROA not after:            Mon 01 Jun 2026 22:37:14 +0000
asID:                     55154
IP address blocks:        108.165.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0c:fb:1c:67:a3:0d:cd:e1:04:58:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  3 23:37:14 2026 GMT
            Not After : Jun  1 22:37:14 2026 GMT
        Subject: CN=acd78959-9e1b-4666-9b9c-4ddbb2696005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:71:e7:f4:8f:99:a6:27:1f:b7:ad:df:77:f0:
                    e6:25:7f:78:aa:ac:f4:56:39:71:a1:3a:48:3f:1e:
                    33:fa:0e:b8:e5:9c:2d:dc:72:0f:4f:05:4b:a7:a9:
                    cd:d5:b4:b2:ed:b7:e2:41:04:70:ce:3d:1f:a8:23:
                    aa:7b:bb:8e:6e:3e:2b:64:30:f9:e7:89:d5:00:cb:
                    c6:6e:8d:37:a7:02:2b:8e:33:27:14:60:a7:e1:08:
                    22:4a:fd:61:e0:c2:2c:f5:fc:dc:ea:3b:90:2a:9f:
                    d5:e9:de:ee:9e:d8:4b:c7:eb:60:51:36:21:57:20:
                    fd:71:db:07:11:94:f1:21:a2:83:05:44:30:65:b8:
                    65:5e:60:fc:6e:df:ed:b5:d8:88:d8:c8:27:1b:da:
                    b6:7c:ac:69:06:5b:f9:6d:88:03:c4:62:29:b3:33:
                    07:70:ab:b1:0c:f8:bf:c3:ea:a1:60:54:2e:8d:61:
                    e6:64:f0:5b:d2:40:e8:37:47:57:04:9b:79:22:43:
                    8c:6a:5d:f7:0f:dc:ce:66:8e:93:ef:fc:49:d9:af:
                    3e:35:3e:f4:27:55:78:84:c5:ba:9c:66:bd:97:6c:
                    02:01:76:6c:28:4f:a2:d3:8d:5e:7b:4e:b0:2e:61:
                    e8:30:d1:44:56:08:43:2e:d3:6f:de:06:b2:fc:9e:
                    cf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:59:5B:40:CF:C4:4B:76:E7:1B:99:CD:63:D9:43:0B:AD:A0:0D:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8f33dc52-f3ee-3fef-a4f5-b518c4ef291d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:73:5d:c9:17:47:29:f0:6b:ac:e8:63:da:08:c6:d7:c4:9d:
         a4:87:c3:29:58:1f:fe:36:3a:66:43:93:71:6c:3d:ce:37:40:
         6f:e7:09:76:13:76:09:f4:33:da:b5:ca:34:f4:6d:68:af:05:
         b9:02:58:71:8b:b2:41:14:e2:6a:5c:74:40:e9:68:3d:d5:60:
         3e:24:78:35:7c:00:33:2a:d0:d9:f4:f1:b0:aa:54:d3:47:32:
         12:b1:de:36:42:6a:18:f3:ed:4c:b0:13:52:a8:01:93:b2:45:
         ee:1d:ed:a6:85:49:c2:47:48:7b:6b:a6:93:c6:39:ba:46:a4:
         ef:a6:2a:09:82:69:ff:0f:88:54:c7:0d:8e:24:9a:b1:83:5d:
         9c:5d:59:3d:8f:f1:62:f0:22:c9:90:e4:46:03:5f:54:fa:66:
         1d:cd:81:7d:e8:c9:43:bb:64:d6:e8:df:9b:40:25:b9:f6:bf:
         b8:e1:a0:01:24:9d:6b:6f:5e:d3:b8:f7:05:c8:b3:4c:a8:b4:
         b3:db:8d:75:4e:7a:b1:d8:13:f0:c5:9c:70:ad:15:e7:ca:e1:
         db:1b:09:7d:23:cc:7e:1f:ff:8e:71:7e:8c:64:61:2e:6a:df:
         8f:70:f9:0c:f3:66:60:b5:80:97:43:d0:99:4a:4c:f3:d1:95:
         a6:c5:3f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 10:43:32 2026 by rpki-client