Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/95169653-f2cc-3d52-8579-eed55bc629ed.roa
File:                     95169653-f2cc-3d52-8579-eed55bc629ed.roa (raw, json)
Hash identifier:          Devre82FmUT/b6u3ZEWSbu/KPYdHVDUEoQ8pR7lJdDw=
Subject key identifier:   52:E4:F6:EB:20:B7:FF:2A:AF:54:3D:44:D5:82:04:ED:B0:F1:C1:F7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F8F3DDDA6B8566FACBD66CCC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/95169653-f2cc-3d52-8579-eed55bc629ed.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     152179
IP address blocks:        108.165.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:dd:a6:b8:56:6f:ac:bd:66:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=0d8b4e67-43af-49fc-952e-3528a69ecca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:df:45:a2:51:f7:bb:92:bd:ab:03:ef:5d:8e:
                    e0:54:03:16:c3:61:75:64:48:d0:21:0c:7f:87:a6:
                    28:33:0d:c3:56:38:df:0d:d5:37:ce:2c:fd:9a:5d:
                    86:00:92:f4:2c:ee:45:90:19:30:d7:0e:d7:2d:d3:
                    75:cd:23:c3:a1:57:6d:13:aa:a0:cd:d6:2c:8a:ce:
                    ed:6d:2b:30:92:1f:79:82:f9:51:8c:4b:76:24:e9:
                    1c:77:03:73:89:39:6c:46:48:14:6b:ec:68:a6:3e:
                    cc:50:99:33:26:e4:6b:4a:2d:fa:d3:80:a3:16:91:
                    31:2b:f4:1c:1b:8c:fa:42:93:fe:70:ea:97:d1:f5:
                    64:fa:59:76:4b:ab:98:e3:aa:d9:bd:7e:29:a7:cb:
                    8d:8e:e8:75:02:6b:63:fe:3e:aa:c9:8a:10:26:b0:
                    1e:9d:d8:73:28:80:b2:e9:0e:32:e6:43:cc:a0:63:
                    7a:a6:54:b1:5d:3f:c8:49:52:79:cf:a2:d2:de:00:
                    44:73:bc:37:4d:47:92:15:9c:3f:62:89:6d:4a:45:
                    c6:69:5d:4d:66:dc:20:fc:df:e5:da:b2:98:60:52:
                    93:6f:84:79:ba:1c:e6:3c:de:0d:f1:3c:12:6b:1d:
                    35:ab:04:29:37:e4:82:55:c6:9b:13:5d:bc:13:b0:
                    16:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E4:F6:EB:20:B7:FF:2A:AF:54:3D:44:D5:82:04:ED:B0:F1:C1:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/95169653-f2cc-3d52-8579-eed55bc629ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:df:80:71:18:21:1a:3e:2a:40:9e:9e:89:ff:bd:68:42:7d:
         bd:ff:e1:63:8a:37:a3:57:84:59:29:13:e1:19:e5:04:b3:3d:
         b3:af:87:b4:74:35:98:a3:13:59:4b:8e:a5:eb:2c:fd:20:7b:
         cd:b1:08:ff:0b:59:2d:28:81:b2:43:7e:31:58:84:43:4f:0e:
         9f:1e:2d:c7:3d:80:be:20:bf:06:56:06:77:d5:55:83:dc:53:
         54:fa:d4:97:0b:33:fe:19:a2:b2:f8:4d:b1:de:9d:89:e4:f0:
         32:01:47:d7:42:f0:87:54:51:09:8f:59:92:16:6c:7a:c7:ed:
         fb:7e:0c:d8:c2:4e:ef:46:d0:e5:00:07:98:47:ac:b1:07:96:
         cd:3b:b9:2a:ae:86:23:f1:80:12:8c:08:0e:cc:f8:27:bf:45:
         a6:64:37:1d:bf:c7:9b:0c:dd:ef:54:96:f7:20:89:9c:69:3a:
         a7:bb:68:73:8d:9d:a7:ab:ad:04:4b:d8:6a:eb:08:78:23:b3:
         dd:42:12:75:1e:9b:a8:4b:a4:68:40:27:97:e9:0f:36:4a:03:
         d8:6c:19:c8:08:f2:8d:02:a9:d9:4b:de:5d:d4:ef:9d:82:2c:
         3e:b3:e2:9c:42:18:a8:c9:e7:3b:f8:60:61:f9:71:ea:52:74:
         71:e8:bc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:42:34 2026 by rpki-client