Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/979ba0be-acb6-3a2d-b7f6-485b3aa08854.roa
File:                     979ba0be-acb6-3a2d-b7f6-485b3aa08854.roa (raw, json)
Hash identifier:          vWO8FI4qvBGYITyE6xiZd+zqfJsoH1TQYcME+YZX8eI=
Subject key identifier:   33:F0:27:64:12:82:BB:80:61:0F:DF:1A:EE:67:28:DE:A5:1E:13:83
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EC372B03356B0A6B0E21374E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/979ba0be-acb6-3a2d-b7f6-485b3aa08854.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     214483
IP address blocks:        108.165.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:b0:33:56:b0:a6:b0:e2:13:74:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=ee18d1b9-261a-4f27-bf99-190552e85659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:76:0a:65:4c:99:ff:bc:00:a6:e3:3e:ac:9e:
                    9e:c8:32:29:f8:1c:8f:14:e7:de:09:bc:07:e9:78:
                    8f:f0:0b:75:1e:ca:9b:00:c9:01:cf:91:fe:cf:0b:
                    f7:25:00:7a:82:1f:5c:5b:94:16:c3:80:a9:6f:8b:
                    12:10:11:41:69:65:6f:03:53:b6:b5:5f:09:86:7d:
                    40:e7:78:cf:81:48:d8:71:d8:be:8c:45:5c:d0:82:
                    88:60:cb:af:3a:59:d5:96:6c:1b:a7:51:5a:e8:57:
                    4d:32:ed:3c:7a:7c:8b:5d:ba:4b:80:87:5e:79:25:
                    24:de:c3:7c:59:d0:17:1f:85:14:69:b7:e5:c8:df:
                    7a:4e:06:34:4d:55:79:6f:8d:ef:85:4d:82:dd:8b:
                    f1:dd:d3:28:4f:de:0d:82:7a:d3:83:d4:c7:bb:a2:
                    9f:7b:8f:9e:b2:3a:31:60:9f:a7:65:1b:dc:c7:16:
                    96:b3:c2:19:5e:5d:be:78:d8:5a:21:a4:72:e7:a5:
                    75:94:1c:19:93:3f:c8:f9:77:0d:d4:8d:b8:99:52:
                    b7:1f:af:b6:3e:63:ec:c0:0e:46:f4:dc:90:33:ab:
                    41:3b:71:4c:74:09:31:5d:65:03:e7:33:af:07:f3:
                    08:e5:8b:83:a7:39:a7:4c:a2:1d:fc:a5:74:c8:eb:
                    6e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F0:27:64:12:82:BB:80:61:0F:DF:1A:EE:67:28:DE:A5:1E:13:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/979ba0be-acb6-3a2d-b7f6-485b3aa08854.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:78:01:cb:36:f2:0c:38:64:cf:52:bd:2a:f7:f6:21:c8:80:
         f7:2b:5e:47:b0:e4:ab:c0:bb:0e:91:02:81:d0:7e:57:0d:ab:
         bc:43:84:58:00:ad:25:0c:f0:a9:d4:1a:75:cf:57:12:d1:4c:
         39:84:ee:c2:18:92:7f:97:2f:71:c6:b4:b9:4c:27:4b:92:5b:
         4a:24:f9:2e:ed:e4:d3:dd:0c:76:c3:a1:f1:6a:f6:8b:cc:a8:
         6e:af:38:de:7d:b8:71:df:78:fd:fc:19:6c:13:e4:3c:56:0e:
         4d:3c:cf:8a:0d:2d:72:05:e3:08:1e:3a:e2:13:a0:2b:9e:4c:
         31:f7:0b:22:45:f7:61:a4:3f:fb:b8:4f:0a:0a:da:26:2e:9b:
         18:f6:0d:31:44:3c:6a:5b:52:57:d0:3a:19:fd:61:4a:9f:91:
         49:bf:d0:5d:fa:5f:c7:37:92:a7:6a:b5:b0:fa:a5:3b:12:e5:
         4e:8d:13:7c:60:f1:20:88:79:06:15:e6:3c:dc:96:b5:b7:ef:
         dc:13:05:88:4a:85:04:b0:ff:89:7e:df:88:88:76:20:c2:b5:
         40:72:a6:1f:7a:bf:1e:65:c0:95:93:b0:31:92:b4:0c:58:0f:
         5b:67:f7:5e:ca:5a:4d:f1:50:85:d2:8f:20:6d:d3:40:09:ea:
         16:1f:03:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 19:49:25 2026 by rpki-client