Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9a328758-fcb1-335a-b732-08201fc90832.roa
File:                     9a328758-fcb1-335a-b732-08201fc90832.roa (raw, json)
Hash identifier:          7kjHR0JLVrKn4j6CyItHky65qGcT7aH9zuimQlKqCc4=
Subject key identifier:   6C:AD:97:40:66:75:E8:76:5C:00:28:E5:48:1F:50:5D:60:21:92:27
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F68281CA6D3E9ECA9C55D5180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9a328758-fcb1-335a-b732-08201fc90832.roa
Signing time:             Tue 06 Oct 2026 01:00:13 +0000
ROA not before:           Tue 06 Oct 2026 01:00:13 +0000
ROA not after:            Mon 04 Jan 2027 02:00:13 +0000
asID:                     11798
IP address blocks:        108.165.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:68:28:1c:a6:d3:e9:ec:a9:c5:5d:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  6 01:00:13 2026 GMT
            Not After : Jan  4 02:00:13 2027 GMT
        Subject: CN=f2dfb22b-6a84-4dc1-b87e-ce008fe8ec09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c9:ec:69:5b:93:f9:fb:e3:b2:e2:7f:be:f0:
                    c0:a4:60:f3:5f:2b:22:52:ae:43:af:60:ea:d2:33:
                    1b:8e:52:38:27:bf:61:02:e0:e2:24:bb:93:08:d0:
                    f1:2d:ab:88:18:67:83:c0:95:d4:e4:40:bb:57:80:
                    f4:cf:67:64:0c:c5:56:0c:10:dd:11:42:94:35:b9:
                    9f:76:12:9a:89:92:df:ed:44:7c:ed:f4:fa:e6:13:
                    03:15:02:c2:54:f6:39:f8:77:5b:a5:a1:1e:45:a4:
                    cf:08:35:b2:e4:01:97:6e:29:21:13:00:87:cb:68:
                    a7:18:47:16:58:66:84:53:76:77:26:1d:4b:bb:c6:
                    9b:71:22:f7:ce:7f:c9:dd:79:89:88:55:ee:b8:c2:
                    34:52:c6:33:a4:b7:91:89:46:b5:b7:1b:d5:13:72:
                    bb:cc:6c:c7:e5:c7:dc:03:7e:2b:79:64:3d:19:10:
                    74:fa:59:b6:65:f1:62:ee:1a:2a:be:01:65:81:6f:
                    cb:62:7d:d3:de:79:cb:21:e1:b9:8a:95:1d:12:37:
                    0c:b4:6e:63:d1:3c:0f:1e:95:01:09:f1:86:c2:ca:
                    83:f3:60:a2:a5:a9:cb:75:47:68:d3:9f:a0:5b:55:
                    1c:d4:78:80:12:b1:fe:b0:64:78:5b:e4:66:de:64:
                    d3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AD:97:40:66:75:E8:76:5C:00:28:E5:48:1F:50:5D:60:21:92:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9a328758-fcb1-335a-b732-08201fc90832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:43:10:a3:ec:db:25:b8:64:8a:b4:de:a7:c4:ac:00:cf:97:
         f6:a6:bb:ec:b7:29:e5:4d:e0:d4:de:c0:ab:d5:c3:c8:3b:83:
         45:6e:aa:c1:82:e0:e5:7c:5f:1c:56:2a:6d:65:22:34:02:1f:
         85:c0:68:3f:0f:c5:fb:8b:6c:6f:65:bd:eb:e7:62:e3:0a:15:
         e8:be:e4:97:90:90:50:a0:a2:48:22:5a:30:ee:8a:b8:aa:dc:
         71:b7:78:b6:fc:98:cd:7e:b2:e4:72:1c:52:82:86:46:c9:f0:
         f3:77:01:91:1b:d8:6c:c3:de:a7:ee:bd:ba:fe:88:91:a4:38:
         76:28:18:97:8f:1d:f3:68:d8:d2:ec:e4:0f:f3:e7:e9:84:b8:
         d3:6b:2f:52:a7:11:cd:a5:69:47:66:a4:f7:4b:c7:c7:78:80:
         77:a1:23:a7:dc:c3:92:ba:1d:ec:56:d9:8f:6f:8e:d0:4c:af:
         03:d8:cf:e4:7d:1e:8e:b9:ce:b7:52:7b:d5:11:77:14:d8:ff:
         fb:71:99:5e:6b:03:0f:09:9a:19:b8:a8:ca:06:45:d1:91:94:
         ce:85:d2:af:08:e4:90:9c:7f:9d:19:30:b8:36:38:81:6d:ff:
         3b:82:a8:3a:93:6c:98:ca:fc:a3:1f:35:a9:02:6a:dc:d9:11:
         ea:68:40:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:35:54 2026 by rpki-client