Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a2d6e406-6ebf-317e-a43e-a7a07da22c0e.roa
File:                     a2d6e406-6ebf-317e-a43e-a7a07da22c0e.roa (raw, json)
Hash identifier:          ajhhNOa56VhxrkBHtXs8aun9MMweQKBldr52BS6eHIU=
Subject key identifier:   23:10:B9:CE:B7:E3:CE:32:23:42:A8:42:2A:CF:F3:01:E7:91:09:CA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D924B00D19BC23A4D62A53000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a2d6e406-6ebf-317e-a43e-a7a07da22c0e.roa
Signing time:             Mon 20 Apr 2026 17:40:43 +0000
ROA not before:           Mon 20 Apr 2026 17:40:43 +0000
ROA not after:            Sun 19 Jul 2026 17:40:43 +0000
asID:                     397373
IP address blocks:        108.165.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:92:4b:00:d1:9b:c2:3a:4d:62:a5:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 20 17:40:43 2026 GMT
            Not After : Jul 19 17:40:43 2026 GMT
        Subject: CN=50bfb907-944b-4a16-bb89-02fffe651fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c9:b6:8c:bb:2e:40:b0:ef:55:45:87:7e:0f:
                    b3:3e:6a:7a:bc:b8:74:5e:36:7e:2f:42:eb:20:ef:
                    ce:d5:58:dc:cc:41:13:6c:49:0e:05:c9:b8:75:9d:
                    29:37:b7:ee:6c:e8:2a:20:e5:75:2b:10:99:fe:9f:
                    2a:ce:c0:9c:86:3b:da:a4:df:1d:18:d3:ec:ef:68:
                    02:8f:c9:42:82:c3:61:52:70:10:61:9f:90:a0:23:
                    3a:9b:f0:8b:3b:1d:04:22:74:23:24:8c:d2:85:25:
                    d9:a5:3a:b6:2b:05:ba:a1:4a:7b:8a:13:5e:95:43:
                    27:0c:1b:31:f3:00:61:46:10:24:55:d9:54:18:b0:
                    cf:0b:44:43:44:b0:48:9e:5f:9d:27:e4:25:bc:fe:
                    ec:9a:51:01:16:14:69:80:b4:38:96:82:0b:96:a4:
                    ca:d6:78:87:46:78:7c:a3:1e:07:84:b2:44:8f:24:
                    55:6e:76:ce:f5:17:e7:22:5c:ac:df:76:c4:ba:8f:
                    60:6c:50:4b:9f:f7:17:f8:06:c6:a7:31:31:ca:9a:
                    b1:34:b8:ed:cd:a9:2d:2e:e9:12:30:b6:04:70:5e:
                    8f:1a:bd:a5:cc:f8:93:8e:b4:14:d4:02:3f:f8:ee:
                    be:e1:70:5c:34:0b:6f:50:29:d9:d0:0c:8a:ff:69:
                    2e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:10:B9:CE:B7:E3:CE:32:23:42:A8:42:2A:CF:F3:01:E7:91:09:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a2d6e406-6ebf-317e-a43e-a7a07da22c0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:8a:26:c7:c1:e9:69:ba:9e:21:7e:20:d0:26:52:08:c9:51:
         42:42:1d:96:8b:2e:62:77:50:aa:86:bc:f6:6e:db:fe:07:7b:
         1c:7a:39:29:f6:2d:56:47:64:ac:0c:f5:0d:4c:3c:4c:71:cf:
         ea:91:55:86:00:19:7a:f9:3c:d3:b5:41:17:a0:18:38:22:dd:
         95:bc:d9:44:d7:61:f7:20:8c:e2:96:49:19:70:81:18:1a:fa:
         26:f1:e2:c5:1d:89:f3:d4:6e:14:70:f2:07:b3:42:d0:22:8e:
         fb:63:88:dd:1a:bf:de:76:6f:58:5c:b6:6d:79:e5:8b:6d:0b:
         18:8f:4e:8b:d8:53:76:1b:b8:25:2e:42:63:c4:5a:5a:8b:42:
         2a:e6:94:be:41:f9:20:f2:61:9a:d9:58:44:64:6b:3b:56:14:
         37:55:e5:62:97:50:db:61:98:b8:9a:72:2e:f4:15:c6:d9:bb:
         61:cd:dd:73:d8:37:ff:ae:f2:90:d3:82:2b:f1:c7:3e:e2:a3:
         e4:18:ab:94:d6:06:14:2f:2a:8e:20:86:3b:d3:67:ac:a5:5d:
         f9:ec:07:3d:49:3c:b6:29:e9:67:f0:af:8f:aa:1b:4b:4a:1d:
         d1:37:7d:68:3e:2b:af:7a:8c:7e:7b:57:62:48:2f:bd:42:65:
         fd:48:43:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 23 21:38:25 2026 by rpki-client