Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a95d5e75-75e2-32b4-9752-8aa9953f9979.roa
File:                     a95d5e75-75e2-32b4-9752-8aa9953f9979.roa (raw, json)
Hash identifier:          r3hNyCN8H4S5GgNSFhZINI7bwe6cY9Sl3Spa5RzaYOE=
Subject key identifier:   C1:68:CA:21:FB:E9:9D:3C:90:2F:61:EA:D0:82:01:55:CF:12:25:0E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F497339301C5149A120449D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a95d5e75-75e2-32b4-9752-8aa9953f9979.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     399646
IP address blocks:        108.165.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:39:30:1c:51:49:a1:20:44:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ddd112bf-2ff5-4cf2-afb1-560ee61763a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:75:8b:2a:92:e2:46:ba:64:ff:8f:9b:6b:7e:
                    35:b8:ed:94:c4:33:0f:1c:fa:c3:d3:46:26:ce:11:
                    c9:60:e4:df:cc:33:60:59:7a:5f:c6:f2:b3:22:c2:
                    5e:69:76:b9:87:69:0f:3c:08:a2:c9:ef:49:a4:1e:
                    dc:a9:56:b0:a7:78:86:1f:af:8d:aa:9b:06:7a:d8:
                    91:95:1f:70:ed:46:9e:49:ba:22:21:24:06:80:cf:
                    9c:5f:b0:54:79:8b:f4:14:d9:2d:e3:7c:00:36:2c:
                    95:6a:33:fd:a3:2b:d7:00:20:e9:88:bc:0b:6f:1f:
                    36:bf:03:db:55:fe:7a:b3:fa:78:92:28:59:e9:6e:
                    52:55:95:3f:16:4e:d0:e7:2e:8b:fb:48:05:2e:a5:
                    cd:4b:95:4d:45:f1:37:73:9b:6f:45:61:94:d0:04:
                    c4:a5:b8:1d:76:b1:e7:b4:03:ea:b9:b0:18:07:53:
                    19:21:6b:89:58:b3:77:29:02:4f:e9:d2:b2:3d:a4:
                    17:78:0c:93:03:33:65:4e:6e:dd:cc:29:57:e9:d7:
                    30:70:e8:54:26:0e:e3:bd:ec:5f:8c:e6:a6:dc:71:
                    21:5d:49:d3:16:4a:ee:fe:95:52:66:7e:6a:c6:ef:
                    bf:95:d1:0a:db:4f:d7:0c:4c:25:f2:97:05:08:b5:
                    1c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:68:CA:21:FB:E9:9D:3C:90:2F:61:EA:D0:82:01:55:CF:12:25:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a95d5e75-75e2-32b4-9752-8aa9953f9979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:94:d5:6b:83:a3:ca:2b:1a:66:5b:a5:8e:da:00:29:d5:2c:
         8a:8d:cb:82:d6:89:0a:65:52:bf:ba:79:3b:61:0e:d8:90:ae:
         b9:ad:5b:37:84:7b:9d:0b:57:ef:42:db:7d:db:31:bd:9c:a2:
         ad:9f:35:81:a8:c5:27:34:a4:31:3f:bd:55:d7:86:2d:3b:fd:
         bf:2e:c4:5f:d2:3b:91:24:f7:83:c4:13:84:43:94:40:e1:50:
         38:e5:fd:f8:8c:9c:2e:5f:f9:12:5f:32:25:00:11:bb:f9:0a:
         79:8d:fa:75:bd:c9:e3:f0:87:e9:2a:25:ad:45:4a:f6:3a:8b:
         22:53:06:f1:ca:1f:a9:7f:ca:f8:fb:ba:32:70:20:1c:77:7a:
         c1:0d:21:65:19:57:3b:54:77:08:22:eb:c4:c2:e5:bc:1d:5f:
         0f:9a:d1:c4:4e:1d:59:cf:f8:08:48:dc:62:c2:14:da:1f:bc:
         a7:96:43:cb:b6:93:56:82:d8:55:c9:86:26:1b:a6:da:b7:48:
         74:a9:87:65:f3:20:5e:65:6f:d5:7b:8b:35:dd:d5:8b:36:df:
         c7:eb:c3:ed:d5:a4:27:b1:8a:33:bb:af:d0:59:1a:7a:64:39:
         34:20:32:8b:55:c1:f8:2f:c6:81:03:23:b2:e9:db:f8:d7:93:
         72:ca:2c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:50:14 2026 by rpki-client