Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a95d5e75-75e2-32b4-9752-8aa9953f9979.roa
File:                     a95d5e75-75e2-32b4-9752-8aa9953f9979.roa (raw, json)
Hash identifier:          ZSWlmBL3sDmJ3h/ZbTVOtHx9ob71y2iR3/eLQJiz/E0=
Subject key identifier:   6C:49:AF:A0:0A:B9:D0:EC:DF:5E:B8:E1:E6:7C:87:13:49:17:8D:B5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DEF460477F78CD4036BACB080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a95d5e75-75e2-32b4-9752-8aa9953f9979.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     399646
IP address blocks:        108.165.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:46:04:77:f7:8c:d4:03:6b:ac:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=fee6808b-9468-476c-864d-203bc66efe26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:58:13:9b:f1:78:d1:c9:62:26:df:50:ac:38:
                    b1:8d:2a:83:f2:9e:c5:a3:bc:72:9c:dd:a2:31:49:
                    df:81:e6:7c:3c:1e:ae:46:3e:4a:58:c2:51:14:6f:
                    84:d3:50:a5:42:e3:39:31:14:7c:c1:b1:8d:4e:6f:
                    26:b9:96:8a:29:b8:76:85:10:5c:71:ae:6c:ef:06:
                    66:9a:34:17:63:a1:75:80:65:c8:14:3e:17:32:52:
                    2b:8b:2d:a0:ac:0a:80:bf:f3:1b:49:d5:ac:c5:25:
                    ff:44:84:53:bc:2e:5f:14:53:43:22:33:71:1e:3c:
                    74:b5:cb:8a:7c:1f:14:d2:e8:bb:24:2e:5a:ca:90:
                    c7:23:e0:f4:d4:79:56:7f:e7:e6:34:7f:d6:41:df:
                    ba:fc:68:b1:10:10:32:d1:e2:67:4b:a1:bb:c6:fc:
                    95:68:6f:57:c8:84:57:47:ae:4a:66:f4:ba:62:25:
                    85:2a:5b:6e:7e:5a:eb:14:03:4c:32:cb:9b:9c:c8:
                    30:aa:04:9a:18:19:54:df:fb:4d:00:5e:81:ad:b3:
                    ef:a9:be:e2:d0:07:85:67:dd:ea:4d:04:94:81:65:
                    5c:45:8c:8c:68:7c:2b:71:77:3c:89:c8:0f:07:2f:
                    f8:0b:4a:3e:7f:75:bc:d6:ad:ed:99:3c:d6:d8:c9:
                    79:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:49:AF:A0:0A:B9:D0:EC:DF:5E:B8:E1:E6:7C:87:13:49:17:8D:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a95d5e75-75e2-32b4-9752-8aa9953f9979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:77:ca:ea:9d:26:95:5e:ce:1b:eb:13:23:82:8e:fe:e3:58:
         f3:59:c6:ae:f8:01:37:02:c3:f5:d6:e2:72:b1:7f:2e:34:74:
         96:87:21:d1:22:6f:ad:1c:b8:3d:c2:0c:4d:0e:0b:54:39:57:
         b6:38:a1:1d:94:26:28:48:fe:0f:e8:d1:fa:7c:6d:30:d7:7a:
         9e:68:c0:67:03:cc:04:9e:42:57:68:13:38:2b:09:0c:9c:9e:
         ed:23:1b:dc:57:49:06:03:c1:a8:19:38:ea:0d:b9:c3:11:c7:
         70:24:07:cb:59:2d:50:00:6d:d4:db:60:8d:f6:9a:05:f0:31:
         81:44:0b:5c:dc:3c:dc:e2:00:a2:24:29:d9:3f:de:8c:1c:24:
         34:c7:83:90:79:dd:06:99:7f:66:0b:b6:42:fd:f7:8f:cb:b3:
         69:5b:56:ee:82:56:9e:8a:56:27:b1:cf:e3:47:25:e3:42:63:
         36:0d:f6:90:b4:9c:82:2a:d7:10:90:2a:da:27:91:e2:c1:cc:
         7a:84:f3:d8:da:fa:4a:25:6e:27:3e:c7:bb:25:ce:05:4f:7a:
         f7:34:64:ad:d2:91:37:95:41:b7:2a:64:cf:3d:51:70:bb:2f:
         50:48:2b:99:c0:21:1f:e6:5c:6e:69:db:a3:25:e1:8e:2c:76:
         56:c0:11:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3vRgR394zUA2ussIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDUyNDAxMDAyN1oXDTI2MDgyMjAxMDAyN1owLzEtMCsGA1UEAxMk
ZmVlNjgwOGItOTQ2OC00NzZjLTg2NGQtMjAzYmM2NmVmZTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVgTm/F40cliJt9QrDixjSqD8p7Fo7xynN2i
MUnfgeZ8PB6uRj5KWMJRFG+E01ClQuM5MRR8wbGNTm8muZaKKbh2hRBcca5s7wZm
mjQXY6F1gGXIFD4XMlIriy2grAqAv/MbSdWsxSX/RIRTvC5fFFNDIjNxHjx0tcuK
fB8U0ui7JC5aypDHI+D01HlWf+fmNH/WQd+6/GixEBAy0eJnS6G7xvyVaG9XyIRX
R65KZvS6YiWFKltuflrrFANMMsubnMgwqgSaGBlU3/tNAF6BrbPvqb7i0AeFZ93q
TQSUgWVcRYyMaHwrcXc8icgPBy/4C0o+f3W81q3tmTzW2Ml5swIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGxJr6AKudDs31644eZ8hxNJF421MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYTk1ZDVlNzUtNzVlMi0z
MmI0LTk3NTItOGFhOTk1M2Y5OTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKV7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHJ3yuqdJpVezhvrEyOCjv7jWPNZxq74ATcCw/XW4nKxfy40dJaHIdEi
b60cuD3CDE0OC1Q5V7Y4oR2UJihI/g/o0fp8bTDXep5owGcDzASeQldoEzgrCQyc
nu0jG9xXSQYDwagZOOoNucMRx3AkB8tZLVAAbdTbYI32mgXwMYFEC1zcPNziAKIk
Kdk/3owcJDTHg5B53QaZf2YLtkL994/Ls2lbVu6CVp6KViexz+NHJeNCYzYN9pC0
nIIq1xCQKtonkeLBzHqE89ja+kolbic+x7slzgVPevc0ZK3SkTeVQbcqZM89UXC7
L1BIK5nAIR/mXG5p26Ml4Y4sdlbAETs=
-----END CERTIFICATE-----
Generated at Thu Jun 4 02:54:06 2026 by rpki-client