Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae811e48-55b5-3db6-a7e6-f898641f2c08.roa
File:                     ae811e48-55b5-3db6-a7e6-f898641f2c08.roa (raw, json)
Hash identifier:          HGKvzWuprHhziFVoCGLh+Lnh72jLaeCmJFdLNMAVuw8=
Subject key identifier:   06:EF:AA:C4:21:16:0A:EC:77:C3:69:C6:D3:35:0D:06:16:2F:EF:8D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DE9B0C1EDD4E650F671EC5040
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae811e48-55b5-3db6-a7e6-f898641f2c08.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     399646
IP address blocks:        108.165.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:c1:ed:d4:e6:50:f6:71:ec:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=1e71995c-3ad8-4a9b-bb12-db9b79bfe894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4f:82:ae:d4:0c:72:0d:ef:f7:84:f5:f1:2d:
                    5f:55:1d:07:d2:e0:d7:a3:4f:1f:6f:43:4a:22:37:
                    52:d6:ed:46:63:25:e4:54:9f:06:b5:a0:f3:75:2e:
                    cc:a5:97:f2:a9:33:10:37:ed:46:8c:f8:da:22:e5:
                    3f:1f:85:2b:09:1c:c4:3a:5c:c7:31:91:80:8f:39:
                    a4:5c:8b:34:a2:e5:37:88:a0:ff:e9:8b:6f:42:c1:
                    b9:e8:40:ae:26:42:83:f7:22:51:5b:c2:49:35:3e:
                    94:d0:0c:f4:0c:32:5f:5d:13:46:a8:a0:ef:cc:42:
                    11:a8:3e:2e:36:2e:ab:59:2f:cb:d9:c5:f2:08:27:
                    ba:c5:f1:ca:a0:70:45:88:37:5d:4f:6d:5d:ce:a4:
                    12:18:a6:2d:f2:7d:8e:06:9a:d8:52:c1:b7:50:6b:
                    28:f9:c7:91:bb:bc:32:ff:59:0a:ed:75:d9:48:8c:
                    a2:20:7f:b7:28:57:e2:16:c9:b1:f5:14:9d:4c:b8:
                    61:2b:83:81:c0:d0:6e:d7:88:39:aa:fa:0f:9d:f4:
                    6b:a9:b0:91:57:6c:09:23:d9:bc:38:4a:04:fd:31:
                    17:66:4d:d7:6c:f7:71:2b:30:45:8a:0c:65:4f:65:
                    e6:cb:81:7a:44:d6:79:8d:d2:c9:78:6a:a4:ef:31:
                    97:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:EF:AA:C4:21:16:0A:EC:77:C3:69:C6:D3:35:0D:06:16:2F:EF:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae811e48-55b5-3db6-a7e6-f898641f2c08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:e9:fd:4c:eb:34:c3:06:88:6f:b6:5e:a8:74:6e:3d:e3:5e:
         fb:bb:40:d0:df:c8:fa:73:ef:ae:14:65:4e:81:6f:d7:d6:e7:
         12:6c:62:19:5a:db:66:92:ad:3b:55:8a:9b:08:20:64:70:48:
         97:4d:df:d5:a4:bd:fd:6c:eb:c2:28:1f:41:63:c3:4b:75:bb:
         81:df:10:7e:a9:49:c5:cb:7f:f1:b4:06:b3:b7:bf:4e:8e:05:
         3f:e1:c8:41:70:24:d0:00:cf:36:c1:8e:40:76:06:7f:d3:7b:
         df:30:23:49:9f:3c:88:ec:40:1d:cf:90:a2:51:cf:aa:9d:bc:
         2e:6b:b7:c2:28:54:fc:a5:f1:c5:70:64:e8:14:b2:5d:df:ef:
         73:1e:f5:81:a2:67:3f:06:2a:57:02:ea:a4:c9:32:96:cd:10:
         01:e1:67:13:bf:e8:0d:fd:2d:09:60:f2:90:bc:ad:b7:98:47:
         78:ae:d4:ee:85:44:9a:93:79:be:1d:62:aa:3e:d2:9c:ce:0f:
         b7:ef:8d:2d:51:98:d4:48:2f:7f:17:35:8c:71:67:04:f6:ef:
         7a:57:c5:5a:c1:84:ae:8c:45:fa:61:2d:e0:2f:df:bc:dc:0c:
         3d:a8:39:ca:6a:7f:63:df:19:5a:45:56:36:20:47:74:c3:5a:
         9b:c4:70:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 02:57:24 2026 by rpki-client