Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c535290b-e389-31e2-8f4b-b9352b39cfb9.roa
File:                     c535290b-e389-31e2-8f4b-b9352b39cfb9.roa (raw, json)
Hash identifier:          OzqQ6z+T8c+FO8huOhHP4E2FF0Jvm9vm4jB2ofBDIZQ=
Subject key identifier:   72:88:A5:D4:A6:3C:D0:4B:27:1E:C1:A7:F6:DB:C3:87:1B:90:F7:F3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D4461DA1C15B46562F76CF940
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c535290b-e389-31e2-8f4b-b9352b39cfb9.roa
Signing time:             Mon 23 Mar 2026 19:53:42 +0000
ROA not before:           Mon 23 Mar 2026 19:53:42 +0000
ROA not after:            Sun 21 Jun 2026 19:53:42 +0000
asID:                     11798
IP address blocks:        108.165.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:61:da:1c:15:b4:65:62:f7:6c:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 23 19:53:42 2026 GMT
            Not After : Jun 21 19:53:42 2026 GMT
        Subject: CN=8daff1a4-1b4c-480c-bcff-6f2edba1530a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0c:bd:56:d7:77:5a:91:52:34:4a:3d:4f:d1:
                    12:bb:a9:9c:47:63:cf:90:0d:4b:52:99:7b:a4:a1:
                    56:36:aa:9d:83:87:82:f2:83:9e:a7:1c:87:32:ab:
                    7b:38:4f:4c:a1:30:12:ca:b3:dd:cf:2b:a8:0f:d1:
                    c9:c1:6f:b4:a5:23:e5:b5:dd:12:40:5f:a9:3f:69:
                    7c:dd:64:01:41:33:81:b1:19:6f:af:15:a9:1a:b7:
                    af:dc:d3:12:43:0b:7f:93:ec:0a:39:37:2d:58:b5:
                    4a:ef:ff:14:98:b1:40:07:c8:96:04:f5:f6:6d:d3:
                    6b:00:bd:b9:65:2c:f5:85:2e:0e:19:80:89:00:60:
                    40:93:f7:03:08:2b:47:31:ed:69:9d:67:34:ba:4e:
                    70:f2:a2:2d:81:c5:55:f4:8e:95:69:8c:7f:2c:c0:
                    c3:ba:ef:63:7d:ca:45:26:33:24:6b:35:f7:e9:1c:
                    14:42:6e:53:77:5b:3c:12:4c:cd:6e:1a:cb:2c:84:
                    b1:83:b0:bd:df:94:3f:8f:2a:da:bc:3e:a3:73:a1:
                    da:97:9c:f2:dc:0a:5a:95:a9:2e:63:1f:a0:97:0a:
                    6d:ff:5b:75:7c:c6:b3:16:fc:e9:b6:c6:2c:54:df:
                    ff:e0:c9:f2:f8:7d:5b:6d:7f:35:3f:2e:bd:28:df:
                    8e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:88:A5:D4:A6:3C:D0:4B:27:1E:C1:A7:F6:DB:C3:87:1B:90:F7:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c535290b-e389-31e2-8f4b-b9352b39cfb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:a2:03:b8:4f:64:c9:bb:b9:de:48:12:0a:ff:53:45:9d:61:
         75:0e:63:9e:1a:e4:d1:ac:cd:94:90:dd:50:25:fb:27:dc:28:
         79:53:ba:60:1c:33:99:ac:50:74:2a:79:2b:67:01:35:37:a4:
         7a:0a:02:17:de:90:cb:2b:0e:5e:0d:a7:32:79:13:f9:cf:97:
         e4:d4:61:5e:49:9b:34:64:30:10:1f:9c:e3:60:5d:a8:35:aa:
         f2:3b:f0:76:7f:2b:2e:3e:fc:ac:d6:66:28:48:8b:76:6e:f4:
         0b:02:0c:af:9d:9f:e8:b7:fc:b0:00:79:69:dd:1f:cb:6c:79:
         56:45:40:26:0a:4b:8b:de:ac:4d:71:4f:52:ad:b1:61:04:b4:
         88:26:e3:c7:1a:76:5c:0b:98:f0:3e:15:e0:a4:f6:94:72:07:
         a4:e3:2b:5a:00:2a:30:bf:71:b1:e3:c4:79:0c:60:eb:c6:3e:
         b6:a5:16:31:57:ed:e4:de:b9:26:27:1f:be:14:3d:e8:49:79:
         e0:a5:bf:d0:5d:07:f7:03:c2:67:8d:15:e0:0d:b5:22:89:03:
         fb:81:e5:88:c8:ef:77:cb:e1:fb:ed:b1:54:4a:6c:f0:11:13:
         c4:cf:c8:b8:ea:67:1b:f9:ca:0c:7a:18:26:59:c9:4b:38:fb:
         fa:fb:1d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 22:30:09 2026 by rpki-client