Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c6d9216a-6aa1-33f2-99be-6afdea85774e.roa
File:                     c6d9216a-6aa1-33f2-99be-6afdea85774e.roa (raw, json)
Hash identifier:          K88xlbaN8wZaUWjt8xbktnJYhIdR0J3CLR8qDO2Cyw8=
Subject key identifier:   33:04:E3:E6:4A:91:8C:5E:00:FD:C6:A3:6C:97:91:75:A4:55:66:D5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DE8D1DE5C7E20DAEE8C05C120
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c6d9216a-6aa1-33f2-99be-6afdea85774e.roa
Signing time:             Thu 21 May 2026 17:31:58 +0000
ROA not before:           Thu 21 May 2026 17:31:58 +0000
ROA not after:            Wed 19 Aug 2026 17:31:58 +0000
asID:                     834
IP address blocks:        108.165.162.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:d1:de:5c:7e:20:da:ee:8c:05:c1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 21 17:31:58 2026 GMT
            Not After : Aug 19 17:31:58 2026 GMT
        Subject: CN=bcc99041-d413-4a4d-ba93-65bf67c717ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5c:17:56:9c:ca:89:72:76:3f:54:80:fa:f2:
                    0d:e3:7a:4d:f9:e4:9b:90:f4:72:5f:ed:6a:f5:85:
                    ea:16:6e:62:6e:22:8a:5e:fe:23:99:98:6d:0d:fa:
                    73:da:b7:32:1c:d9:e3:fd:7a:a4:83:fb:c9:b5:cf:
                    2e:33:4a:86:ea:eb:24:f5:f0:61:f8:78:95:74:65:
                    43:55:e4:89:11:db:aa:18:e8:ea:04:1e:8c:ac:5b:
                    8b:fd:47:24:dd:9e:bb:79:46:83:89:ff:c6:ff:43:
                    31:59:6d:b3:bc:7f:b2:88:0a:87:44:5f:28:c5:e9:
                    42:f7:27:f2:2d:bd:d1:a0:63:e4:b8:d9:a9:c0:6b:
                    40:66:d8:7b:37:60:bd:18:8f:06:c6:2f:f7:ff:94:
                    a0:0f:7b:c1:65:35:e6:29:c8:b8:8a:9d:06:4f:81:
                    51:fe:db:4a:83:56:8c:22:8d:3d:d7:ca:5f:37:8b:
                    2c:59:01:58:77:28:dd:73:a5:6f:8b:cf:99:58:39:
                    6a:f6:c6:c2:76:fe:fe:8b:22:44:c4:bc:d8:65:68:
                    5c:80:7e:7d:72:e5:bb:ab:1c:e0:31:73:94:3f:5b:
                    e2:85:0d:2c:fd:0f:4e:7c:ee:48:ea:75:e8:cf:43:
                    28:2e:06:f8:06:4f:76:84:4d:12:af:72:91:7b:8a:
                    cf:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:04:E3:E6:4A:91:8C:5E:00:FD:C6:A3:6C:97:91:75:A4:55:66:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c6d9216a-6aa1-33f2-99be-6afdea85774e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:d6:68:3c:5a:53:6f:0d:7d:0c:50:19:a1:17:43:17:ff:b8:
         ed:4b:3e:49:b6:41:3b:eb:0f:f0:0f:84:0d:60:0c:1e:5c:48:
         fa:1e:12:92:2e:b4:91:35:05:8b:82:31:0e:2b:f9:bb:88:4c:
         67:b1:8b:d4:97:95:5e:17:1e:6b:e9:cf:dd:26:a8:5d:e2:48:
         1e:70:37:f4:f9:ec:20:ef:74:ef:45:81:76:87:5f:fb:2e:6d:
         0c:10:43:81:f2:60:04:cf:01:b0:5f:a0:7c:f9:40:7b:cd:37:
         68:00:50:24:32:1f:2f:49:62:1d:0e:a3:81:02:66:21:6c:2d:
         26:25:a0:de:cb:0b:0d:25:2b:2f:61:34:33:71:25:4a:3b:1a:
         d3:7c:0f:28:9f:ef:35:45:7a:46:8d:c6:1a:7c:58:8b:d3:70:
         4d:90:59:e6:2f:ff:94:46:07:b5:99:f1:cc:08:b7:78:88:d4:
         f2:93:85:41:bf:57:3a:f6:ce:65:dc:57:a0:62:57:57:12:f2:
         8c:c1:08:6c:c0:d6:93:f4:70:84:4d:82:23:68:a2:c6:94:89:
         05:c5:15:dc:6b:79:11:d3:f2:81:bb:5f:46:bf:8f:ac:60:4d:
         97:ef:0c:80:cf:5a:51:69:d2:6d:68:55:c9:ca:8c:99:2a:a0:
         ed:2b:9a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 20:00:49 2026 by rpki-client