Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ccabeee7-1d58-310e-ba4e-d2fbfa6b937e.roa
File:                     ccabeee7-1d58-310e-ba4e-d2fbfa6b937e.roa (raw, json)
Hash identifier:          B+PEqI5oX4vHAutgJYw36nbpJ+XfTpAjzHAR3rj5iJU=
Subject key identifier:   A9:C9:03:94:D8:4C:61:C3:E6:6A:EC:18:7F:15:B8:CC:02:07:DB:44
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EB8473B483CE1DE263552CE00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ccabeee7-1d58-310e-ba4e-d2fbfa6b937e.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     401152
IP address blocks:        108.165.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:3b:48:3c:e1:de:26:35:52:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=c588a7de-dac4-4b4b-8294-54d64265bc94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:44:0f:fa:20:31:74:62:80:6f:10:df:fd:2f:
                    14:a1:63:73:1d:44:12:48:80:e3:e2:ff:fc:76:1d:
                    df:ea:02:c4:12:c2:23:ec:36:e6:c4:4e:15:4c:fd:
                    b3:c5:42:af:a3:f1:ae:99:ca:b5:45:fc:d9:a2:73:
                    8e:08:95:ae:19:40:ca:09:fb:10:bb:57:aa:5c:10:
                    9c:e4:98:d5:e7:6a:ba:03:a2:d9:07:8e:81:53:4b:
                    18:55:57:08:ea:e5:97:1e:7a:b8:c3:75:c0:47:63:
                    c6:7a:6e:7d:88:fb:ac:95:50:9b:7a:c0:db:4a:60:
                    74:a5:3a:c5:c7:39:f9:27:63:98:ee:a6:a7:09:ff:
                    9d:bb:4c:0c:bb:f8:f3:5c:13:ef:8b:0f:77:5b:ed:
                    81:d6:8e:92:36:90:d6:2b:b6:9b:1d:86:35:bc:a6:
                    76:80:c4:6f:9b:33:80:8a:1d:53:e3:4c:bd:7d:82:
                    54:43:14:89:b9:40:cb:0e:ed:f7:32:81:3d:ca:a9:
                    7f:a1:f2:c6:75:cd:3d:05:0b:33:f2:6c:85:b4:c5:
                    2e:0e:07:97:ee:c4:07:5d:b1:c5:88:ee:bf:bb:5f:
                    1b:a1:e8:21:9f:6c:25:1e:3b:fd:2d:71:e2:6a:53:
                    d9:b9:3c:0f:fe:74:79:21:6c:a3:c8:f9:5b:5f:85:
                    8c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C9:03:94:D8:4C:61:C3:E6:6A:EC:18:7F:15:B8:CC:02:07:DB:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ccabeee7-1d58-310e-ba4e-d2fbfa6b937e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:cc:42:97:c7:58:18:5c:a1:7c:b4:bd:35:cb:d7:2c:d1:89:
         02:11:04:a1:5b:75:87:50:e7:58:be:cd:1d:35:1a:c1:bc:37:
         52:a9:e3:d3:9a:46:f5:44:9f:1a:a2:bc:ea:4b:e6:84:56:80:
         a9:06:80:74:1e:6c:4f:68:e4:64:11:b6:c5:4e:f3:a2:fe:c8:
         5d:28:1e:ca:21:6f:c8:94:9b:ba:11:29:f7:a6:61:fb:1f:58:
         5b:74:3a:56:59:18:63:89:d1:a5:7f:57:ad:5c:17:38:5e:b3:
         ad:c0:95:c1:4f:4d:a6:b1:af:f1:64:cb:a9:c5:a6:18:bf:31:
         07:0a:ef:87:95:1e:f3:92:e6:c9:d5:38:c5:9c:f0:fe:69:fc:
         dc:30:b3:01:41:00:8d:38:e0:11:76:21:ca:86:95:e1:c2:d3:
         42:ce:98:d7:e2:82:51:8c:9b:7e:15:36:9d:b6:0b:48:7f:78:
         fb:b3:2a:35:0a:17:ae:8b:bd:9a:4f:80:9f:cf:2c:aa:bf:35:
         01:35:ab:fa:c4:59:cf:b7:ab:42:20:77:87:66:93:d1:fb:8e:
         f8:ed:00:a3:15:37:41:de:3c:e6:61:8a:63:b9:6a:d0:d1:4f:
         1e:52:6e:56:73:f2:1d:d3:f6:f4:ba:77:d2:91:5c:3f:3c:7c:
         f0:f6:5a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 18:52:51 2026 by rpki-client