Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d542365a-7d3d-3f55-9a29-4968a2147f88.roa
File:                     d542365a-7d3d-3f55-9a29-4968a2147f88.roa (raw, json)
Hash identifier:          QE7eVVOECTVrQlzsSChTrzI8LnrAC5X9yylse8qsXxI=
Subject key identifier:   E8:96:57:FD:C8:3A:4B:3A:EE:C6:E8:4B:7D:9F:92:08:B1:16:44:67
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F54258D1674CD76F5B5A1BB80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d542365a-7d3d-3f55-9a29-4968a2147f88.roa
Signing time:             Mon 28 Sep 2026 20:59:01 +0000
ROA not before:           Mon 28 Sep 2026 20:59:01 +0000
ROA not after:            Sun 27 Dec 2026 21:59:01 +0000
asID:                     401152
IP address blocks:        108.165.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:25:8d:16:74:cd:76:f5:b5:a1:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 28 20:59:01 2026 GMT
            Not After : Dec 27 21:59:01 2026 GMT
        Subject: CN=35a3e458-eb5d-4a12-b318-6aedb185b57a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e2:78:ce:3b:80:d4:54:49:b9:a6:51:95:aa:
                    86:f9:a4:1a:f3:43:30:69:03:40:b8:a9:2b:d8:86:
                    b5:8e:cd:5c:5e:f2:ba:3f:70:06:03:8f:e4:a2:0d:
                    8e:13:ef:ca:7e:dc:7c:a6:d2:30:c5:2a:cc:75:f5:
                    b3:a3:a0:15:80:84:41:4d:5d:df:d4:34:1f:41:b2:
                    52:fc:fd:f1:71:66:d7:6e:97:96:20:41:28:43:b2:
                    f5:34:28:db:b9:c9:87:ed:3c:18:ef:77:21:8f:60:
                    96:71:96:9b:bd:78:d8:51:1b:99:2a:eb:f1:46:cf:
                    dc:f8:ca:b4:c3:6c:7f:12:f3:4e:8e:e7:49:29:5f:
                    05:cd:a7:bb:d3:ac:58:3c:2e:03:1f:5f:b6:7a:ec:
                    02:b7:ee:e6:59:5e:eb:88:81:96:0f:49:76:6c:25:
                    22:92:17:af:28:69:b2:ca:87:a2:38:d0:7c:04:b1:
                    db:1f:7c:98:d5:6b:4c:07:5e:68:2c:5d:f0:31:4e:
                    56:dd:3a:b3:09:63:9a:36:d4:78:17:f9:b8:bb:94:
                    44:42:a4:fb:0a:a6:aa:ad:da:0a:f7:68:8d:a8:ba:
                    57:f4:72:f2:e1:cf:0a:90:a7:eb:b5:4a:04:3d:43:
                    ee:9d:79:bf:a3:69:f7:df:01:cc:53:b5:26:7d:b8:
                    8b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:96:57:FD:C8:3A:4B:3A:EE:C6:E8:4B:7D:9F:92:08:B1:16:44:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d542365a-7d3d-3f55-9a29-4968a2147f88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:51:8d:25:2b:3b:45:36:bc:20:9f:6f:44:69:1f:9b:2f:8d:
         37:39:54:21:04:29:4b:2d:7c:f6:42:42:90:62:4d:24:57:77:
         7e:a9:87:29:2d:53:3b:73:0b:94:1d:75:c1:87:37:2e:d9:d2:
         ac:29:43:5d:23:bd:f2:eb:6d:f5:8f:3a:8e:d2:fc:fb:c7:f1:
         cf:ae:70:f5:6a:86:c3:c4:d5:f0:02:b3:09:93:91:73:b6:6d:
         6d:00:9e:79:44:b7:e3:3e:89:51:7c:11:87:e6:98:d3:82:f1:
         54:09:b3:aa:cc:8b:95:b3:7b:8f:a3:08:a6:a2:83:9d:43:df:
         63:13:b0:27:7c:8f:5d:dd:76:44:e1:98:2e:62:8e:4d:37:5e:
         66:85:74:ea:af:45:d3:f9:ad:ca:44:dc:dd:b4:02:25:fd:10:
         24:31:b1:c8:1a:82:5e:89:87:f7:07:93:30:21:c4:03:6d:0e:
         27:1a:d4:02:fe:93:41:8e:f9:d9:20:58:67:ce:05:4a:05:70:
         31:ed:c6:5d:44:82:6e:03:5f:84:62:df:0e:0f:65:0b:92:73:
         6b:15:e9:13:b7:b1:33:1c:df:f8:52:d9:57:24:ce:8c:bb:97:
         84:25:10:6f:33:3d:92:2d:58:ea:79:4a:65:a0:92:81:c1:33:
         24:f2:fa:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 08:32:41 2026 by rpki-client