Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e3426078-00d2-3918-8fcd-ceb23177b4be.roa
File:                     e3426078-00d2-3918-8fcd-ceb23177b4be.roa (raw, json)
Hash identifier:          7VKVV3RbK1VmEEEvly7+InSiO+EO158BceoUmXsmObw=
Subject key identifier:   DE:7C:37:AF:71:67:3C:EA:FC:70:6A:61:25:F1:CF:AB:50:4E:C7:6B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DB3402E8C42D3A3B057BBA9C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e3426078-00d2-3918-8fcd-ceb23177b4be.roa
Signing time:             Sat 02 May 2026 13:00:31 +0000
ROA not before:           Sat 02 May 2026 13:00:31 +0000
ROA not after:            Fri 31 Jul 2026 13:00:31 +0000
asID:                     21859
IP address blocks:        108.165.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b3:40:2e:8c:42:d3:a3:b0:57:bb:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  2 13:00:31 2026 GMT
            Not After : Jul 31 13:00:31 2026 GMT
        Subject: CN=829bfab9-f2a6-4500-b8c9-3d39fe65ed79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:65:a6:92:dc:09:c6:a2:cd:b6:7e:fa:6d:99:
                    6f:ad:d7:79:43:d0:aa:6b:ae:99:40:f3:53:a1:e4:
                    84:a7:2d:28:42:f2:e6:b0:5e:d9:94:85:ee:21:1a:
                    ea:55:18:16:c8:1b:53:f0:8e:07:a5:8d:ae:87:5a:
                    29:96:a3:0a:e1:47:a5:6e:08:92:77:60:c6:dc:6c:
                    89:25:a1:6e:19:7d:81:93:a3:cd:fc:d9:af:90:f3:
                    ee:29:2b:03:e2:6f:00:47:eb:12:64:3f:c6:bb:27:
                    fb:24:a4:f9:44:ca:af:e6:cf:69:b8:92:0b:8f:d7:
                    3b:e4:82:d7:52:43:72:b8:2c:37:1e:93:33:88:f8:
                    9f:96:1e:dc:4f:4b:e9:bb:b8:c2:be:9c:a4:b9:10:
                    32:dd:29:f1:f3:e1:c3:04:20:09:ab:a0:68:27:89:
                    95:cf:68:2c:99:c4:a0:c5:3c:7a:2d:4f:af:18:b0:
                    50:50:f7:9f:0c:7b:73:df:c7:1c:62:ed:eb:14:51:
                    c9:5b:13:08:86:b0:41:2b:9f:ed:fb:35:90:d2:4f:
                    1f:b8:c3:dd:fd:a8:92:e9:33:27:71:d5:43:d6:2d:
                    5c:b8:5a:62:7c:e0:37:37:91:0d:95:7a:27:ee:de:
                    49:16:6e:58:0e:d6:60:8b:0b:96:37:96:01:59:5d:
                    41:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7C:37:AF:71:67:3C:EA:FC:70:6A:61:25:F1:CF:AB:50:4E:C7:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e3426078-00d2-3918-8fcd-ceb23177b4be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:2f:52:47:86:84:ec:56:20:56:76:f4:cd:3f:2f:d9:10:1d:
         e7:27:51:06:f8:d4:4c:2d:06:bf:1b:e3:d1:ab:cb:7d:e2:fe:
         51:03:c4:f5:bc:46:24:76:43:44:10:ab:24:07:13:14:c2:a2:
         78:69:2c:64:ab:e6:7a:9f:4d:86:16:31:e8:4d:05:c6:41:9e:
         14:c8:6c:12:34:88:a9:e1:64:e8:d8:6f:2d:1e:a0:c8:bf:d8:
         87:82:f1:f9:6f:31:8a:0c:8f:3c:f9:e2:9a:f5:a5:7b:d8:24:
         e3:02:07:82:4e:93:7b:2c:a8:20:ea:11:f0:e2:a8:5a:a8:4d:
         62:13:d4:7c:eb:02:2b:28:37:b3:f7:18:86:ca:2b:36:c4:ba:
         2d:a9:b4:70:11:d4:88:5f:a3:01:5e:1d:b0:26:b0:d6:42:fe:
         a8:fa:ee:07:22:34:de:db:f0:e5:ee:3e:c4:01:69:37:67:e6:
         69:49:ff:05:cf:5b:73:a3:1e:77:6a:f8:92:f5:72:7b:1b:f4:
         88:b8:ee:63:5b:c9:52:33:f8:7e:52:65:f6:ca:a5:3b:a8:d8:
         60:2f:8a:33:7f:e2:13:56:28:0a:02:16:81:7f:5d:3d:e9:87:
         32:ec:a2:09:99:dd:62:73:76:f2:28:23:25:59:9d:8f:45:ef:
         99:22:25:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:50:39 2026 by rpki-client