Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e9b4f483-b37a-329b-ba97-2e0518ddb3a3.roa
File:                     e9b4f483-b37a-329b-ba97-2e0518ddb3a3.roa (raw, json)
Hash identifier:          N9XC5lfWtvS4vNLZn61AN5FsBaGV/1vrEa3ChMOGTKM=
Subject key identifier:   14:E7:00:DD:52:A4:65:A5:6A:34:C6:19:7A:D4:3D:97:28:70:06:79
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AFC1C09AC61464FE12000A594
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e9b4f483-b37a-329b-ba97-2e0518ddb3a3.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     212335
IP address blocks:        108.165.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:09:ac:61:46:4f:e1:20:00:a5:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=f6cd7b02-0888-44a7-a8d7-dc1aaadf6edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4c:cc:b6:8d:bd:7a:a6:c4:4e:6c:b9:8a:75:
                    34:42:51:ad:ea:4c:e4:10:b9:6c:d6:a4:20:fd:5d:
                    2c:d8:12:42:98:66:1c:bc:13:6c:8a:6b:59:b1:82:
                    c6:43:dc:2b:81:b2:d6:4e:d3:77:d6:21:0c:2c:6c:
                    db:8f:85:4c:ab:bd:3f:56:57:c0:e6:de:18:d1:d8:
                    16:5f:71:5e:08:22:86:20:ca:a6:de:a4:6f:52:14:
                    4d:75:b3:42:d6:69:a2:60:2b:44:24:79:1b:5c:91:
                    56:6d:7b:43:3f:4c:eb:64:62:80:69:67:0a:1c:58:
                    f4:e5:08:22:0c:b3:32:3b:c6:94:b8:59:e0:69:2d:
                    42:b7:1f:dc:b8:79:47:b5:00:0a:07:c7:af:64:45:
                    9c:b9:2f:59:1e:a5:59:a0:d4:40:bd:50:8e:43:28:
                    64:ca:73:1b:b1:f8:50:c1:5f:16:7d:7a:18:e6:af:
                    21:91:ca:66:a2:7c:10:c1:8f:d8:8b:2e:f6:21:b6:
                    f1:a7:75:23:ff:6f:a3:3d:3c:04:91:17:6a:d7:6f:
                    73:f5:f4:28:67:4a:c6:46:e3:53:9b:74:84:39:de:
                    2c:c8:f0:0b:49:dc:18:67:d2:3a:b1:84:cf:58:3d:
                    7c:c5:ae:22:45:95:51:74:82:28:ae:53:9b:f3:5c:
                    7e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E7:00:DD:52:A4:65:A5:6A:34:C6:19:7A:D4:3D:97:28:70:06:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e9b4f483-b37a-329b-ba97-2e0518ddb3a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:ce:1c:e2:20:e8:26:0f:4f:19:80:dd:23:fc:a3:f6:04:e1:
         a4:e9:82:74:b6:f8:17:df:13:32:59:f3:6e:94:64:0e:07:b8:
         d8:c5:0f:54:a9:dc:3c:d2:d4:91:51:8e:19:54:73:d8:62:f9:
         ff:06:97:c5:d9:98:65:b9:f9:f5:0f:cc:0c:04:5b:78:d5:87:
         1e:70:74:35:cb:5e:13:b0:11:27:48:a2:4a:de:87:02:95:1b:
         9d:56:07:13:00:f6:63:2f:fb:e8:9c:97:bc:c1:17:5f:ad:74:
         b6:c5:89:be:3f:9b:13:5b:26:00:d4:07:be:c5:cd:07:b1:9a:
         3a:a9:ab:a5:c5:a1:ec:c2:8b:f8:d1:0b:77:1b:be:b3:de:40:
         51:d3:81:a2:a8:02:df:10:21:49:13:d4:01:04:66:b7:7b:35:
         d1:e2:4f:38:86:29:bd:ff:a9:8a:41:58:cd:52:38:22:59:88:
         b8:72:62:dc:0f:df:2b:b9:b8:d2:1e:d9:d5:a0:e6:eb:8f:69:
         6c:a6:47:b2:db:a0:27:03:d1:86:b6:7b:64:36:68:93:f6:ee:
         19:54:de:2f:a4:55:06:b3:f8:12:8f:c2:11:2e:7d:3a:a3:68:
         63:84:1a:75:07:03:bd:4c:ff:cf:d3:85:25:e0:01:f3:ae:16:
         a6:61:78:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:11:22 2025 by rpki-client