Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec717dc2-a4cc-3239-9b2f-de9f723ae6b0.roa
File:                     ec717dc2-a4cc-3239-9b2f-de9f723ae6b0.roa (raw, json)
Hash identifier:          Pl2UTxXiYjr7Eg70oYHzpbjXhofQQNtiG08cdVhToxA=
Subject key identifier:   B8:06:AF:71:81:47:8F:30:71:4C:6B:D0:3A:BF:B7:2D:2E:7F:78:D7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DF73DE8CDD105FE100A837820
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec717dc2-a4cc-3239-9b2f-de9f723ae6b0.roa
Signing time:             Tue 26 May 2026 21:30:59 +0000
ROA not before:           Tue 26 May 2026 21:30:59 +0000
ROA not after:            Mon 24 Aug 2026 21:30:59 +0000
asID:                     401152
IP address blocks:        108.165.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:3d:e8:cd:d1:05:fe:10:0a:83:78:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 26 21:30:59 2026 GMT
            Not After : Aug 24 21:30:59 2026 GMT
        Subject: CN=29db85fd-6f1b-4e71-95d7-6242915f6227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1d:0c:3d:86:0e:55:9b:29:11:30:a4:fb:48:
                    76:66:eb:4c:44:b4:b4:07:52:ce:e0:aa:21:2b:97:
                    3f:d8:98:a0:32:7c:08:97:8d:d6:1c:81:ce:07:8c:
                    b3:17:8d:3c:88:e1:ed:01:3a:2f:14:58:80:9e:40:
                    a1:7d:e1:22:f8:bc:50:0c:07:9f:13:f9:a1:7b:19:
                    f4:5a:19:2c:2b:a0:09:ca:31:c4:85:65:dd:68:93:
                    78:3a:be:ab:b5:58:c0:56:75:9c:3a:6f:c8:5c:d5:
                    85:13:75:87:6b:66:a2:3d:52:d7:67:cc:3e:ce:9d:
                    62:23:03:69:5f:4a:5e:9b:55:50:e9:69:36:fb:c3:
                    2e:85:1f:eb:1e:df:8a:7a:4c:74:bf:66:ff:8c:68:
                    91:d9:46:bb:06:b1:2f:1b:fd:6b:6e:cf:4d:f1:27:
                    20:41:7f:ed:63:c8:8f:48:4b:c0:e8:58:3e:bd:fe:
                    51:b0:aa:1e:7d:14:80:81:4d:b2:8f:4c:8b:57:09:
                    b2:5b:70:59:47:34:3e:c4:b8:56:61:51:3a:de:c9:
                    de:40:0f:1a:39:d4:09:e7:3e:aa:c4:3c:06:85:42:
                    5b:10:bf:4c:3c:ac:85:80:c5:a7:7e:bf:7d:15:d5:
                    5d:2a:ef:a5:97:64:ba:cd:78:05:81:45:64:60:f1:
                    ba:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:06:AF:71:81:47:8F:30:71:4C:6B:D0:3A:BF:B7:2D:2E:7F:78:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec717dc2-a4cc-3239-9b2f-de9f723ae6b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:6c:cc:77:84:4e:3b:16:3f:d5:4f:e9:b9:84:43:a6:12:5d:
         60:7a:73:7f:7e:dd:e6:fa:c4:c2:4c:6f:70:5f:47:2b:d3:a9:
         4c:44:31:62:09:70:95:7a:d2:33:18:d2:26:06:4d:5c:89:d8:
         c6:df:db:46:d7:5d:55:7b:fe:89:05:8d:f2:8c:3d:7f:7d:0d:
         e7:c9:78:04:24:0e:33:65:a7:7a:31:a5:17:19:61:6f:2f:ec:
         cf:a4:dd:09:1a:26:11:04:21:90:cc:b3:25:b3:7b:f7:b7:60:
         d5:2b:7e:b3:44:da:a5:0f:94:fb:70:e7:2a:e8:05:ac:a7:72:
         f1:57:d4:60:70:1e:c2:ac:73:26:53:03:b3:ee:e7:d5:d5:5f:
         55:9d:cd:8e:bd:44:71:3f:18:13:67:a4:6c:46:c7:d7:61:e3:
         56:ae:e0:34:d9:b9:53:cb:79:b0:6e:96:f2:47:fb:86:45:75:
         65:94:bc:54:f2:9a:fe:c5:58:0e:59:85:6d:c8:1f:2f:58:ed:
         8c:b7:ca:e3:a0:7c:6c:de:f3:ed:f0:47:50:6e:cb:26:f1:6f:
         1c:95:7a:48:25:0e:9f:2f:41:cd:2c:19:f6:21:e2:e8:ce:12:
         43:be:c6:74:88:17:9c:e9:8b:32:b8:ab:c5:00:06:3a:5f:f1:
         5f:60:9f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 04:51:59 2026 by rpki-client