Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f05b435b-afeb-3e0e-a70b-c016fdc9c1f2.roa
File:                     f05b435b-afeb-3e0e-a70b-c016fdc9c1f2.roa (raw, json)
Hash identifier:          S3DG/7mQdA6xALiD8B6LyELGaBh3xLtDlZrAMecUrvc=
Subject key identifier:   BD:FA:44:71:BD:6F:E8:83:1D:B8:2C:EA:9E:85:8B:DD:19:60:8E:C9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D62C451FFF88F8326741E7B00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f05b435b-afeb-3e0e-a70b-c016fdc9c1f2.roa
Signing time:             Fri 03 Apr 2026 17:06:21 +0000
ROA not before:           Fri 03 Apr 2026 17:06:21 +0000
ROA not after:            Thu 02 Jul 2026 17:06:21 +0000
asID:                     10753
IP address blocks:        108.165.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:c4:51:ff:f8:8f:83:26:74:1e:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  3 17:06:21 2026 GMT
            Not After : Jul  2 17:06:21 2026 GMT
        Subject: CN=8c90a1e3-d488-42b9-98ef-de50ce4de83a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:71:b6:c0:fd:8c:79:5d:c9:2d:98:81:4c:19:
                    e9:e3:5d:ce:f9:61:1a:c2:75:d8:3c:30:70:b4:4c:
                    74:cb:c1:63:65:da:1e:e8:51:97:e1:52:a4:04:92:
                    99:ab:5c:b4:a3:0f:b6:7f:ca:7c:4d:a9:e5:c2:46:
                    5e:28:9b:3d:20:f7:75:0e:78:cb:de:96:1e:84:d3:
                    5f:bc:ef:13:af:48:5f:c8:13:87:f2:93:19:de:53:
                    47:92:02:48:26:a9:26:1c:bf:ee:c2:d2:18:33:f3:
                    f8:c9:f2:21:7d:36:28:79:b7:b5:38:89:92:c2:79:
                    b8:a0:14:b1:65:d6:32:31:ed:16:70:b1:79:d1:f2:
                    ee:6d:5b:62:f1:52:18:f7:4e:1e:ee:a3:65:7c:f8:
                    27:c8:79:0e:ae:c0:43:2b:3b:31:4d:f9:66:c6:c4:
                    a5:5a:06:1f:70:9d:5e:fb:e4:87:5d:16:e7:9f:9a:
                    49:15:ec:cb:29:f9:f9:06:bd:59:c6:58:04:1f:2a:
                    df:29:0e:4d:a5:1f:f5:31:c1:57:f2:5f:cc:d4:1b:
                    55:d6:02:03:c8:ab:44:7d:dd:6b:cf:92:6d:33:16:
                    1e:bb:4f:52:a2:92:29:dd:08:07:77:e2:d3:73:b4:
                    d2:41:75:4f:88:72:5f:b6:ae:dd:1b:60:69:33:cb:
                    fc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FA:44:71:BD:6F:E8:83:1D:B8:2C:EA:9E:85:8B:DD:19:60:8E:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f05b435b-afeb-3e0e-a70b-c016fdc9c1f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:64:51:d2:ba:11:13:bc:d6:02:d8:3e:2d:b6:fc:e9:a3:7a:
         08:89:5e:d7:f6:f2:1e:93:32:27:65:2a:12:1e:02:57:43:90:
         4e:92:f1:c8:10:14:9d:43:88:fb:d0:e6:2e:96:63:13:e6:20:
         a2:5a:cb:23:5f:96:56:c5:2c:9a:96:da:78:b2:0e:a5:31:67:
         47:a2:90:ef:33:18:fc:aa:1d:5a:91:5f:be:45:84:68:0f:23:
         d2:a9:80:a7:ea:8e:21:ee:ac:c3:cc:65:b4:ac:3d:8e:27:d1:
         ba:27:fe:c2:44:63:4a:76:3e:12:c8:62:45:8b:b6:e0:95:d6:
         d1:2a:b4:9a:33:98:c2:21:d8:db:56:53:13:30:95:d9:c6:1c:
         5c:b2:e8:01:15:32:64:a2:3a:ab:11:04:e3:bc:07:7d:22:8e:
         83:52:6f:3c:f4:14:41:4a:ae:79:23:17:0f:f0:d3:14:87:41:
         6d:05:68:a2:9d:9c:53:85:37:56:76:4d:21:ef:b0:28:82:65:
         38:69:f3:95:dc:1c:a8:13:9b:e5:ba:41:ca:6a:78:3d:9e:8e:
         4c:c5:59:7b:44:58:4e:61:16:74:7f:fa:5a:6b:d0:5e:71:08:
         92:b6:01:1a:cc:1c:27:a9:7a:33:f8:45:7a:cb:75:77:c6:6d:
         27:2f:08:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ixFH/+I+DJnQeewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDQwMzE3MDYyMVoXDTI2MDcwMjE3MDYyMVowLzEtMCsGA1UEAxMk
OGM5MGExZTMtZDQ4OC00MmI5LTk4ZWYtZGU1MGNlNGRlODNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHG2wP2MeV3JLZiBTBnp413O+WEawnXYPDBw
tEx0y8FjZdoe6FGX4VKkBJKZq1y0ow+2f8p8TanlwkZeKJs9IPd1DnjL3pYehNNf
vO8Tr0hfyBOH8pMZ3lNHkgJIJqkmHL/uwtIYM/P4yfIhfTYoebe1OImSwnm4oBSx
ZdYyMe0WcLF50fLubVti8VIY904e7qNlfPgnyHkOrsBDKzsxTflmxsSlWgYfcJ1e
++SHXRbnn5pJFezLKfn5Br1ZxlgEHyrfKQ5NpR/1McFX8l/M1BtV1gIDyKtEfd1r
z5JtMxYeu09SopIp3QgHd+LTc7TSQXVPiHJftq7dG2BpM8v8nQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL36RHG9b+iDHbgs6p6Fi90ZYI7JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjA1YjQzNWItYWZlYi0z
ZTBlLWE3MGItYzAxNmZkYzljMWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKJkUdK6ERO81gLYPi22/OmjegiJXtf28h6TMidlKhIeAldDkE6S8cgQ
FJ1DiPvQ5i6WYxPmIKJayyNfllbFLJqW2niyDqUxZ0eikO8zGPyqHVqRX75FhGgP
I9KpgKfqjiHurMPMZbSsPY4n0bon/sJEY0p2PhLIYkWLtuCV1tEqtJozmMIh2NtW
UxMwldnGHFyy6AEVMmSiOqsRBOO8B30ijoNSbzz0FEFKrnkjFw/w0xSHQW0FaKKd
nFOFN1Z2TSHvsCiCZThp85XcHKgTm+W6QcpqeD2ejkzFWXtEWE5hFnR/+lpr0F5x
CJK2ARrMHCepejP4RXrLdXfGbScvCGA=
-----END CERTIFICATE-----
Generated at Sat Apr 4 15:28:30 2026 by rpki-client