Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2046611-5c5e-3d47-960e-eeaa126441c6.roa
File:                     f2046611-5c5e-3d47-960e-eeaa126441c6.roa (raw, json)
Hash identifier:          lCLEO1ES5vZ8TzQ3S03SO5nGZEJ4XdmAjgxdXkVRqsU=
Subject key identifier:   AF:82:E5:B6:F0:9E:67:D3:4E:1B:3C:CC:96:C5:38:15:36:06:9C:78
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D3B92E85B8AAA62AC30B80C40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2046611-5c5e-3d47-960e-eeaa126441c6.roa
Signing time:             Fri 20 Mar 2026 16:10:16 +0000
ROA not before:           Fri 20 Mar 2026 16:10:16 +0000
ROA not after:            Thu 18 Jun 2026 16:10:16 +0000
asID:                     213529
IP address blocks:        108.165.32.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3b:92:e8:5b:8a:aa:62:ac:30:b8:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 20 16:10:16 2026 GMT
            Not After : Jun 18 16:10:16 2026 GMT
        Subject: CN=5911b344-d977-43d3-b6e0-c0936705bc30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:25:8a:67:10:a3:49:0f:64:58:21:78:29:0e:
                    7b:20:c2:a3:a7:35:14:e3:14:6e:88:ea:27:9d:9a:
                    33:84:c6:b3:70:66:7f:4f:da:dc:61:88:ee:25:54:
                    12:d6:70:b8:50:47:49:c1:58:1b:05:5f:fa:f6:66:
                    f0:e9:c7:89:6e:57:ac:b8:1d:39:11:aa:d1:fd:89:
                    c5:40:b1:63:dd:93:cc:95:37:7c:0e:30:f8:1f:4d:
                    ee:4e:90:c1:e7:c8:61:d9:6a:af:28:70:b0:d7:27:
                    1a:57:49:2a:99:9f:11:53:ca:61:a5:5c:dd:5b:e2:
                    14:cb:b4:a3:de:39:ae:71:26:f1:49:16:8e:57:94:
                    9b:2b:b6:00:0e:0d:8d:ad:9d:02:9d:7f:db:73:13:
                    e5:21:f3:ea:7f:e5:cd:cf:5b:57:7e:8e:f8:b2:51:
                    e7:08:24:74:60:f7:09:fb:4e:e8:a6:07:5d:a4:1c:
                    47:e2:4b:10:0d:f8:08:ab:80:20:96:58:26:67:d0:
                    6a:e1:b1:c6:91:73:70:8b:61:87:e1:b5:09:ee:5d:
                    19:74:12:b8:ef:fe:b6:eb:f5:c0:91:fa:d7:10:ad:
                    17:2a:48:86:11:88:7b:6c:8b:30:96:f4:3a:24:07:
                    f1:60:b5:e0:84:de:7f:70:01:b1:ac:ad:72:44:dc:
                    6a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:82:E5:B6:F0:9E:67:D3:4E:1B:3C:CC:96:C5:38:15:36:06:9C:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2046611-5c5e-3d47-960e-eeaa126441c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:2f:fd:2b:9f:eb:9d:1a:02:9b:65:9c:f0:4b:a7:ee:38:90:
         13:ac:c9:d6:04:80:fd:db:ee:66:60:c4:c8:78:5e:c2:88:13:
         b0:18:c0:9a:4d:44:cf:58:57:6f:d3:bd:9d:5d:5e:0b:c3:aa:
         c7:77:fe:3a:77:d5:cd:4f:e1:ed:e0:38:b3:95:68:43:71:d5:
         22:1e:07:5b:57:a7:2a:f8:2e:4c:67:b1:b3:01:86:9f:14:f8:
         67:b7:3a:26:95:42:8a:40:b7:29:a1:34:62:8e:09:10:58:8d:
         55:e3:cd:18:13:50:90:44:16:74:89:d0:d7:21:4d:6c:15:0b:
         1f:d1:7b:d6:de:5c:2d:89:80:2f:a6:b5:81:7e:b9:05:e5:0b:
         c4:30:67:42:35:38:e2:dc:f7:15:e2:0f:1c:af:57:c1:ef:a9:
         b0:65:c3:41:1f:ab:af:99:c6:a8:98:03:ef:54:f2:59:0a:a0:
         8c:62:5f:ce:51:c2:d4:7e:26:ee:4e:db:d6:b6:1d:d6:40:24:
         16:54:b2:5d:cb:96:c7:c8:df:5a:ae:8e:38:ee:77:23:a2:79:
         8b:68:31:39:00:66:d0:28:8d:20:e1:3e:02:6e:f7:ad:16:00:
         e1:3c:81:f7:7a:07:88:c5:56:a9:32:76:67:ed:6b:cc:03:53:
         cb:81:ed:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 03:51:02 2026 by rpki-client