Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fc94d095-ed3b-37c3-8747-38ad6a1ff96a.roa
File:                     fc94d095-ed3b-37c3-8747-38ad6a1ff96a.roa (raw, json)
Hash identifier:          s0H5Ne8XhNP2MFBYIhw8ijVvAup1ZU9J3ODtEovPgJ4=
Subject key identifier:   32:E4:C2:57:95:7A:30:24:3B:D3:E8:41:E8:5E:DC:CA:A5:B9:A6:15
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F408E18BC70CD7D451EC62CB0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fc94d095-ed3b-37c3-8747-38ad6a1ff96a.roa
Signing time:             Mon 21 Sep 2026 20:33:29 +0000
ROA not before:           Mon 21 Sep 2026 20:33:29 +0000
ROA not after:            Sun 20 Dec 2026 21:33:29 +0000
asID:                     401152
IP address blocks:        108.165.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:40:8e:18:bc:70:cd:7d:45:1e:c6:2c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 21 20:33:29 2026 GMT
            Not After : Dec 20 21:33:29 2026 GMT
        Subject: CN=49e7f429-98a7-45ff-9ed0-3324c79a9713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0a:de:d7:7c:d3:04:fa:b5:0c:6d:1b:fb:a8:
                    ea:85:fe:2a:85:31:89:28:78:0e:b4:6a:91:7f:f5:
                    fb:99:87:09:aa:05:29:a4:88:56:b9:f3:fa:60:1f:
                    ff:6e:e9:6d:98:3a:ca:b9:53:7a:9b:76:f2:87:08:
                    a4:04:bd:b4:ed:82:03:67:13:54:6f:80:db:1b:0a:
                    c1:a2:2f:b0:09:33:65:ab:06:49:43:a3:42:6f:3f:
                    78:aa:ec:a2:5d:1a:69:08:63:00:ab:48:30:2a:30:
                    89:2a:dc:4b:8e:94:9b:1b:38:b3:88:69:77:52:a0:
                    46:75:c2:64:ea:01:cd:ae:d2:9a:1b:6d:b7:87:6c:
                    88:a1:ab:dc:a5:16:c2:cc:4d:d1:ea:b1:ff:f6:5c:
                    80:e0:52:70:33:a5:ed:cb:0c:d1:5c:e6:78:28:79:
                    a0:f7:9a:5a:09:88:5e:8f:e4:f7:31:87:49:3b:59:
                    e0:ab:53:13:4c:99:a6:6e:12:76:2f:bb:1e:8c:0e:
                    82:9e:2c:c6:be:d6:9e:11:61:00:e4:ee:01:3b:36:
                    2d:a4:6e:52:cf:5a:48:07:bb:36:ce:2f:4b:d8:72:
                    be:32:66:34:d4:ac:2c:0d:ba:cd:e6:8f:31:1c:99:
                    2d:4f:f1:e0:9c:00:92:57:f0:38:22:4f:32:ef:55:
                    2a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E4:C2:57:95:7A:30:24:3B:D3:E8:41:E8:5E:DC:CA:A5:B9:A6:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fc94d095-ed3b-37c3-8747-38ad6a1ff96a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:f9:de:d2:77:0e:a6:90:1f:50:50:c8:a5:41:3c:0f:5a:1a:
         e5:32:69:44:92:be:fc:4e:37:a9:b8:98:cf:9c:01:3f:38:4c:
         d1:6f:1a:fa:fa:e2:23:46:ef:db:dc:eb:14:df:4f:8c:64:97:
         80:b9:f6:20:9b:65:44:b0:98:f9:45:a5:f7:6e:f5:a9:2b:2f:
         18:f6:0b:f7:66:48:1f:ba:31:50:64:94:d3:a1:4d:61:64:31:
         3d:66:dc:b3:f7:79:61:36:dc:fb:f7:f7:90:ad:e2:f4:73:42:
         df:f1:1c:ef:47:9d:00:e5:c4:46:9e:9d:5d:fd:67:82:07:0d:
         af:09:a2:7f:a9:37:03:3b:82:19:9f:e4:2d:a7:54:80:65:2a:
         8a:93:e3:72:15:9d:94:24:03:75:95:b1:42:58:b6:54:32:8f:
         b8:c0:6a:c0:9f:d1:89:ad:ec:93:c5:fe:88:b8:c2:a0:bb:b7:
         df:14:39:04:f6:5e:9d:ae:cd:0c:0b:f5:b1:26:97:8f:8f:81:
         be:cd:36:81:7a:e5:fa:34:b6:0a:54:be:8d:08:47:91:a9:f2:
         0c:6a:a6:a6:68:0a:21:a2:77:07:c9:7d:20:fe:32:30:ae:8f:
         d8:a5:46:6d:a0:a5:7f:ad:40:f3:ca:c5:3d:dc:7a:32:88:10:
         30:39:cf:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:27:08 2026 by rpki-client