Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05d97146-4181-31d6-98b0-578d44e43028.roa
File:                     05d97146-4181-31d6-98b0-578d44e43028.roa (raw, json)
Hash identifier:          +7tGRg07DidABoacxL+dqJ2sSF4gA7nNZG3AlxFjBlQ=
Subject key identifier:   39:7A:1F:D7:ED:37:27:CB:A4:66:6B:6B:96:B2:9F:74:B4:01:85:C8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F498AE3A795984DAC952F9E80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05d97146-4181-31d6-98b0-578d44e43028.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     399646
IP address blocks:        108.165.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:e3:a7:95:98:4d:ac:95:2f:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4dbdab5c-e41e-4ea7-a6da-f2d94d6a4b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4a:88:6d:34:0b:c6:2f:55:ca:c4:ef:74:9f:
                    d4:2f:45:f6:de:fc:c2:4f:af:62:55:20:cb:d2:cb:
                    5c:01:61:04:a2:6e:73:56:7d:51:ca:39:9b:15:8c:
                    fa:32:87:78:fe:e2:c5:60:6e:57:8a:64:12:4c:d3:
                    df:76:f1:0d:60:4f:b8:85:9d:6b:ed:1a:89:15:48:
                    0e:37:b8:22:50:7a:d1:1e:1b:42:1e:e7:79:cd:9e:
                    71:f7:fb:b6:59:f9:f6:9d:d3:0f:1e:97:bb:72:b4:
                    7f:a1:51:02:b9:77:d2:89:dc:1c:79:75:d2:65:d0:
                    11:e3:4d:8a:f0:f8:5b:0f:95:c7:5a:ce:38:f4:0c:
                    a8:c1:0b:59:29:da:ba:9b:ce:b5:ae:69:14:68:89:
                    9a:cc:22:c4:93:7d:de:d9:ec:04:50:fb:eb:f5:a4:
                    a6:0d:9c:88:61:fa:13:00:6f:d1:87:eb:84:4c:d1:
                    85:d0:01:b9:a9:45:3e:05:ff:f4:e6:be:d4:54:b4:
                    9b:92:9b:3e:dd:5e:4c:b3:15:05:ab:74:77:48:e2:
                    de:28:1d:b0:c3:6c:75:27:28:a9:f4:90:64:18:e4:
                    25:a0:fb:60:92:7d:61:3a:e4:11:73:92:00:89:98:
                    e0:87:00:8b:9c:f7:9e:55:46:16:7f:55:8d:af:96:
                    68:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7A:1F:D7:ED:37:27:CB:A4:66:6B:6B:96:B2:9F:74:B4:01:85:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05d97146-4181-31d6-98b0-578d44e43028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:67:6d:23:18:41:77:ad:52:b9:ad:10:90:8f:08:19:ca:48:
         89:69:5b:fa:cf:4a:a4:ce:da:58:a2:ad:4c:7a:bd:2f:37:51:
         f5:84:47:5f:8c:a7:a5:91:3e:e8:0d:57:95:eb:b7:6f:28:e9:
         91:90:c7:bf:43:96:94:f9:cb:39:5b:4c:d8:f1:fa:8d:53:ff:
         e6:d7:e0:7b:ef:bd:21:00:97:47:75:2e:be:2a:14:a4:12:c6:
         26:6f:78:f2:ce:3d:10:73:72:24:b5:a6:75:d1:2e:5e:13:8f:
         69:39:1e:65:d0:0d:0e:c1:1a:c8:c0:c5:70:75:b8:4e:c8:f6:
         df:90:a2:98:c1:1f:98:77:65:f8:ba:39:72:dd:db:40:35:e6:
         5e:48:b1:99:bc:c9:30:8f:ae:41:56:81:12:c2:97:36:3d:2a:
         34:5e:81:51:cc:bf:bc:80:33:8b:de:af:30:4f:69:05:1e:b3:
         9b:09:dc:b9:0d:9e:14:b3:15:5d:3d:58:04:8c:0d:65:c3:e5:
         55:82:d7:67:41:97:20:e5:8b:a9:75:17:e2:c4:38:33:03:7d:
         d2:06:45:f7:1f:41:59:da:49:ac:0f:75:fc:57:c3:eb:29:8b:
         33:0e:68:e5:1b:86:bf:31:7c:6d:03:11:e1:79:fe:ee:12:ba:
         6c:b6:9e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:15:21 2026 by rpki-client