Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f16c24e-4c6e-34c8-a9f9-105180fef305.roa
File:                     0f16c24e-4c6e-34c8-a9f9-105180fef305.roa (raw, json)
Hash identifier:          63Y57j7298XDHchDo30X/JYM4OPysp4fcF1nsJvrvRc=
Subject key identifier:   B1:C7:66:05:F9:06:C1:F5:1A:EF:30:53:ED:D0:9E:ED:2C:77:B9:F3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AECC1299C3717D8BC7C2C9180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f16c24e-4c6e-34c8-a9f9-105180fef305.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     19437
IP address blocks:        108.165.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:29:9c:37:17:d8:bc:7c:2c:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=348ebc5c-b807-48dc-826e-b87031bd91e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ba:01:e6:95:6c:44:93:bb:fa:5a:46:45:89:
                    0d:46:cf:a3:fc:fe:cc:0e:af:fe:d7:30:ce:04:4d:
                    3a:29:76:a1:9c:c2:09:25:5b:62:d3:8b:fe:f8:07:
                    86:ae:04:13:e1:da:67:2a:2e:bc:3d:71:5d:47:ed:
                    2a:17:e5:d3:6f:78:85:d4:e5:00:05:3f:4c:47:81:
                    a5:e7:52:95:75:aa:aa:e2:1e:ca:b5:dc:ae:bd:f2:
                    93:15:72:77:c1:1d:ad:5d:02:29:a3:74:8a:0d:d7:
                    5e:b1:c9:22:b8:4a:36:09:b1:ee:4a:95:9b:41:bf:
                    ad:90:d6:b9:cc:3b:d3:3c:d4:3c:ea:ea:8c:65:7e:
                    af:e4:39:29:de:3f:7e:ca:e8:28:fa:61:e6:4f:3d:
                    86:dd:b6:27:46:0b:ce:16:09:37:c4:82:26:15:09:
                    2d:ab:e9:06:36:a1:83:4e:73:a4:cc:2e:44:fe:e4:
                    08:05:86:f6:d7:84:32:61:97:0c:52:f7:34:cd:35:
                    b6:e5:d2:9b:e1:f4:b5:65:db:e2:0b:ec:df:0f:7c:
                    59:5c:2f:a0:51:cf:b5:4c:9e:5c:a8:d7:c9:48:f2:
                    57:9f:2a:8b:45:2f:1c:04:3c:ce:f7:3b:32:84:ae:
                    6d:63:24:7e:6e:8f:d3:19:83:d0:29:6a:49:fb:08:
                    20:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C7:66:05:F9:06:C1:F5:1A:EF:30:53:ED:D0:9E:ED:2C:77:B9:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f16c24e-4c6e-34c8-a9f9-105180fef305.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:b8:72:52:24:00:76:e6:1b:d4:83:42:ec:62:76:63:1a:8d:
         81:65:2f:33:e7:f4:22:03:a0:8d:c3:5e:ca:e0:4c:4d:64:b1:
         79:53:69:94:15:da:d9:07:8b:75:f0:f8:d8:83:cf:de:5b:6f:
         db:dc:1f:20:ee:75:02:7c:61:11:28:28:1a:ce:d3:b8:3e:99:
         89:78:bd:bd:f3:4b:c2:c4:7e:49:2f:50:05:66:29:25:95:71:
         85:81:8c:ea:91:df:2e:bc:7d:9d:42:ce:5f:cd:4e:ac:0f:3f:
         eb:81:69:75:06:bf:cc:be:72:0c:ba:a9:cf:11:b5:c1:81:ff:
         83:4c:a8:96:ab:b2:9f:ef:f7:91:2a:b8:dd:29:c1:53:c6:05:
         8c:d3:bc:a7:06:3a:56:97:62:29:9a:61:12:54:c9:28:26:30:
         4a:72:9d:e1:de:4d:f1:2d:f1:a7:57:bd:d6:c0:2e:c0:ce:5d:
         0e:25:71:31:be:cd:cd:11:90:8e:a5:4a:bf:44:26:b6:54:b7:
         92:81:01:44:ad:95:05:0f:98:3f:4f:78:e1:e0:75:4c:d9:ad:
         91:e5:81:8b:f1:66:27:73:d1:2a:a1:55:a5:2f:57:07:7d:c2:
         8e:89:26:7e:e9:af:de:98:35:59:10:04:a0:34:d4:c2:49:2c:
         9b:bb:84:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:03:54 2025 by rpki-client