Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3a40d627-707a-30e0-905b-cdc406086e11.roa
File:                     3a40d627-707a-30e0-905b-cdc406086e11.roa (raw, json)
Hash identifier:          OESy1O/iaMZStRE2GegOKgl98OSFdn3dEq9C79UV24k=
Subject key identifier:   AA:A5:77:08:F0:67:C4:08:00:18:F3:E7:35:E2:C3:C8:F4:DD:4E:D2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DB07593C6E88C99FD8F04F620
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3a40d627-707a-30e0-905b-cdc406086e11.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     29802
IP address blocks:        108.165.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:93:c6:e8:8c:99:fd:8f:04:f6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=14508b4f-5098-4356-befc-ec9c4adce79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e6:45:9c:13:c4:ed:27:73:83:99:99:70:8c:
                    41:10:53:71:38:d8:e3:55:f5:7b:3d:cf:13:fb:61:
                    0a:7a:32:00:ef:cf:d5:28:04:f4:59:44:9a:cd:15:
                    cc:7e:02:dc:67:c8:0c:15:b2:5a:10:87:df:e4:e6:
                    5d:8d:2f:a0:2c:b9:a4:c8:32:d9:da:87:39:cf:7c:
                    ae:ad:03:39:a8:f2:ff:17:58:31:b1:d2:bf:ca:1b:
                    af:52:14:40:f8:0e:42:5a:a2:c1:a2:4b:69:c3:a6:
                    b8:04:03:f3:33:b1:45:7b:36:bd:04:19:fd:6a:62:
                    52:9b:6d:24:c5:f7:7b:d6:ba:79:1f:2b:62:e5:c2:
                    de:82:73:d4:2a:d7:bf:0e:71:58:91:a3:e3:62:86:
                    48:7c:cf:d3:bc:c0:d3:cc:bd:80:9e:e1:25:8d:56:
                    65:de:77:39:c5:75:10:12:43:e8:58:72:97:b7:c9:
                    25:d3:57:24:83:1c:fa:8f:cf:bb:aa:ed:51:65:dd:
                    20:ab:d5:7e:74:5c:d7:c6:09:af:74:93:2d:5b:ab:
                    81:b2:ff:17:12:2b:22:62:d4:9a:fc:22:f6:09:91:
                    72:4c:27:7f:1f:2d:79:92:dd:f5:3c:19:23:13:06:
                    d7:cb:40:75:29:d7:fa:bb:ed:5d:d2:05:25:18:4f:
                    0b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A5:77:08:F0:67:C4:08:00:18:F3:E7:35:E2:C3:C8:F4:DD:4E:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3a40d627-707a-30e0-905b-cdc406086e11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:46:da:8f:77:14:9f:bf:02:1c:15:6e:c0:c6:9c:8b:f2:9c:
         88:a8:29:28:b3:3a:0e:28:74:88:e6:4e:e7:45:ec:43:6d:6a:
         2e:94:4a:a3:03:53:c7:ce:54:f4:fc:b9:2f:58:f4:55:e3:b8:
         eb:b1:cf:33:5d:92:53:58:cf:0b:16:5a:0d:9a:52:e3:49:b4:
         4f:c7:4a:51:c9:ec:15:d7:a6:8f:d2:9a:96:e2:35:79:c3:cd:
         a6:5d:c6:23:ed:c8:ef:57:52:80:70:f8:ab:42:c1:11:60:71:
         ce:a5:de:37:a4:a1:1d:e8:dc:a4:be:ea:6d:cc:7e:e2:79:c0:
         3b:e2:0d:56:80:c7:04:5b:8b:35:68:aa:5f:69:8f:c4:92:30:
         97:7b:cf:00:a6:71:25:d1:85:0e:1e:8c:d9:5c:10:4e:86:11:
         60:69:b0:90:a2:b7:d5:11:61:33:0d:20:2f:32:e7:3c:39:8e:
         2a:62:21:53:03:0b:fa:87:b9:6d:10:59:87:f6:99:a0:b7:4e:
         3f:f1:7e:84:bf:44:f8:95:a6:f6:12:39:4a:fc:ef:19:7b:41:
         22:3b:6c:7d:92:11:e6:92:ef:a4:c4:48:e0:67:f9:7a:94:ed:
         36:6a:e4:91:18:00:47:63:fc:40:3d:58:51:a5:a1:57:10:96:
         fa:10:6e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:30:37 2026 by rpki-client