Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4257857b-c738-39e5-a9d5-5ed409b12519.roa
File:                     4257857b-c738-39e5-a9d5-5ed409b12519.roa (raw, json)
Hash identifier:          rUehzFFFUpg0Zhslf8w/jOj4o3U/txWXkIJCCpo4MUY=
Subject key identifier:   3A:11:CD:1C:41:96:32:35:EB:9C:E8:23:4F:4C:9A:93:7A:FB:32:5B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E9384F6B835EA8C6BC02E3FC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4257857b-c738-39e5-a9d5-5ed409b12519.roa
Signing time:             Tue 21 Jul 2026 21:00:12 +0000
ROA not before:           Tue 21 Jul 2026 21:00:12 +0000
ROA not after:            Mon 19 Oct 2026 21:00:12 +0000
asID:                     21859
IP address blocks:        108.165.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:93:84:f6:b8:35:ea:8c:6b:c0:2e:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 21 21:00:12 2026 GMT
            Not After : Oct 19 21:00:12 2026 GMT
        Subject: CN=f656d8b9-71be-490d-8912-82219562b88b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5d:73:3f:99:88:bd:1e:db:ab:10:95:47:f3:
                    0e:1a:a2:56:79:c9:1a:92:43:25:13:4b:39:e5:88:
                    84:0b:d7:ea:fd:c8:91:27:d7:8c:f7:77:c9:ca:fc:
                    ab:7d:06:56:4c:74:0e:23:86:8e:56:5c:d2:8a:b6:
                    cd:93:61:05:8e:3d:a2:3d:cc:15:14:ae:48:eb:a8:
                    c5:57:56:f7:ca:a3:b3:e0:28:88:0e:19:13:52:16:
                    94:aa:ed:63:65:46:6e:4b:77:29:8a:a4:8f:fd:61:
                    55:9c:a5:ab:b6:67:52:0f:9c:e8:8c:5e:d1:90:f1:
                    e0:cd:8f:f2:91:44:85:27:06:ca:70:0b:76:c8:a8:
                    c2:c2:bb:c5:b0:b3:20:75:cc:0a:ce:ad:c8:3c:a6:
                    04:e1:55:80:6d:eb:16:e1:7f:cf:c9:78:73:d5:5d:
                    bf:9d:42:68:a3:3c:11:8b:9d:06:1d:39:4d:ea:1e:
                    03:ba:01:99:9b:5e:2b:d6:ef:12:39:75:fd:bd:c2:
                    71:0b:71:41:3a:ae:26:c6:df:23:d1:f1:3b:8c:27:
                    61:c7:5c:a5:5c:cc:b5:b9:5b:f3:e7:30:46:5a:3c:
                    ae:54:cf:45:aa:69:a5:a2:23:a9:49:8e:02:29:02:
                    54:93:42:3b:50:04:45:fc:44:d0:f3:58:6f:dd:93:
                    bf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:11:CD:1C:41:96:32:35:EB:9C:E8:23:4F:4C:9A:93:7A:FB:32:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4257857b-c738-39e5-a9d5-5ed409b12519.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:33:90:a6:83:72:77:b3:7b:7c:46:50:2d:f8:fc:68:9c:94:
         a6:ec:66:47:b5:5f:35:49:fd:e5:e9:58:1f:28:5f:4f:40:86:
         7b:05:37:38:0b:37:3b:44:43:93:88:ab:cf:a4:6c:cf:c6:2b:
         1f:49:32:4a:23:aa:d5:e2:fd:90:0a:40:74:d5:78:0f:38:f9:
         b0:63:c0:8d:d2:3a:1e:58:eb:00:64:c2:08:a4:01:29:53:6e:
         9f:52:a9:d6:4c:35:7d:7b:a3:4c:1c:7c:ba:fb:a7:8c:bb:7f:
         85:92:8d:89:24:a4:0c:49:96:c0:4b:92:9f:f5:6c:64:8f:a3:
         02:53:ef:fa:b9:e1:47:fc:e3:77:ca:ad:59:d0:c2:12:63:82:
         7d:2e:67:c4:18:d3:c2:29:e2:0e:a1:91:89:14:15:69:f3:5d:
         db:9d:c8:b7:e0:9a:09:b9:3f:c3:88:cf:db:25:5b:05:ca:b3:
         a0:92:21:62:3c:df:e6:42:c7:54:1b:e1:79:d7:71:80:61:31:
         80:54:a8:25:3b:d1:c0:c7:c4:00:02:6d:e6:79:9e:0f:82:06:
         fb:58:93:c5:22:bb:2c:a4:06:97:a7:d5:70:23:07:be:68:48:
         ce:79:93:98:32:2d:78:4d:bb:4a:12:9e:c9:17:e8:4c:82:b6:
         6a:44:f9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:59:47 2026 by rpki-client