Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fa1c770-c015-3149-af43-e2902ca5a962.roa
File:                     4fa1c770-c015-3149-af43-e2902ca5a962.roa (raw, json)
Hash identifier:          9TtNIikRwTbiMUMv1sBYURIvzZgvZEQ7syjD6xem8vY=
Subject key identifier:   AB:4A:F3:07:66:EE:E5:E1:7A:91:26:69:18:11:A3:8D:3E:92:C3:38
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D359FABEBA295AAC4ADF2A900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fa1c770-c015-3149-af43-e2902ca5a962.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     13768
IP address blocks:        108.165.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:ab:eb:a2:95:aa:c4:ad:f2:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=8ea9308d-7540-4e71-8c81-25268a9361eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:39:4d:2b:8e:c0:07:db:42:af:3c:59:52:c8:
                    3d:be:c4:36:76:94:b5:b7:a8:29:15:65:cd:98:84:
                    d8:a7:a6:46:f5:c0:da:21:18:cc:54:ec:ac:68:23:
                    2f:f0:9c:7e:42:bc:6a:6a:4b:f7:73:c0:46:45:fa:
                    3d:84:ef:f0:71:59:bc:14:9b:b1:af:ea:63:21:d1:
                    47:00:60:16:14:84:a9:2b:95:2f:5f:18:b3:13:52:
                    e7:4d:62:7a:2c:a7:08:48:b0:d9:46:62:44:f9:04:
                    b3:ea:4c:86:07:63:ee:a3:b1:17:61:65:f2:1f:0c:
                    ee:16:8d:5a:72:78:ab:7b:5e:04:be:1b:e9:f4:3c:
                    9c:ee:6c:35:da:53:6d:a1:7a:f1:dd:78:25:97:1f:
                    21:b6:51:70:09:32:a5:63:5f:33:90:39:d8:b2:18:
                    24:2f:93:0f:b6:14:6e:dd:0c:3d:19:03:90:cb:88:
                    e3:de:2c:32:70:0e:f8:08:e7:75:c8:cc:30:13:68:
                    67:90:8f:a9:a1:b5:2b:98:7a:1a:fa:9b:73:11:8f:
                    a0:cc:4a:b5:a2:e6:e0:72:fd:9e:dc:76:e8:4c:64:
                    8a:25:7c:f5:d4:38:a2:e0:bb:cf:83:41:00:52:66:
                    d7:bb:c5:9a:b0:3e:94:4d:a2:77:d0:91:09:57:a6:
                    87:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4A:F3:07:66:EE:E5:E1:7A:91:26:69:18:11:A3:8D:3E:92:C3:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fa1c770-c015-3149-af43-e2902ca5a962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ef:e5:e1:fe:5c:31:94:04:05:dc:d7:a3:25:19:ec:f9:fe:
         b9:62:b9:d0:01:3d:ea:28:57:43:88:58:89:ec:14:1c:21:0b:
         df:60:e1:fa:b6:f0:85:2b:c3:70:49:50:56:fa:44:90:ce:5d:
         df:88:de:16:a8:c0:36:08:ce:0d:cf:b6:28:64:92:c6:1d:2b:
         c4:61:67:ab:83:fd:46:fc:78:49:73:a8:f5:d9:e9:b4:a0:b9:
         50:6a:85:d5:5f:6e:ef:e2:19:27:7b:09:ff:c8:87:64:be:8b:
         93:20:15:30:ee:f0:cd:05:cc:19:7b:45:57:6b:b8:73:25:18:
         66:12:0c:cb:33:e8:aa:c4:75:79:17:37:62:7d:c8:98:e1:bf:
         44:a4:03:b1:02:bf:36:7a:60:11:56:c1:63:8f:32:c0:4b:50:
         ca:7e:4f:3e:92:97:b6:a1:5e:06:7c:25:af:e3:50:01:1d:76:
         ec:f7:23:44:b8:b3:25:80:db:98:1e:37:b2:d4:d7:a5:0f:6e:
         bc:86:8f:b4:5a:a9:d7:9f:4d:79:45:ae:f8:ec:47:06:e8:f5:
         f0:04:1a:c2:d3:75:df:d7:a2:5f:d9:df:41:27:a1:61:6c:a8:
         72:46:bd:b4:2e:e5:3f:88:3f:4e:c7:bb:b4:e2:fd:e1:4a:0d:
         bd:d7:cd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:24 2026 by rpki-client