Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6bc20021-d905-3ec8-bbfd-896749510a77.roa
File:                     6bc20021-d905-3ec8-bbfd-896749510a77.roa (raw, json)
Hash identifier:          hIQtfE5Tqd3/ICTi8EbKQ2FMlCuldog+uMyTCjHEWEc=
Subject key identifier:   F0:6C:91:86:C8:EA:C5:89:59:56:B4:D9:8D:EF:7B:B8:AB:2F:1A:68
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E9384FA761F9524872C8D4580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6bc20021-d905-3ec8-bbfd-896749510a77.roa
Signing time:             Tue 21 Jul 2026 21:00:12 +0000
ROA not before:           Tue 21 Jul 2026 21:00:12 +0000
ROA not after:            Mon 19 Oct 2026 21:00:12 +0000
asID:                     21859
IP address blocks:        108.165.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:93:84:fa:76:1f:95:24:87:2c:8d:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 21 21:00:12 2026 GMT
            Not After : Oct 19 21:00:12 2026 GMT
        Subject: CN=ad979ce6-a6b4-4919-a9e1-b33deb734b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:df:17:ae:a7:8d:d5:95:1c:35:f4:99:5c:84:
                    1b:d7:53:54:dc:5c:f9:b8:78:66:0f:d5:e1:33:1d:
                    84:25:fc:0c:29:56:ca:e2:db:5f:10:d3:4d:69:bc:
                    35:fc:19:aa:2c:19:9b:a9:c3:92:a9:32:24:65:80:
                    1f:c1:21:7f:79:93:d7:f1:da:56:fe:a8:69:e0:ae:
                    3f:e3:6d:ca:83:fb:53:cf:cd:c4:8d:32:61:73:fa:
                    f7:c3:80:17:a0:b3:10:b8:93:c8:f8:44:1c:9f:3e:
                    2c:a3:5c:9f:52:42:98:2b:91:0a:95:eb:14:05:d2:
                    33:e3:26:e2:ad:eb:b4:88:e4:5c:a5:f6:d7:9a:97:
                    27:4d:31:c5:ad:d3:47:40:ce:3e:b1:3a:7f:b3:dd:
                    d2:b7:46:88:b7:ef:17:59:4c:ab:49:30:97:d5:80:
                    7e:14:fd:0c:69:b8:3e:2d:fa:3f:a9:6e:f2:ea:b9:
                    ea:ca:56:3c:a7:69:35:93:8a:30:14:12:69:f2:03:
                    e2:e3:2a:7b:fc:37:06:6c:23:33:4c:80:9d:b4:ee:
                    9d:2d:06:ce:13:e0:85:82:3c:cb:b6:ef:1e:06:53:
                    9f:20:a8:c2:f2:13:dd:7d:35:e1:ff:c3:34:e0:62:
                    7f:1c:6a:12:42:5a:50:04:72:65:75:f0:c4:cd:fc:
                    4f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6C:91:86:C8:EA:C5:89:59:56:B4:D9:8D:EF:7B:B8:AB:2F:1A:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6bc20021-d905-3ec8-bbfd-896749510a77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:09:2d:9b:e0:b3:e6:f0:12:d6:73:23:ff:af:e6:1e:9e:e5:
         d9:81:5c:a0:0f:92:ae:fa:51:00:c0:0b:c2:9e:f7:48:31:da:
         c0:5b:06:03:69:ec:0a:20:52:e4:bd:11:c9:36:b2:b2:5b:d3:
         d7:f9:2d:69:03:37:a9:17:de:70:d9:f6:a5:78:b5:bf:e2:35:
         be:e1:f5:2a:9d:a3:0f:25:ff:64:23:3f:09:1c:76:21:33:7f:
         56:ea:20:b9:79:73:14:d8:72:d6:24:66:e3:6e:1d:54:b8:e8:
         ed:1d:9f:15:fe:72:18:64:c3:50:ce:42:d1:48:2e:f2:d1:0d:
         af:b7:28:9f:de:c0:15:6a:ce:b3:13:da:40:75:3f:91:47:50:
         46:b2:1c:eb:ff:76:13:9c:90:6e:b5:84:d0:28:05:d9:ca:ff:
         93:68:65:ed:83:bd:19:7a:f0:36:af:35:a2:57:a0:31:68:92:
         4b:11:62:ef:5a:1a:a6:fc:08:c1:63:6c:a0:21:ec:6d:bb:5c:
         5e:45:d4:52:0d:50:d2:19:8b:67:0d:ae:4a:95:f1:7c:74:0f:
         d1:3b:f5:e2:5d:05:0b:0a:67:12:e4:fe:f8:37:cd:d1:96:03:
         bb:67:47:fe:b6:1b:5b:46:e5:db:d9:9c:b0:ac:f9:52:c8:cb:
         1d:83:ba:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:13:10 2026 by rpki-client