Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/76b9cadd-9c6e-3b31-ad5e-9d9324d052f9.roa
File:                     76b9cadd-9c6e-3b31-ad5e-9d9324d052f9.roa (raw, json)
Hash identifier:          NGgeivHbPNYWQWZG6aFTPMjDGk2+mCz4UZ4lGL3GYxI=
Subject key identifier:   2D:11:B0:CD:31:A1:C5:73:D8:26:C7:2C:A3:87:63:BB:44:E1:88:3B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E3E5F4B8132DA4EDAD3D92500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/76b9cadd-9c6e-3b31-ad5e-9d9324d052f9.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     134351
IP address blocks:        108.165.180.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:4b:81:32:da:4e:da:d3:d9:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=a16fa903-f88e-4eab-af9b-e3eea0fe365c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6d:6c:5e:3c:24:d3:44:cd:f9:8e:f5:7a:1e:
                    8a:10:ec:ca:d2:cf:3b:89:49:aa:ab:03:95:97:75:
                    5c:85:d3:97:47:f1:d6:7f:23:d4:4f:2b:75:0a:e1:
                    9a:f9:64:2d:9f:ce:6a:65:24:ec:70:36:e3:f7:5a:
                    c1:37:17:e2:85:87:74:61:90:38:0b:94:48:bb:ed:
                    c3:d1:21:30:0f:1c:46:46:a3:0b:26:fe:b3:70:9b:
                    87:c2:5e:08:2c:f4:47:bb:2b:9c:e9:24:6e:b7:de:
                    ec:c9:1c:3f:10:3f:9e:6f:f7:3d:fb:69:e9:09:c6:
                    88:e4:05:90:1c:07:01:57:7c:64:56:77:60:54:8a:
                    b7:99:c7:3e:a1:8d:d4:00:f4:77:58:8e:e5:bb:c4:
                    03:15:ba:86:2e:e7:d5:83:28:b0:33:3b:b4:88:37:
                    bc:46:f4:4b:c2:89:70:25:5b:23:a9:63:0c:c3:12:
                    eb:5c:b5:61:5d:24:ae:98:ba:dc:9c:03:ef:9b:c5:
                    61:24:5f:a9:1c:82:bb:f9:05:9c:c1:56:8f:eb:aa:
                    6a:39:67:ff:30:f9:96:fd:a5:2a:92:53:f3:37:40:
                    4c:c5:5a:3c:e2:c9:8a:9e:d3:05:55:63:c6:44:bd:
                    9a:aa:78:9f:d0:f2:76:f9:7b:8d:28:4c:d9:e2:9e:
                    f7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:11:B0:CD:31:A1:C5:73:D8:26:C7:2C:A3:87:63:BB:44:E1:88:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/76b9cadd-9c6e-3b31-ad5e-9d9324d052f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:c4:35:02:cf:d8:c8:93:f2:f8:80:be:cf:cd:89:57:45:60:
         9d:14:57:35:62:74:18:ca:7b:ac:1c:85:d2:21:14:0c:e0:fe:
         37:a9:80:41:d0:05:27:c5:b5:9b:4b:8b:c9:01:dc:8d:d8:d8:
         e6:f7:99:a8:50:89:dd:20:1e:c3:e5:e5:06:0e:d6:56:38:4a:
         8c:58:b1:82:2e:15:57:ac:bc:22:1f:20:6b:c0:25:d1:e1:32:
         2d:5d:a3:fb:c4:50:35:03:18:46:a3:4a:05:a5:b9:7b:0e:ee:
         66:f9:18:ac:da:37:42:fc:bc:9b:1b:3e:24:7d:b7:0e:d7:f5:
         b0:95:3f:e1:2f:10:ce:05:78:55:d4:b1:ba:15:eb:f3:0a:2c:
         e3:49:8b:31:fa:54:d4:84:35:1d:72:9e:71:0b:e9:f5:90:c1:
         5a:7c:b3:ca:f6:0b:40:9a:ee:d0:12:09:fb:47:5b:fb:7a:0e:
         cc:f4:44:9f:27:f0:04:68:7b:cc:3c:84:2b:36:0d:0a:30:5e:
         93:9f:d5:c6:71:a0:c7:74:5b:e2:85:b7:30:4c:57:a1:e7:82:
         06:2b:ed:e8:e9:79:2b:f6:b0:bb:6c:c8:a6:b7:7f:36:68:b6:
         0b:7f:a2:eb:30:c2:32:34:dd:d6:60:83:be:b7:f7:51:73:7f:
         0c:cb:a3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:05:24 2026 by rpki-client