Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/84f591e2-29b0-34f2-bf1d-02a48a67e082.roa
File:                     84f591e2-29b0-34f2-bf1d-02a48a67e082.roa (raw, json)
Hash identifier:          7DegO1ZM5sgsjwF4ld+3/4OOMx/t4JN1wE0A7UFcDDo=
Subject key identifier:   E2:41:86:59:77:4F:9F:B8:9E:66:07:6E:2A:B9:A6:00:87:97:C9:58
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B7B220896B84219DDBF0270C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/84f591e2-29b0-34f2-bf1d-02a48a67e082.roa
Signing time:             Sat 11 Oct 2025 01:00:30 +0000
ROA not before:           Sat 11 Oct 2025 01:00:30 +0000
ROA not after:            Fri 09 Jan 2026 02:00:30 +0000
asID:                     7385
IP address blocks:        108.165.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:22:08:96:b8:42:19:dd:bf:02:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 11 01:00:30 2025 GMT
            Not After : Jan  9 02:00:30 2026 GMT
        Subject: CN=1623cb44-4f69-4c7c-94ad-0f638ed238c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8f:df:52:e4:fb:b6:0c:24:80:15:a3:b1:61:
                    d9:48:e4:f3:72:08:67:4a:06:fe:a0:69:14:8e:ad:
                    13:4e:7b:fe:03:4e:35:19:e1:74:3a:aa:89:32:4b:
                    86:ee:11:b5:c5:aa:74:47:34:8e:40:b3:7d:2e:de:
                    f5:ef:05:11:d1:48:ca:a5:2e:1b:05:3b:34:bf:a8:
                    38:96:36:9b:bf:34:b3:50:4d:36:f9:d2:e9:61:42:
                    14:30:a8:3e:6c:fb:bd:c0:97:f7:01:a0:d0:46:41:
                    47:78:db:c1:d0:68:b9:97:c0:5b:b6:22:19:0c:54:
                    65:22:3d:f4:41:bf:ac:5e:95:7e:d5:4c:f6:f8:c8:
                    ad:d3:11:c4:80:2b:fc:74:b5:c9:3b:a6:f0:2e:f2:
                    53:af:3b:10:44:39:87:cb:dd:7d:3e:e8:c7:cb:ca:
                    7d:3a:87:a2:ab:40:33:58:7b:ea:a8:09:15:5e:cd:
                    44:b2:01:54:2f:d2:4a:b5:e3:a4:05:93:26:61:77:
                    fc:f6:a2:3c:2c:ee:55:0a:0f:ac:5e:06:22:bf:fa:
                    f9:e7:3f:9e:12:98:bf:f4:ac:61:03:8f:9a:e7:11:
                    46:51:34:e5:47:61:3a:65:83:b0:da:eb:50:2b:62:
                    91:99:35:d3:6a:77:94:92:f1:5a:5d:fd:28:20:bb:
                    91:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:41:86:59:77:4F:9F:B8:9E:66:07:6E:2A:B9:A6:00:87:97:C9:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/84f591e2-29b0-34f2-bf1d-02a48a67e082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:b7:64:85:5c:47:8b:b7:c1:30:4c:bb:97:a1:2d:23:e5:f0:
         8f:65:e4:e8:33:2b:93:d8:48:52:d5:f4:50:68:8e:06:ac:a2:
         f3:b3:ad:04:6c:ec:48:58:34:02:cc:1b:d6:9d:a3:fd:9d:06:
         bc:63:bc:bd:50:c8:34:d7:42:ac:42:8c:75:24:2e:61:05:78:
         dc:de:5d:03:fa:38:d7:f4:0a:0d:62:8b:e7:bf:a3:19:51:15:
         1c:98:0d:d6:81:bb:b2:6d:02:fd:2c:58:0c:29:e3:ee:ce:16:
         06:a5:f1:76:4e:0c:ae:72:89:e0:c8:14:95:30:64:ec:22:20:
         ce:34:d6:14:6d:53:0a:c2:67:fa:9b:95:c8:c3:f0:9d:51:28:
         4a:e7:be:03:e0:cc:8b:b3:31:cb:f3:98:e6:71:69:e1:7d:23:
         e9:31:74:1b:55:dd:de:3b:1a:9a:51:de:f8:c7:dc:f2:b6:a1:
         b4:d0:27:9a:ce:17:4c:d5:b5:f3:3f:18:20:b4:58:24:5f:2e:
         6a:ee:0d:79:b2:cf:b2:bf:54:fb:d6:1f:de:fe:bf:8a:76:75:
         68:c7:b9:12:19:97:54:bc:fb:7d:48:65:0d:8a:20:68:24:fd:
         fd:48:21:dd:77:8c:aa:83:5d:23:4f:0c:ab:0b:ea:44:27:52:
         ce:17:c8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:19 2025 by rpki-client