Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8cd0603a-8f00-343b-aebf-efb1817eadc3.roa
File:                     8cd0603a-8f00-343b-aebf-efb1817eadc3.roa (raw, json)
Hash identifier:          zdhn3L+ilCy5IOr0HF43my6RvEz2EsLDPH1+8QylGPI=
Subject key identifier:   C4:A3:D7:08:85:A6:25:2F:9C:75:B7:3A:84:55:CB:5F:50:D6:7E:1B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B8B1025478D378F92D9636400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8cd0603a-8f00-343b-aebf-efb1817eadc3.roa
Signing time:             Thu 16 Oct 2025 17:57:36 +0000
ROA not before:           Thu 16 Oct 2025 17:57:36 +0000
ROA not after:            Wed 14 Jan 2026 18:57:36 +0000
asID:                     395839
IP address blocks:        108.165.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:10:25:47:8d:37:8f:92:d9:63:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 16 17:57:36 2025 GMT
            Not After : Jan 14 18:57:36 2026 GMT
        Subject: CN=9382c858-6eef-4dc0-804c-863edf8b5d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:89:48:3c:59:46:c6:75:f4:fd:17:55:06:55:
                    e5:0a:77:71:ff:17:d2:bb:ea:be:7c:b5:f2:1d:68:
                    41:92:9e:b5:39:cb:bf:89:ce:64:e1:51:69:af:b8:
                    55:b1:8a:41:be:04:af:26:41:48:37:97:e8:70:18:
                    48:68:e9:04:fa:2f:88:58:f1:6e:fc:38:ef:f5:b2:
                    5a:71:a6:61:42:51:5e:ed:62:c0:f8:0b:00:63:24:
                    1b:9c:3d:33:47:34:26:c6:2e:44:19:ee:b1:9e:38:
                    7a:3b:c8:8f:df:24:8e:ce:d3:8c:37:5b:ae:00:8f:
                    46:c7:96:d7:20:ab:3d:1c:e8:0b:6b:a4:eb:03:49:
                    59:3e:e4:68:33:ec:a9:a9:3f:e4:95:2f:0a:bc:e0:
                    bf:62:c6:d0:9b:7a:0e:57:17:5e:4c:19:ed:13:64:
                    41:d2:4a:8e:ca:e2:15:90:fd:56:54:c8:ff:08:89:
                    26:1b:c5:b2:d5:3d:db:c9:5c:b9:45:e5:7d:89:60:
                    17:dc:fb:8f:09:1d:51:f5:22:93:92:72:63:c4:3e:
                    bd:16:b3:bc:49:78:2c:a1:f7:d9:43:19:82:6d:d5:
                    f0:0b:c2:f8:54:26:2c:9d:59:46:16:24:66:7f:aa:
                    d8:19:d0:c8:13:24:f5:db:07:7c:4b:a9:0d:08:d9:
                    40:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A3:D7:08:85:A6:25:2F:9C:75:B7:3A:84:55:CB:5F:50:D6:7E:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8cd0603a-8f00-343b-aebf-efb1817eadc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ec:23:81:9b:f5:45:db:2d:47:ee:64:23:8c:e8:f7:a1:7d:
         b7:6d:75:fc:9c:df:7d:1a:74:61:dd:6c:34:ed:cb:60:43:0f:
         b0:c2:d4:5e:de:6e:aa:72:1e:6b:a1:52:8d:41:4b:3f:35:a9:
         10:d5:69:e9:4c:13:3b:b6:cf:e5:3a:b7:1c:f7:e2:f1:60:39:
         63:7a:0e:bc:a2:97:bb:98:48:3b:7a:f8:d7:73:c7:16:2b:17:
         94:6c:bf:85:a7:49:b5:b9:d6:25:e2:e7:93:36:df:bb:5d:c8:
         a1:dd:7d:ab:cb:26:fd:6b:61:3f:18:8d:1a:b2:db:4b:fb:ac:
         1d:78:a2:c9:5c:f2:86:9e:19:a7:b5:a8:1b:30:60:6b:56:74:
         d6:4e:95:a9:08:c6:52:60:36:d8:d1:b6:75:72:1a:10:4d:5f:
         dd:18:f8:f1:02:4b:a2:da:26:c9:81:65:91:9f:4e:20:69:73:
         b7:db:2e:e2:cc:18:77:0e:4e:d5:f7:93:a9:cc:5a:ba:a0:a0:
         39:91:86:48:4b:a7:b2:be:57:a3:a9:c4:7e:66:03:4e:e4:f8:
         2b:79:de:cf:8f:8a:16:82:b3:f6:be:d0:b8:75:5d:d9:b2:ab:
         88:ec:14:96:89:2a:26:2a:16:29:38:26:90:87:7d:2e:ba:2f:
         0e:b0:39:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:04:30 2025 by rpki-client