Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9312cddf-3510-3d52-bcd1-be13e1181df9.roa
File:                     9312cddf-3510-3d52-bcd1-be13e1181df9.roa (raw, json)
Hash identifier:          9x0W4XRz5Uz7TLPMEuAcKQvuAA1qd9T/B9JVv4VBPMU=
Subject key identifier:   7F:8D:20:4D:5F:74:FB:F4:F8:BB:88:4A:3C:D5:E4:19:5D:A9:9E:82
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B7DECC9CE738B317C58DD7B40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9312cddf-3510-3d52-bcd1-be13e1181df9.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     401152
IP address blocks:        108.165.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:c9:ce:73:8b:31:7c:58:dd:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=13553cf3-9fc2-43c3-b619-0e91cd30efd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:06:18:b8:5c:68:db:7d:7d:17:56:7d:cf:4d:
                    34:d9:11:e0:7e:11:6d:59:f0:bc:46:1e:6d:48:b6:
                    10:5a:44:27:a3:0b:ee:cb:3e:52:a9:26:59:39:ce:
                    8b:15:d5:b7:2f:80:ec:da:3c:75:dd:6a:10:b2:cf:
                    74:19:ba:b9:0f:2c:30:f2:b8:cb:4d:76:d4:22:21:
                    a7:6f:72:d2:2e:96:24:19:18:c2:ea:f3:8b:48:25:
                    09:c9:e9:0b:b9:15:9d:9b:12:b1:b9:8c:8c:fb:ea:
                    fe:7b:1f:4a:e0:07:0e:03:a7:96:55:d9:74:60:52:
                    05:fa:34:b6:99:74:28:72:bf:81:65:96:61:96:05:
                    d9:b0:c1:01:00:97:be:2c:73:86:a2:b4:30:bb:47:
                    c5:de:9e:fb:fe:e8:62:d0:ec:26:0e:c7:b7:bb:b3:
                    0d:9c:59:f1:83:a9:ce:eb:f0:68:b5:44:97:2d:97:
                    71:c1:29:7b:64:94:5f:ca:82:2f:fe:0d:be:78:5f:
                    28:b7:2f:8d:3f:7e:97:b5:7f:7b:44:34:9a:b3:4b:
                    21:65:a1:76:5b:d4:1f:96:96:33:aa:9a:71:a5:30:
                    96:db:0e:9d:f2:ae:72:8e:93:86:df:7c:9f:3a:d2:
                    cb:4e:e5:8e:83:07:8d:1e:e4:03:78:a8:85:28:c5:
                    de:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8D:20:4D:5F:74:FB:F4:F8:BB:88:4A:3C:D5:E4:19:5D:A9:9E:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9312cddf-3510-3d52-bcd1-be13e1181df9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:b7:bf:63:99:25:86:c4:f0:98:43:80:f9:a3:3b:ea:05:4d:
         da:c4:bc:7d:47:f5:7b:cb:aa:8b:68:cc:29:98:21:9b:3b:10:
         e8:1a:79:e3:4d:88:90:3b:95:2f:ff:fb:06:ea:0f:4b:83:66:
         1e:ae:38:c9:e3:9e:d1:37:38:a1:36:65:85:da:40:56:6c:ae:
         a5:65:fd:e3:fa:fb:16:9c:bb:65:50:0c:78:7a:e3:a2:2d:8b:
         b6:7c:13:33:7a:da:d1:d3:9e:7f:4c:00:bb:a3:61:bc:bc:5f:
         0c:fc:9d:1a:e1:8f:0a:a4:c7:2b:10:e8:90:6b:fe:8d:c5:c6:
         39:a5:54:0c:e9:72:3e:72:b2:66:18:c1:fc:41:ac:30:69:d6:
         92:26:9d:29:6c:c2:42:f8:f2:2a:e6:45:40:fc:c9:ee:b2:91:
         a4:3e:60:19:61:f2:a6:c5:20:4c:1d:51:b8:c0:c0:ef:e0:46:
         0d:bf:7a:f8:2b:b9:24:7e:7e:c4:16:cf:1f:ae:bd:be:38:aa:
         f9:3e:6a:36:75:95:ec:e2:07:1d:18:4c:14:5e:18:e9:3b:96:
         6e:d0:91:89:de:1b:f9:f2:cf:f5:be:93:98:de:57:a9:0b:d0:
         e0:6d:05:7a:69:ab:40:bb:38:57:ad:ac:67:03:af:3a:58:82:
         3b:2e:de:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:49:25 2025 by rpki-client