Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9928c494-43e6-3cb5-84e0-9d28695d1dbb.roa
File:                     9928c494-43e6-3cb5-84e0-9d28695d1dbb.roa (raw, json)
Hash identifier:          Wbo2aAD8geD+Qlrhz44zfREzQlS4fYrxHMl5SmEKOts=
Subject key identifier:   02:63:14:84:F3:AF:84:AD:9C:29:B7:7F:AC:C0:7D:F1:7A:F6:55:2A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E4AEF2EA8E8E01E88C1393AC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9928c494-43e6-3cb5-84e0-9d28695d1dbb.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     401152
IP address blocks:        108.165.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:2e:a8:e8:e0:1e:88:c1:39:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=225b7ed7-bc84-42f7-9cb3-135523686f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:93:ce:be:40:53:a2:ed:3a:27:62:29:1a:c7:
                    91:e1:c5:6e:50:f9:3e:86:96:ea:40:73:6a:f1:30:
                    5c:fb:44:fc:2b:d6:03:4d:29:22:6a:fe:b0:1a:45:
                    65:7e:4b:75:fc:b0:87:4c:ad:b3:3b:89:15:c0:cb:
                    e9:36:eb:5e:33:93:93:18:18:6d:ec:5c:11:8b:ce:
                    ba:ef:eb:74:80:91:3b:f9:af:5f:c9:d6:7f:af:c9:
                    c8:02:ce:28:e4:2a:06:2a:c7:75:94:f5:9e:14:ec:
                    e9:b6:96:f6:15:71:0d:df:58:49:fd:0a:ef:c5:07:
                    e1:1d:52:04:29:86:8a:7f:57:fe:a0:5a:59:0c:6a:
                    d9:cf:97:8e:65:7f:3f:5d:00:bf:7d:67:6b:d8:fb:
                    dd:89:a1:b4:e5:fb:bc:6f:80:72:fb:2d:26:ff:85:
                    8c:9c:38:cc:31:98:99:a8:3d:10:87:e1:a9:da:bb:
                    86:72:cd:2b:12:09:8d:af:79:9b:f0:9d:40:f5:8b:
                    02:4f:9e:2e:70:62:d3:82:7c:6e:21:c4:6f:ae:e9:
                    29:68:8e:05:bd:e3:6a:5a:5d:3c:63:a7:99:c1:f0:
                    da:68:01:97:b2:21:cb:bc:1f:a8:b1:e2:78:42:56:
                    d2:2d:f2:f8:d9:3f:9d:00:b6:aa:67:b8:fd:8d:88:
                    42:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:63:14:84:F3:AF:84:AD:9C:29:B7:7F:AC:C0:7D:F1:7A:F6:55:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9928c494-43e6-3cb5-84e0-9d28695d1dbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:23:06:e8:06:2d:05:e5:80:6d:76:08:a6:de:15:62:44:c0:
         93:78:e3:ed:ab:0c:d6:eb:6e:c1:35:6c:c8:bc:0d:ca:c8:bc:
         c2:4b:ad:0c:82:ef:6b:87:8c:7f:db:e8:d2:66:0d:aa:4e:28:
         6a:be:0e:06:93:ba:e0:bf:b6:71:cf:a0:dd:36:e8:84:b6:c8:
         a9:3d:19:81:30:d8:5e:14:be:12:df:4b:4f:23:74:c8:fc:3a:
         3d:05:69:6b:1e:fd:cf:12:ad:e8:8a:2d:6b:55:ea:d5:a0:d2:
         35:28:95:6a:67:81:84:1b:07:d2:b1:91:ef:d6:7b:49:39:f4:
         6e:38:a3:d8:69:62:c6:f5:bd:6e:69:a2:e3:7c:50:0a:31:0a:
         ac:a1:b3:2b:6c:38:dd:61:cd:30:00:5c:62:8c:00:77:18:a5:
         14:0a:98:bf:67:ae:94:55:8c:bd:de:7f:26:ec:f4:9b:7c:25:
         1a:2b:04:68:b5:c9:35:57:59:61:ad:4e:72:c4:af:8e:26:34:
         3e:64:0a:07:47:ff:0a:c6:f5:bf:ee:e3:84:8f:e2:f4:41:d0:
         18:ab:56:6c:52:8a:76:4c:c1:fb:ff:8b:36:94:e6:b2:74:d3:
         78:ef:7c:f9:aa:33:b3:e9:0a:78:d2:85:30:07:fd:25:c5:5a:
         87:15:ec:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K7y6o6OAeiME5OsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk
MjI1YjdlZDctYmM4NC00MmY3LTljYjMtMTM1NTIzNjg2ZjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JPOvkBTou06J2IpGseR4cVuUPk+hpbqQHNq
8TBc+0T8K9YDTSkiav6wGkVlfkt1/LCHTK2zO4kVwMvpNuteM5OTGBht7FwRi866
7+t0gJE7+a9fydZ/r8nIAs4o5CoGKsd1lPWeFOzptpb2FXEN31hJ/QrvxQfhHVIE
KYaKf1f+oFpZDGrZz5eOZX8/XQC/fWdr2PvdiaG05fu8b4By+y0m/4WMnDjMMZiZ
qD0Qh+Gp2ruGcs0rEgmNr3mb8J1A9YsCT54ucGLTgnxuIcRvrukpaI4FveNqWl08
Y6eZwfDaaAGXsiHLvB+oseJ4QlbSLfL42T+dALaqZ7j9jYhCRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAJjFITzr4StnCm3f6zAffF69lUqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTkyOGM0OTQtNDNlNi0z
Y2I1LTg0ZTAtOWQyODY5NWQxZGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAMjBugGLQXlgG12CKbeFWJEwJN44+2rDNbrbsE1bMi8DcrIvMJLrQyC
72uHjH/b6NJmDapOKGq+DgaTuuC/tnHPoN026IS2yKk9GYEw2F4UvhLfS08jdMj8
Oj0FaWse/c8SreiKLWtV6tWg0jUolWpngYQbB9Kxke/We0k59G44o9hpYsb1vW5p
ouN8UAoxCqyhsytsON1hzTAAXGKMAHcYpRQKmL9nrpRVjL3efybs9Jt8JRorBGi1
yTVXWWGtTnLEr44mND5kCgdH/wrG9b/u44SP4vRB0BirVmxSinZMwfv/izaU5rJ0
03jvfPmqM7PpCnjShTAH/SXFWocV7FI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:45:33 2026 by rpki-client