Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/abb690c5-4e7f-3d04-b71e-82909380e537.roa
File:                     abb690c5-4e7f-3d04-b71e-82909380e537.roa (raw, json)
Hash identifier:          745Ks3j8RGsBS66qQspxvfLBPuEnu5g9FQSgVJ/yZh8=
Subject key identifier:   8B:62:D9:3C:B1:22:92:C5:58:A3:E1:94:01:30:59:FF:E7:FB:D6:15
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D3E00112CE3DCA5335051E780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/abb690c5-4e7f-3d04-b71e-82909380e537.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     401152
IP address blocks:        108.165.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:11:2c:e3:dc:a5:33:50:51:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=44cad8f0-cd60-4190-a8f3-18cb1aebf98d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:77:24:7a:25:ae:12:20:0d:23:b4:0d:f9:9f:
                    76:58:cc:2a:a0:cf:40:5a:6b:76:ce:36:39:68:4a:
                    5c:17:e2:63:0c:49:f8:f3:7f:92:be:11:08:38:93:
                    98:e8:ca:c6:9a:e0:30:89:bb:ee:d2:3d:fb:3a:3e:
                    bd:4a:32:4d:6b:71:81:46:f6:d1:70:7e:b9:7a:8f:
                    35:eb:b7:d6:78:26:bc:a5:ee:09:44:75:05:1c:4b:
                    dc:c9:ef:e1:3b:86:42:5d:f6:92:0a:4b:4c:a0:16:
                    5a:69:12:6d:f3:f3:a6:60:6d:26:bb:92:fc:92:9b:
                    3f:6c:bb:b0:31:8c:09:62:0a:98:87:83:bd:3e:5f:
                    60:89:19:88:19:31:57:6e:bf:c2:90:35:a1:5d:27:
                    07:8c:98:ee:72:59:cf:22:cd:e5:35:50:e8:52:d0:
                    4e:f1:85:35:af:58:bb:78:68:b3:d0:d8:c2:58:db:
                    2b:86:a5:52:7c:4c:9b:60:90:5a:9a:a7:c4:6e:26:
                    b1:35:d8:8a:fc:2c:90:8e:e6:19:c8:af:03:24:65:
                    03:71:62:12:5c:9d:ef:dc:dd:f4:3a:93:b6:a7:3c:
                    5f:56:55:c8:b6:73:2d:fd:a0:ec:65:6b:e4:f3:1d:
                    3e:ad:a7:29:1c:9e:3d:72:00:12:0f:83:c6:5a:f0:
                    b8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:62:D9:3C:B1:22:92:C5:58:A3:E1:94:01:30:59:FF:E7:FB:D6:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/abb690c5-4e7f-3d04-b71e-82909380e537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:2d:7a:91:b6:e7:0c:bb:8a:58:91:34:ef:06:68:a7:b7:01:
         a3:f7:b9:95:2e:a5:f1:30:40:a1:18:b7:5b:17:43:f0:52:33:
         36:17:fb:70:17:26:08:86:d6:84:3a:3b:19:45:7c:c9:b9:95:
         91:35:09:2c:54:93:b9:12:58:bb:a3:74:1d:84:57:20:6b:5d:
         82:32:78:26:d9:88:b8:4f:14:6c:cb:f0:7d:af:eb:27:23:3d:
         5b:d7:83:d9:22:7a:9a:73:d7:8d:9a:b8:f2:f2:3d:24:54:7d:
         53:65:18:5f:4f:56:25:7d:e5:e5:4e:a6:bb:46:d9:52:e5:fa:
         56:0b:d6:3b:f8:94:4d:cf:6b:93:d9:0e:67:43:ab:19:df:87:
         5d:a6:85:8e:c4:5e:89:ab:41:e9:48:12:6e:de:37:cc:63:4f:
         7c:74:7b:8f:62:5e:6b:2b:4c:6e:54:ab:83:83:8b:72:e8:ae:
         3d:1f:58:23:50:bc:89:7d:f2:33:1f:33:21:0c:01:50:d2:7b:
         93:a5:8a:06:c0:21:48:6c:12:cd:53:0d:a9:d6:0e:33:ce:2c:
         9f:78:84:0b:c8:6c:21:2e:3b:32:1f:a0:90:90:73:43:9b:21:
         18:08:0e:7f:af:1c:13:b0:fc:c6:4b:e8:c5:19:ed:36:55:75:
         88:81:a1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:38:25 2026 by rpki-client