Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae811e48-55b5-3db6-a7e6-f898641f2c08.roa
File:                     ae811e48-55b5-3db6-a7e6-f898641f2c08.roa (raw, json)
Hash identifier:          8qC9v6RXbakAKakSR7xDP2gKtKBM3iYrwrjCxaoUeAI=
Subject key identifier:   FC:BB:4C:E0:D0:8C:21:85:A6:82:E3:EB:EF:C8:77:73:7C:4C:EC:E0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F49742F1938F151BAB0E40200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae811e48-55b5-3db6-a7e6-f898641f2c08.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     399646
IP address blocks:        108.165.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:2f:19:38:f1:51:ba:b0:e4:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=21d5f83a-67f2-4f10-998e-3cbed98ff3cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:71:6a:59:a3:01:cf:95:68:b2:72:fc:36:93:
                    e5:9b:7f:ce:90:48:0a:67:c3:3b:e6:e9:17:dc:8e:
                    75:b9:da:98:05:0a:20:fd:d5:6b:89:e5:47:a4:23:
                    3b:5e:78:27:a5:a0:1c:14:9b:58:b7:33:a5:f4:ab:
                    da:80:27:18:a4:78:61:0a:d6:b7:60:44:04:eb:cc:
                    28:ee:f0:1d:ad:59:f3:82:c7:54:c9:b4:bd:93:33:
                    02:ba:df:d5:6b:75:36:d9:68:bd:6b:37:ff:1d:52:
                    8b:e7:28:98:e5:69:1a:99:3d:99:85:5a:34:f5:d3:
                    02:ac:6d:57:c3:56:d4:31:42:08:d0:78:d4:c8:1e:
                    f2:35:4b:86:b8:81:3f:5a:df:02:47:15:13:3e:0c:
                    79:3f:27:60:54:b2:e1:13:04:53:6b:f8:7d:1c:fd:
                    3e:6f:b7:10:20:3e:3c:bc:63:01:9d:49:e7:f7:dd:
                    80:e3:fa:a6:4f:55:28:9d:21:47:20:b9:44:27:80:
                    29:65:c1:85:02:15:cf:40:cd:02:cc:c9:ac:53:0a:
                    1b:ac:fa:66:14:eb:3d:ae:17:a2:e2:9a:54:62:85:
                    8c:a5:72:70:65:60:fb:bb:1c:6f:f1:9f:cf:9b:79:
                    93:81:30:40:ec:2c:ab:0c:7b:1d:65:bc:06:c2:92:
                    b8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BB:4C:E0:D0:8C:21:85:A6:82:E3:EB:EF:C8:77:73:7C:4C:EC:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae811e48-55b5-3db6-a7e6-f898641f2c08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:9b:ee:7b:02:13:50:d6:fc:15:02:b4:75:1f:d1:c1:b7:b6:
         98:7e:d0:50:3a:a2:22:85:1e:22:79:1c:9c:84:2f:67:31:fc:
         79:d2:40:79:c2:b1:78:6c:ff:dc:7f:09:35:64:98:b5:2a:0f:
         e1:8d:94:45:20:0c:7a:6f:d3:28:cc:b7:f2:1f:16:70:86:a3:
         a7:e9:d1:50:f3:a2:ff:33:f0:08:d2:f7:7f:9b:2e:24:33:98:
         fe:c1:42:7a:30:3b:10:8e:5e:6a:7c:1d:cd:70:b3:32:5f:bf:
         9d:5b:16:16:e2:16:20:1e:bd:47:cc:30:ee:46:3f:32:92:73:
         ba:5f:c8:29:f2:c0:46:d1:ab:04:81:08:69:a5:b6:cd:17:e5:
         be:e6:67:bf:96:ae:88:3f:2d:fc:29:18:15:69:e9:1b:27:79:
         4c:e1:9c:0c:ce:47:8c:23:57:25:bc:54:15:4f:b5:d7:ca:0d:
         41:0c:72:6c:04:ff:f8:64:e5:f2:44:7e:fc:c4:c9:da:57:fa:
         f1:f1:b2:49:27:7e:2b:12:c0:83:14:93:25:8e:7e:16:81:16:
         55:1c:be:2a:00:0b:d7:59:59:eb:c2:3a:e7:18:61:8a:af:c2:
         c8:ec:63:29:35:6f:74:b9:87:e2:af:4f:44:2c:39:86:ed:aa:
         20:d2:06:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:21:36 2026 by rpki-client