Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c22ab13b-d75b-3bcb-acee-974feaf8a876.roa
File:                     c22ab13b-d75b-3bcb-acee-974feaf8a876.roa (raw, json)
Hash identifier:          5+CvQS4CuoquG7BaN1CoUAU2uPtRbkoG8TIwx0aSt/A=
Subject key identifier:   C9:46:4E:F7:4C:73:27:47:5F:EF:85:A6:FC:19:A0:AE:22:44:94:92
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D3B34EBF943D5E08C97768F20
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c22ab13b-d75b-3bcb-acee-974feaf8a876.roa
Signing time:             Fri 20 Mar 2026 13:00:40 +0000
ROA not before:           Fri 20 Mar 2026 13:00:40 +0000
ROA not after:            Thu 18 Jun 2026 13:00:40 +0000
asID:                     36352
IP address blocks:        108.165.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3b:34:eb:f9:43:d5:e0:8c:97:76:8f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 20 13:00:40 2026 GMT
            Not After : Jun 18 13:00:40 2026 GMT
        Subject: CN=d65be430-ff93-440f-94c6-a8b26b18f261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:12:8b:bf:ab:5e:7b:7d:2e:0f:cb:75:ec:6d:
                    e1:e4:a3:17:05:34:9a:f3:7e:d3:55:f9:d7:fd:a6:
                    5b:e9:83:94:03:4b:69:0b:92:e1:90:a9:95:6a:ed:
                    22:8c:60:47:ff:ee:80:7c:3f:b9:f2:66:36:1c:b4:
                    9f:0a:44:81:c8:58:6e:b5:00:25:9f:25:c5:39:d5:
                    2b:f5:ef:42:28:e6:08:53:a1:e9:27:a0:84:3e:13:
                    f2:81:9f:b4:98:5c:1c:34:c0:81:5b:a2:fc:3b:99:
                    64:7d:9e:69:cc:37:74:d6:f0:8f:c2:49:82:ff:b7:
                    3d:73:e5:d9:32:c0:3e:67:bd:d1:87:9c:ea:f4:21:
                    f5:55:91:3a:9a:84:08:66:34:0a:c0:51:41:7d:fa:
                    a0:d0:7f:92:ca:d6:63:62:1f:af:e7:65:e8:55:e5:
                    c5:ec:a7:ab:de:a5:f1:5c:d1:40:95:27:7e:87:b5:
                    e6:fc:19:50:c8:29:60:0f:a7:8c:db:af:b9:a1:5e:
                    8c:0d:17:40:88:7d:0b:b0:e7:07:f8:1f:3d:d2:49:
                    1e:61:1c:ab:ce:27:83:44:fd:28:32:3d:5d:bd:ec:
                    7b:62:f0:bf:ab:b2:30:68:31:12:1c:12:84:08:4e:
                    5b:26:8f:e3:1e:a3:b4:5f:ae:5f:dd:4b:8c:c6:ae:
                    40:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:46:4E:F7:4C:73:27:47:5F:EF:85:A6:FC:19:A0:AE:22:44:94:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c22ab13b-d75b-3bcb-acee-974feaf8a876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:a1:05:6f:e0:6a:f7:20:a4:83:de:3c:ee:72:38:86:21:b2:
         ef:f7:0b:0e:cf:58:8b:69:4f:ff:34:5d:4a:e0:3a:1c:7f:4f:
         a6:4a:44:03:9e:e9:46:f8:f5:6d:5d:e1:ca:26:9a:90:38:d5:
         58:af:17:43:79:43:a6:6c:bf:0c:8c:56:cc:86:b0:c1:80:37:
         b9:18:79:ea:66:9e:ad:3d:87:70:8c:a8:33:73:59:38:f2:ba:
         76:7d:17:98:dd:fd:e4:59:8a:1d:04:17:11:61:85:d7:7f:6e:
         e8:39:09:64:c4:97:3c:34:de:bf:e6:64:20:06:a7:d4:06:f8:
         5a:fe:c7:61:b8:6a:a7:8e:f1:90:2e:48:d3:6d:0b:2e:45:a0:
         fd:b1:33:ed:d6:f5:9b:5e:08:78:15:63:b9:9c:7c:ca:62:34:
         b0:c5:34:6a:cb:71:7a:a0:db:3a:e5:55:2d:e4:5d:4f:4e:c8:
         21:40:b8:35:2c:4e:46:d2:aa:86:e7:8c:93:5b:4c:52:4c:0c:
         a0:d9:66:c1:39:93:b8:8d:65:4b:b9:16:a1:f5:77:73:d7:52:
         4a:b7:7c:24:fa:a0:0c:a8:c3:4d:19:aa:ef:fa:35:a8:5c:05:
         c1:86:3a:0c:9c:b4:86:b8:ba:5e:c4:96:64:40:6b:3a:ad:0f:
         49:f4:4a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:03:55 2026 by rpki-client