Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e9b4f483-b37a-329b-ba97-2e0518ddb3a3.roa
File:                     e9b4f483-b37a-329b-ba97-2e0518ddb3a3.roa (raw, json)
Hash identifier:          P6iVUUXPXD2ZAiZOvUWUnhId6ROrKmjfyv0nIpaGfTk=
Subject key identifier:   C5:E6:C8:00:BD:7B:4D:FE:68:FD:E9:CF:E4:CF:8B:5A:FE:15:FA:66
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E7E94F4F194020AC7A5865A80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e9b4f483-b37a-329b-ba97-2e0518ddb3a3.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     212335
IP address blocks:        108.165.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:f4:f1:94:02:0a:c7:a5:86:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=3a5b3561-d79f-4f14-b556-445b6a428d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e6:b0:06:0e:f7:de:a7:66:85:d8:c3:ff:3d:
                    f4:1c:b5:6a:1a:ac:5c:1d:49:29:59:83:57:5a:56:
                    bb:fd:2a:5f:72:f1:e5:c6:81:09:77:cc:6a:7d:9d:
                    f7:b5:6a:f8:f3:ac:cb:ad:41:ff:38:7c:16:19:28:
                    8b:f3:3f:44:d9:0c:bf:cc:9c:cf:91:fd:7e:2a:65:
                    40:97:91:c9:80:68:df:ea:2f:3c:82:e7:c6:5d:42:
                    cc:97:de:63:7c:6c:f1:a1:0d:d1:a0:7c:05:8f:b7:
                    39:13:01:ba:d9:0e:c3:13:9a:33:f5:6f:65:85:54:
                    8f:80:1f:c9:6e:1c:c2:1f:6f:b7:d4:ba:70:90:34:
                    ca:f7:7a:a3:2d:14:f7:9b:67:8a:d3:ce:56:00:96:
                    b2:f3:98:39:63:14:84:77:43:8b:46:93:6c:da:94:
                    2d:c3:3e:5c:7b:96:44:5b:59:32:43:ad:0d:76:49:
                    b8:8c:e4:a8:e3:4f:15:e1:68:d7:a8:62:7e:68:0a:
                    73:6e:ff:5b:bb:9f:ff:f1:5e:e9:f6:4f:cc:27:11:
                    ad:e3:90:a6:ed:89:52:57:45:e5:50:18:4a:6f:3d:
                    c3:c5:29:96:1e:15:09:a5:06:5f:90:ba:5d:3b:12:
                    3b:c5:4c:13:61:1e:d1:59:9d:8c:6c:39:43:0a:03:
                    39:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E6:C8:00:BD:7B:4D:FE:68:FD:E9:CF:E4:CF:8B:5A:FE:15:FA:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e9b4f483-b37a-329b-ba97-2e0518ddb3a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:64:df:a2:60:c8:d3:10:42:8c:d6:d1:a8:7a:0f:d8:f4:6e:
         27:6b:92:84:fe:42:36:68:bc:31:93:f2:69:54:8b:f2:e4:a7:
         bc:2e:5b:83:ed:dd:98:21:13:ec:db:11:0d:97:cc:c1:9f:0b:
         3f:7f:d1:1a:79:37:1d:4e:06:26:68:e6:fd:bc:04:1c:18:be:
         90:89:d6:ef:64:b4:97:3f:e1:a6:33:56:cb:ca:e8:39:d6:2d:
         7d:0f:3f:21:48:52:3d:6a:06:c6:94:1f:4c:a6:e1:54:80:9c:
         ef:ab:ac:dc:c6:05:26:2a:d5:38:d8:ee:4f:45:96:c7:a5:f7:
         6d:47:18:23:9e:1e:a6:f2:9e:5b:04:24:e2:a3:39:6f:13:5b:
         c9:98:e5:b3:a5:9b:77:3a:6a:2e:7a:47:d2:95:c9:e9:78:6f:
         4a:1f:10:dd:1b:48:7d:9c:f7:5a:87:d0:2d:48:12:48:1b:28:
         d1:a5:b9:97:44:4d:d8:9e:ab:da:1b:b9:e4:b1:8f:86:88:f4:
         55:2b:43:24:f8:b5:32:01:34:b6:3d:f3:f5:15:3f:fc:26:99:
         13:0c:64:89:ae:ea:d1:0e:68:1c:1f:24:0d:f6:2e:29:8a:ad:
         0e:dd:d4:2f:c9:af:c5:a6:b1:51:50:43:e3:f9:22:9c:bf:6c:
         61:a8:ba:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:28 2026 by rpki-client