Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/65849706-7c7f-3844-8c32-f6cefdad8565.roa
File:                     65849706-7c7f-3844-8c32-f6cefdad8565.roa (raw, json)
Hash identifier:          /Zg6SU1Z+jiPlYfgB8RXebiyRPGYQKZZaVY0KE1qIbU=
Subject key identifier:   32:53:65:88:00:77:30:3C:F7:19:31:A6:D0:44:C9:58:44:A9:9E:17
Certificate issuer:       /CN=15106386-88d8-4103-adeb-a6e7c684ed09
Certificate serial:       010D0C9F4328584D1DE49343958DDFE1238E10B4
Authority key identifier: 97:96:AD:FA:13:B8:49:E5:BB:CE:A4:C0:40:17:DC:3E:AD:D2:A3:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/65849706-7c7f-3844-8c32-f6cefdad8565.roa
Signing time:             Tue 10 Mar 2026 01:00:31 +0000
ROA not before:           Tue 10 Mar 2026 01:00:31 +0000
ROA not after:            Mon 08 Jun 2026 01:00:31 +0000
asID:                     834
IP address blocks:        208.66.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:e4:93:43:95:8d:df:e1:23:8e:10:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15106386-88d8-4103-adeb-a6e7c684ed09
        Validity
            Not Before: Mar 10 01:00:31 2026 GMT
            Not After : Jun  8 01:00:31 2026 GMT
        Subject: CN=a2d49e36-7d86-4f28-81cf-1bc92fa12fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ec:62:76:5a:0e:92:be:da:75:0c:3e:e1:83:
                    ed:91:b1:bc:4c:61:0d:97:be:cc:06:ed:7d:b7:b6:
                    e3:83:5e:ef:8f:0e:d0:45:51:d9:ab:ea:b9:d4:02:
                    b8:cc:4b:7c:da:23:ca:9a:dd:07:eb:12:0e:30:ce:
                    89:c0:ac:14:af:68:69:85:06:92:f5:43:53:1d:a1:
                    cc:fa:a3:6e:35:32:8f:a4:13:ef:67:79:77:38:32:
                    71:b1:19:ee:e2:e2:43:cf:b5:5a:a8:31:83:c8:5f:
                    06:51:43:8e:92:eb:d0:2e:fe:95:3c:71:2a:cc:89:
                    55:08:72:96:cf:59:66:62:b5:ef:b1:30:83:26:a9:
                    81:c7:d3:a4:8a:b3:a9:5c:04:8a:99:ae:d6:67:d0:
                    eb:49:6e:94:3c:c0:06:0a:03:da:8d:71:fb:3a:08:
                    4b:94:57:36:d7:1b:e8:e3:1b:a5:70:f8:be:2c:aa:
                    82:d5:30:eb:30:b6:6b:84:06:be:76:97:5f:85:45:
                    6e:fb:41:80:33:75:b2:5e:92:3e:c2:cf:99:79:04:
                    07:00:3f:07:f1:61:cb:c5:52:93:a3:db:39:45:bd:
                    0b:9a:25:8d:dd:9c:37:c1:e5:05:67:22:4d:67:2a:
                    c6:59:17:70:a5:35:46:2c:1b:fe:da:a2:c7:d4:64:
                    98:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:53:65:88:00:77:30:3C:F7:19:31:A6:D0:44:C9:58:44:A9:9E:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/65849706-7c7f-3844-8c32-f6cefdad8565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.crl

            X509v3 Authority Key Identifier:
                keyid:97:96:AD:FA:13:B8:49:E5:BB:CE:A4:C0:40:17:DC:3E:AD:D2:A3:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.66.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:91:90:7d:9b:a8:e3:ea:e8:4e:1f:60:df:1b:04:5b:21:e4:
         ae:55:74:a9:6e:b4:1e:b6:4d:9c:43:8b:4d:a6:1a:02:ce:7c:
         ea:7b:21:a4:a7:38:f0:d8:80:20:3b:9f:b8:51:f7:7d:cb:1b:
         9c:5f:65:c8:ec:1f:d0:93:c0:95:dd:ff:cc:33:2c:44:63:ec:
         bd:b1:c6:f8:72:27:d8:9a:eb:73:66:e8:26:2b:3d:be:11:33:
         c4:ba:62:86:d5:86:3f:40:4d:df:79:c0:35:08:d2:4b:55:98:
         9d:46:9a:b2:78:aa:5d:ad:79:96:d3:d5:39:4c:ff:2b:f5:17:
         57:ba:27:8a:12:5b:0b:13:ee:a6:7f:2b:63:c7:d5:80:03:e0:
         bc:a5:ce:d2:de:81:55:16:99:b9:16:61:a1:64:04:dd:eb:be:
         01:34:bd:42:ae:76:07:db:86:77:2b:5c:29:06:73:47:71:c5:
         73:81:a7:ed:1a:98:9e:f7:e0:6b:d4:b8:aa:e2:3e:45:ff:41:
         ca:b8:10:95:39:13:b3:7d:9f:1b:62:7d:ae:a4:05:3f:c3:8b:
         6f:8a:0e:9a:f2:81:3c:40:80:ba:f0:9d:77:79:23:9f:a4:5a:
         1a:e5:bb:86:d1:17:ec:ea:34:cd:85:61:fe:cd:c8:b7:38:8c:
         8b:18:e6:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0d5JNDlY3f4SOOELQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTUxMDYzODYtODhkOC00MTAzLWFkZWItYTZlN2M2ODRl
ZDA5MB4XDTI2MDMxMDAxMDAzMVoXDTI2MDYwODAxMDAzMVowLzEtMCsGA1UEAxMk
YTJkNDllMzYtN2Q4Ni00ZjI4LTgxY2YtMWJjOTJmYTEyZmI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuxidloOkr7adQw+4YPtkbG8TGENl77MBu19
t7bjg17vjw7QRVHZq+q51AK4zEt82iPKmt0H6xIOMM6JwKwUr2hphQaS9UNTHaHM
+qNuNTKPpBPvZ3l3ODJxsRnu4uJDz7VaqDGDyF8GUUOOkuvQLv6VPHEqzIlVCHKW
z1lmYrXvsTCDJqmBx9OkirOpXASKma7WZ9DrSW6UPMAGCgPajXH7OghLlFc21xvo
4xulcPi+LKqC1TDrMLZrhAa+dpdfhUVu+0GAM3WyXpI+ws+ZeQQHAD8H8WHLxVKT
o9s5Rb0LmiWN3Zw3weUFZyJNZyrGWRdwpTVGLBv+2qLH1GSYAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDJTZYgAdzA89xkxptBEyVhEqZ4XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xNTEw
NjM4Ni04OGQ4LTQxMDMtYWRlYi1hNmU3YzY4NGVkMDkvNjU4NDk3MDYtN2M3Zi0z
ODQ0LThjMzItZjZjZWZkYWQ4NTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTUxMDYzODYtODhkOC00MTAzLWFk
ZWItYTZlN2M2ODRlZDA5LzE1MTA2Mzg2LTg4ZDgtNDEwMy1hZGViLWE2ZTdjNjg0
ZWQwOS5jcmwwHwYDVR0jBBgwFoAUl5at+hO4SeW7zqTAQBfcPq3SoxowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xNTEwNjM4Ni04OGQ4LTQxMDMtYWRlYi1hNmU3
YzY4NGVkMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EJsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMeRkH2bqOPq6E4fYN8bBFsh5K5VdKlutB62TZxDi02mGgLOfOp7IaSn
OPDYgCA7n7hR933LG5xfZcjsH9CTwJXd/8wzLERj7L2xxvhyJ9ia63Nm6CYrPb4R
M8S6YobVhj9ATd95wDUI0ktVmJ1GmrJ4ql2teZbT1TlM/yv1F1e6J4oSWwsT7qZ/
K2PH1YAD4LylztLegVUWmbkWYaFkBN3rvgE0vUKudgfbhncrXCkGc0dxxXOBp+0a
mJ734GvUuKriPkX/Qcq4EJU5E7N9nxtifa6kBT/Di2+KDprygTxAgLrwnXd5I5+k
Whrlu4bRF+zqNM2FYf7NyLc4jIsY5iI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:25:10 2026 by rpki-client