Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/170133e5-6c73-36ae-aa8b-154d2f59b2ad.roa
File:                     170133e5-6c73-36ae-aa8b-154d2f59b2ad.roa (raw, json)
Hash identifier:          FWW679qeDvLqFkekCAF7pkoVp+TqkbDy8/RncjZdyNU=
Subject key identifier:   BA:D2:1A:03:CC:3B:A7:AF:17:6B:93:AF:13:D3:3B:91:54:CF:66:1E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584988CF3020826DBD4C365C6A00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/170133e5-6c73-36ae-aa8b-154d2f59b2ad.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     21859
IP address blocks:        108.165.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:30:20:82:6d:bd:4c:36:5c:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=37034c39-4355-4f10-af68-b02d8b386888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f5:43:d1:c9:ce:36:63:f8:0b:95:57:c8:43:
                    e4:89:a9:3e:4a:23:60:40:4e:bc:b1:e5:76:ef:07:
                    05:b8:f1:52:e4:2e:1c:10:23:d7:38:ea:24:7a:5c:
                    5a:20:b0:06:d8:48:c7:41:15:e6:84:c1:9b:83:f3:
                    49:de:0d:1a:ce:8b:93:55:34:5b:dd:22:6b:64:58:
                    0c:02:1f:8d:ae:b2:03:e6:5c:b4:9e:27:db:54:20:
                    ea:d7:f2:a2:21:a2:91:37:1b:13:c2:0a:51:da:78:
                    d8:05:ad:72:9d:af:ec:e9:ab:90:7a:bc:fe:c7:7b:
                    ac:0e:2b:5f:63:96:41:f4:16:55:fc:ea:2a:06:23:
                    f7:df:2f:c1:8f:0d:6c:b3:01:bf:80:ed:27:a7:53:
                    51:87:d4:4c:0b:13:05:e9:da:c5:34:08:eb:8b:23:
                    2d:9c:82:82:b9:2e:60:c0:02:30:71:94:1f:40:ca:
                    2c:1f:bd:33:82:1b:29:a6:fe:3c:54:02:ff:aa:8d:
                    b4:19:ad:9a:e2:df:f1:04:06:2c:de:fe:8f:5c:d0:
                    e1:48:62:3c:66:f4:88:04:6c:ea:0b:56:42:45:ef:
                    c3:e9:5c:5d:18:38:35:60:89:83:7c:bb:d9:08:7d:
                    18:24:f4:1a:3c:f4:00:06:f7:a9:fd:45:08:51:59:
                    3d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D2:1A:03:CC:3B:A7:AF:17:6B:93:AF:13:D3:3B:91:54:CF:66:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/170133e5-6c73-36ae-aa8b-154d2f59b2ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:3e:3a:5c:98:88:10:e4:28:88:56:11:7a:37:b1:43:30:94:
         a5:b1:3b:2f:e5:86:3c:36:32:ee:06:e4:b3:bc:c4:17:7d:b8:
         00:71:31:ac:c5:2c:ce:ec:70:34:17:73:aa:fa:0b:44:45:15:
         48:c9:4c:74:a3:c6:7c:fe:84:9f:a7:6d:72:5b:71:ec:06:ea:
         da:e8:16:87:e0:5b:12:70:f6:12:9a:5d:73:07:a0:2b:6a:e9:
         c9:3e:83:25:20:d6:33:97:0f:c8:a8:36:0a:0d:0e:58:d4:49:
         a7:bd:b1:70:71:fa:83:78:cc:06:e5:03:b6:3f:4b:ad:fd:57:
         5b:18:ef:cb:44:10:4a:ff:31:03:1b:bc:ad:77:d6:7f:1a:f0:
         3e:45:22:10:24:67:b3:45:c6:54:7b:39:e1:aa:d4:6f:1f:44:
         18:8f:2c:8e:26:d2:dc:45:8d:68:22:8c:8e:c1:7b:a9:d8:1e:
         3a:b1:be:7a:f5:33:94:13:50:60:95:eb:dd:7c:97:1c:45:0e:
         8b:b6:95:48:89:90:91:99:c2:7a:27:70:fc:03:c8:09:a4:f9:
         10:95:d8:26:bf:a1:03:7c:03:ed:2c:1c:b5:39:db:bb:43:25:
         21:51:d5:82:22:9f:ce:2a:7e:67:e0:08:cb:04:4f:3d:73:81:
         5e:20:d1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:52:12 2025 by rpki-client