Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e32ca48-574e-3f1b-81a7-cab1d7fa534e.roa
File:                     2e32ca48-574e-3f1b-81a7-cab1d7fa534e.roa (raw, json)
Hash identifier:          MW5X7KeuOl4El315ymZ07s1O8D8dj/5qBwbL3oAh+Gw=
Subject key identifier:   97:B8:AF:E8:A5:C9:74:C2:13:16:7E:46:F4:83:89:5E:99:46:D2:D7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A6826092E5C7D83156C5A7FF4
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e32ca48-574e-3f1b-81a7-cab1d7fa534e.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     21859
IP address blocks:        108.165.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:09:2e:5c:7d:83:15:6c:5a:7f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=fb0ee3cc-b322-485f-8511-9eb65dc057d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4b:68:19:67:19:d9:c9:cc:87:4b:82:61:db:
                    5f:49:84:f4:4c:36:8c:30:c9:1d:5d:b7:13:be:e2:
                    e5:81:31:72:85:89:09:8c:77:a6:8f:26:d0:bb:e2:
                    20:dc:1b:84:ac:73:b3:26:8d:a9:61:c0:90:d0:56:
                    12:bf:2b:74:e5:8b:33:e3:17:40:70:1d:0b:fe:e7:
                    49:48:03:7f:3c:a3:a7:14:0c:d4:92:81:cd:4b:3f:
                    97:3b:5e:3d:0e:89:be:e9:5d:53:7f:89:9b:16:9b:
                    c5:c6:48:a0:fe:8e:4e:c4:90:2d:3f:85:7c:5e:f4:
                    c4:7f:af:d6:bc:17:1b:7e:e8:47:b4:85:b5:7d:2a:
                    39:51:b0:1d:68:8f:ca:6d:e2:69:18:7e:93:dd:a7:
                    51:92:7d:bc:e3:e6:04:07:bb:1e:1c:8d:ea:27:8f:
                    ad:f0:06:e1:e1:e4:38:47:ce:30:4b:e1:d6:b1:0f:
                    e1:3a:25:16:e0:5e:2d:45:1d:94:48:5d:a1:a9:e1:
                    81:4c:95:95:37:f6:7a:61:ea:28:e3:bd:4f:74:6d:
                    87:ea:ba:cf:97:63:66:ef:86:d9:86:79:62:bc:a6:
                    2f:d7:4f:57:9e:1b:03:a5:ec:50:b8:3e:b2:3e:77:
                    62:d9:b4:bf:aa:ef:df:6a:d0:cf:1f:61:ed:ba:68:
                    f5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B8:AF:E8:A5:C9:74:C2:13:16:7E:46:F4:83:89:5E:99:46:D2:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e32ca48-574e-3f1b-81a7-cab1d7fa534e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:d5:73:a9:5f:d3:bf:71:7f:dd:bc:79:87:ff:05:42:a6:82:
         59:8b:c0:86:59:0c:a7:44:69:b1:ed:65:b9:2d:17:b1:38:e5:
         6f:2c:4a:ea:f7:8c:20:82:13:86:df:af:bb:45:03:b7:22:61:
         56:17:bc:b9:8d:df:88:fd:a5:01:07:44:2e:cf:98:fd:3a:14:
         10:20:3f:86:a8:ac:6f:b6:0e:5e:16:d6:79:bd:8e:f3:06:72:
         88:d0:04:ca:3c:81:85:45:92:8e:71:69:30:e1:d9:3d:17:df:
         c8:f6:13:71:0c:42:5d:80:28:52:4c:40:8a:13:17:f5:b7:fd:
         31:3f:b2:e6:e6:d3:b1:d9:74:1e:53:90:87:90:85:3d:37:10:
         52:a5:3c:17:eb:a1:61:71:61:bc:cb:b7:7b:9a:8a:c8:6a:45:
         79:fe:18:5a:40:a7:c3:5b:c0:1d:39:5a:04:51:0a:99:38:63:
         ab:a5:4e:1c:6d:99:68:b8:6c:6b:8f:ce:ac:25:bc:e8:fa:15:
         9d:a5:7f:16:f4:0a:c5:ad:8c:ab:c2:0c:b0:66:31:4c:6a:c7:
         0b:c5:3d:24:f8:6e:8b:11:87:d1:df:56:08:f3:c9:16:fc:81:
         b2:c5:4e:80:2b:2d:85:52:1b:9e:21:92:e2:2d:1e:28:0f:59:
         5e:f3:21:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:48:28 2025 by rpki-client