Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/60db241c-58db-30ee-b190-ed859c6c23de.roa
File:                     60db241c-58db-30ee-b190-ed859c6c23de.roa (raw, json)
Hash identifier:          5v+gG2rri/x8e1mQQ+j7VOJJFYPJWbV1RsE7KzTjT4g=
Subject key identifier:   F4:13:8D:07:B3:0F:15:10:DD:06:79:EB:2B:4F:CB:2F:B3:BC:0E:51
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A73EB809A7D4E0CA7F734B980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/60db241c-58db-30ee-b190-ed859c6c23de.roa
Signing time:             Tue 08 Jul 2025 18:13:14 +0000
ROA not before:           Tue 08 Jul 2025 18:13:14 +0000
ROA not after:            Mon 06 Oct 2025 18:13:14 +0000
asID:                     401152
IP address blocks:        108.165.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:eb:80:9a:7d:4e:0c:a7:f7:34:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  8 18:13:14 2025 GMT
            Not After : Oct  6 18:13:14 2025 GMT
        Subject: CN=242d70da-772c-43d6-8a39-d1bdf9e34e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:99:70:9c:95:a8:5c:ec:65:7f:e6:af:1f:ef:
                    06:08:95:db:27:ea:fe:05:19:28:1b:89:b8:6f:96:
                    af:51:e8:8b:c1:97:24:5d:4a:51:1c:e9:86:f1:77:
                    a5:e2:e0:8d:21:8b:21:d8:7f:5a:71:65:ab:cd:7c:
                    1e:45:83:71:71:ba:ca:3a:c8:d8:34:62:5f:35:1d:
                    b2:dd:c6:d7:07:e8:98:22:1e:11:d4:2a:bc:b4:96:
                    0f:da:d1:9b:6a:13:3c:89:84:6e:95:65:bb:76:e1:
                    f3:c7:04:29:b9:9e:7b:09:bf:96:d0:80:5a:ef:ba:
                    1b:f3:df:88:b8:dc:96:ad:ec:f2:9b:96:9a:80:9f:
                    da:39:6b:e3:78:dd:bf:21:63:54:5f:fb:86:c6:79:
                    97:c2:82:ed:ee:a1:9f:bc:47:30:8c:59:27:ba:5f:
                    b8:14:95:72:26:d8:e6:8b:79:d0:8d:96:53:23:81:
                    e5:35:d6:b7:6e:b9:40:41:c9:94:ac:8a:d8:df:9a:
                    46:87:97:2d:90:36:1b:11:e2:bc:f0:e4:da:65:cf:
                    96:b8:86:ef:cc:53:08:ac:f3:c5:de:60:80:11:cd:
                    56:ba:69:e6:ba:ca:9c:fd:16:44:d2:66:67:77:c2:
                    71:c3:c9:c5:05:6b:49:2b:eb:7c:26:40:8c:4b:e3:
                    ec:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:13:8D:07:B3:0F:15:10:DD:06:79:EB:2B:4F:CB:2F:B3:BC:0E:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/60db241c-58db-30ee-b190-ed859c6c23de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:bb:a9:11:39:94:a1:6f:de:35:29:99:58:37:95:6d:c1:0b:
         3b:68:1e:be:37:49:bf:8c:4a:3f:da:47:04:28:8c:d6:ab:0d:
         bc:2c:72:10:71:59:41:9a:e0:46:93:33:d8:64:58:d6:3b:79:
         5e:e2:f3:36:ff:53:f8:ba:d5:15:9c:d3:e0:34:13:6a:11:6f:
         6d:03:96:09:ea:f7:a9:9a:34:26:1d:f7:d7:a7:0a:9d:14:ff:
         89:78:36:6c:63:26:79:f9:57:a4:17:20:78:00:2c:33:87:25:
         ae:9a:30:3c:3c:fb:c4:b4:92:cd:0a:48:8d:23:1e:06:d7:db:
         b5:67:5e:11:3a:40:f0:f6:9a:6f:56:fb:f5:29:93:44:67:f1:
         7c:d9:ac:4c:b6:bb:59:1b:ac:8e:fc:b6:1a:63:15:28:df:5c:
         f3:08:1f:de:fa:5b:28:ce:1c:c2:e4:77:db:25:06:eb:ad:57:
         15:c2:00:29:21:87:50:0a:ba:f0:57:f4:86:94:7d:90:65:e7:
         31:5d:86:98:46:52:4e:52:87:ab:af:e5:6e:e6:a5:34:1c:55:
         8e:b6:9a:84:4e:c1:d1:7b:e2:94:5d:5e:70:2b:c0:3f:44:82:
         d6:87:91:65:41:72:21:51:6c:95:36:e9:a2:51:0d:cc:10:52:
         f9:26:8c:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpz64CafU4Mp/c0uYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDcwODE4MTMxNFoXDTI1MTAwNjE4MTMxNFowLzEtMCsGA1UEAxMk
MjQyZDcwZGEtNzcyYy00M2Q2LThhMzktZDFiZGY5ZTM0ZTU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlplwnJWoXOxlf+avH+8GCJXbJ+r+BRkoG4m4
b5avUeiLwZckXUpRHOmG8Xel4uCNIYsh2H9acWWrzXweRYNxcbrKOsjYNGJfNR2y
3cbXB+iYIh4R1Cq8tJYP2tGbahM8iYRulWW7duHzxwQpuZ57Cb+W0IBa77ob89+I
uNyWrezym5aagJ/aOWvjeN2/IWNUX/uGxnmXwoLt7qGfvEcwjFknul+4FJVyJtjm
i3nQjZZTI4HlNda3brlAQcmUrIrY35pGh5ctkDYbEeK88OTaZc+WuIbvzFMIrPPF
3mCAEc1Wumnmusqc/RZE0mZnd8Jxw8nFBWtJK+t8JkCMS+PsUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPQTjQezDxUQ3QZ56ytPyy+zvA5RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjBkYjI0MWMtNThkYi0z
MGVlLWIxOTAtZWQ4NTljNmMyM2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbKUIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABi7qRE5lKFv3jUpmVg3lW3BCztoHr43Sb+MSj/aRwQojNarDbwschBx
WUGa4EaTM9hkWNY7eV7i8zb/U/i61RWc0+A0E2oRb20Dlgnq96maNCYd99enCp0U
/4l4NmxjJnn5V6QXIHgALDOHJa6aMDw8+8S0ks0KSI0jHgbX27VnXhE6QPD2mm9W
+/Upk0Rn8XzZrEy2u1kbrI78thpjFSjfXPMIH976WyjOHMLkd9slBuutVxXCACkh
h1AKuvBX9IaUfZBl5zFdhphGUk5Sh6uv5W7mpTQcVY62moROwdF74pRdXnArwD9E
gtaHkWVBciFRbJU26aJRDcwQUvkmjIU=
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:13:54 2025 by rpki-client