Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/61dd87a9-fb3d-3ca6-b18e-7ae42d6cea2d.roa
File:                     61dd87a9-fb3d-3ca6-b18e-7ae42d6cea2d.roa (raw, json)
Hash identifier:          oWYhCIxeH2UmVd5iM6dcuFekotYfR27dbsebzA2aya4=
Subject key identifier:   E1:40:4D:A1:9A:70:31:B8:ED:7B:59:F1:6B:B3:7A:DA:AB:2C:74:3D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A6826091EA5D3542CE13042A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/61dd87a9-fb3d-3ca6-b18e-7ae42d6cea2d.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     21859
IP address blocks:        108.165.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:09:1e:a5:d3:54:2c:e1:30:42:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=9614fcbf-3d9a-446b-9040-e1183a859d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1b:7e:ce:7a:52:fb:79:75:5a:7c:b3:a7:54:
                    64:43:4f:7a:c5:55:e1:99:bb:ec:bd:e0:8e:47:99:
                    c0:15:d7:a4:a6:df:6a:2a:98:5a:11:52:c4:d1:28:
                    87:b9:cf:f7:22:db:bd:71:50:18:44:1f:50:4e:b7:
                    3c:ba:ce:23:5e:55:d5:92:ce:63:02:33:5f:7e:e7:
                    21:a6:c2:0c:55:ac:aa:07:c8:a3:59:5f:28:c5:f5:
                    2e:68:47:7c:b5:21:a9:49:af:8a:ee:49:4a:1d:14:
                    51:4d:1c:26:70:e5:ee:6c:eb:d1:ae:bb:34:cb:6d:
                    32:a2:14:70:35:06:43:f5:fe:ea:5d:28:59:cb:2f:
                    97:8b:ec:e5:e8:46:25:c3:c5:23:18:10:93:5d:3f:
                    a8:1e:6d:0e:0d:60:3d:7d:69:a8:61:eb:ac:6a:83:
                    2c:d5:07:59:95:23:1a:22:07:75:4e:7a:5c:31:ab:
                    f2:87:8e:b1:97:ae:81:32:4d:46:11:7b:2b:c7:66:
                    42:b0:33:29:04:30:d8:e6:90:cd:41:10:09:76:8c:
                    ac:40:10:76:af:66:4e:8c:b1:8b:a9:94:f9:67:b7:
                    c7:9f:64:73:54:ca:ab:5f:1c:bb:be:f6:87:4f:1f:
                    9c:de:3c:39:02:16:8e:36:1e:c2:35:c7:e4:fa:2a:
                    91:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:40:4D:A1:9A:70:31:B8:ED:7B:59:F1:6B:B3:7A:DA:AB:2C:74:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/61dd87a9-fb3d-3ca6-b18e-7ae42d6cea2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:53:a5:b3:cb:15:8c:89:35:b6:0b:2c:b1:12:71:b1:8f:d1:
         a7:53:80:00:d7:5b:79:88:51:91:ec:cb:a2:4c:5d:a9:6d:69:
         e3:4f:0b:8e:4c:0c:69:58:97:b1:05:54:87:19:c4:75:8f:f8:
         d8:6d:30:08:de:d0:c5:11:ce:10:a1:61:b9:70:92:9c:2d:ff:
         ae:0f:69:e1:8a:fe:64:c2:04:aa:df:07:c3:6a:9b:92:b9:c8:
         be:2a:3a:5b:1c:54:44:e5:97:f5:89:eb:c7:6f:fe:99:56:66:
         d6:b1:6a:6a:5d:31:53:2a:53:99:71:c0:d7:28:f3:80:71:7f:
         c6:5e:ea:32:16:6e:33:b7:26:04:dc:8f:ba:f1:9e:f6:2f:ce:
         25:1c:33:7e:4f:c8:10:77:7b:5b:c1:48:39:f5:bc:cd:0f:b5:
         d4:da:04:05:86:ae:10:f0:f6:32:66:77:cb:02:c3:54:26:7b:
         01:a8:01:97:29:6d:54:c2:5c:4c:37:b3:05:a8:ba:0f:6a:14:
         9c:d0:70:18:78:5e:eb:56:c5:e7:8c:58:48:2d:b5:a1:09:0f:
         dc:5a:6b:9e:9b:a0:c8:c6:ab:6d:71:39:8f:93:8c:04:49:6d:
         60:9f:71:9c:5c:11:4e:1b:51:bf:f0:f9:f6:be:16:b1:b7:69:
         19:7f:3a:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJgkepdNULOEwQqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
OTYxNGZjYmYtM2Q5YS00NDZiLTkwNDAtZTExODNhODU5ZDA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBt+znpS+3l1Wnyzp1RkQ096xVXhmbvsveCO
R5nAFdekpt9qKphaEVLE0SiHuc/3Itu9cVAYRB9QTrc8us4jXlXVks5jAjNffuch
psIMVayqB8ijWV8oxfUuaEd8tSGpSa+K7klKHRRRTRwmcOXubOvRrrs0y20yohRw
NQZD9f7qXShZyy+Xi+zl6EYlw8UjGBCTXT+oHm0ODWA9fWmoYeusaoMs1QdZlSMa
Igd1TnpcMavyh46xl66BMk1GEXsrx2ZCsDMpBDDY5pDNQRAJdoysQBB2r2ZOjLGL
qZT5Z7fHn2RzVMqrXxy7vvaHTx+c3jw5AhaONh7CNcfk+iqRmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOFATaGacDG47XtZ8WuzetqrLHQ9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjFkZDg3YTktZmIzZC0z
Y2E2LWIxOGUtN2FlNDJkNmNlYTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFBTpbPLFYyJNbYLLLEScbGP0adTgADXW3mIUZHsy6JMXaltaeNPC45M
DGlYl7EFVIcZxHWP+NhtMAje0MURzhChYblwkpwt/64PaeGK/mTCBKrfB8Nqm5K5
yL4qOlscVETll/WJ68dv/plWZtaxampdMVMqU5lxwNco84Bxf8Ze6jIWbjO3JgTc
j7rxnvYvziUcM35PyBB3e1vBSDn1vM0PtdTaBAWGrhDw9jJmd8sCw1QmewGoAZcp
bVTCXEw3swWoug9qFJzQcBh4XutWxeeMWEgttaEJD9xaa56boMjGq21xOY+TjARJ
bWCfcZxcEU4bUb/w+fa+FrG3aRl/Olw=
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:33:27 2025 by rpki-client