Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/640475bf-a39f-363c-b48a-884bcc81a5d2.roa
File:                     640475bf-a39f-363c-b48a-884bcc81a5d2.roa (raw, json)
Hash identifier:          mvNx0DVVkJDV9VK49D6qfvm3geJyKpn8H+ab/XCfXHU=
Subject key identifier:   BC:56:CD:ED:B9:BE:D8:70:F6:46:BF:7B:08:61:4E:75:7B:83:0D:DC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B970CF00859BE7FCD6BDD7680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/640475bf-a39f-363c-b48a-884bcc81a5d2.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     29802
IP address blocks:        108.165.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:f0:08:59:be:7f:cd:6b:dd:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=074bc0fd-756a-4ff9-9b44-57cd5807f0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3f:1c:75:7c:1b:e9:b2:c9:ea:24:bc:b7:3a:
                    4c:4d:66:23:af:6d:70:5c:9c:2e:66:ee:fe:1f:99:
                    98:b2:f0:65:41:02:78:0a:69:3e:56:99:77:40:af:
                    6a:03:8e:17:a3:34:c1:74:c5:c7:0f:e6:5d:01:bc:
                    4e:10:ee:c9:5b:32:99:35:58:71:2a:82:dc:61:59:
                    4b:0b:10:79:fc:d4:9e:ac:5c:e9:c9:d7:23:76:8a:
                    49:9e:79:b6:52:78:36:06:16:9f:79:96:91:f4:81:
                    5e:0f:0a:fe:c8:26:11:f6:7a:b1:db:0a:05:e7:80:
                    b6:5a:04:e0:c2:7f:65:02:88:41:f9:d6:6e:43:fd:
                    15:e6:55:51:1c:bf:07:17:34:f2:99:02:e3:cd:fd:
                    d2:1f:92:9e:8e:a1:57:4f:7e:8f:4a:bf:8a:8c:8b:
                    4f:21:f2:f2:bc:ec:d9:d5:cf:0f:ee:d0:66:0c:2b:
                    0f:22:fa:57:95:87:7d:c0:4c:66:d7:1b:f3:34:f2:
                    19:c8:ee:e9:b5:a2:01:3e:65:82:7f:76:26:e0:90:
                    cc:16:0a:ce:30:ad:e3:e8:30:f2:fb:47:20:4e:29:
                    46:13:d0:ce:14:45:41:69:92:aa:0b:02:f6:17:54:
                    a8:5a:5f:1a:d0:cc:73:9b:b0:57:15:c7:d0:e8:13:
                    16:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:56:CD:ED:B9:BE:D8:70:F6:46:BF:7B:08:61:4E:75:7B:83:0D:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/640475bf-a39f-363c-b48a-884bcc81a5d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:a4:bc:ca:7c:c2:fd:cf:9d:11:11:e3:29:13:2e:b7:bb:22:
         1e:f1:74:f1:ea:b4:21:3b:8c:c2:6a:79:be:1b:6c:45:72:09:
         6c:79:5b:5a:5e:45:e2:4c:2c:59:cf:93:54:21:79:fe:b6:d0:
         00:36:ce:a5:44:4d:98:4b:b1:85:40:a1:a3:04:62:05:88:e9:
         68:44:61:34:f7:ac:51:43:cb:3d:bb:1c:fd:96:42:05:c4:d1:
         bd:eb:fd:11:64:f3:23:95:5f:26:71:3a:8b:db:b9:a0:e5:08:
         79:09:3a:5c:07:fe:35:dd:b3:06:a7:c2:d1:25:51:24:48:fa:
         46:28:4d:8a:5e:0c:1d:08:83:4e:41:dc:fd:0f:59:13:6b:8d:
         46:be:62:81:39:1d:d1:b2:1f:a4:4d:93:5b:4d:83:13:0c:45:
         86:73:e6:e2:bc:46:c2:06:98:f3:43:a1:60:c8:3a:df:ea:e6:
         75:96:c1:dc:ad:10:f9:72:d4:d0:65:9d:8d:2e:4e:f0:23:05:
         35:0b:34:d5:12:41:1f:49:60:d9:5c:67:87:95:38:2d:95:0b:
         88:2c:c1:c6:ec:8b:d8:dd:74:a8:7f:51:78:3f:5b:83:f0:44:
         c8:8f:23:20:c8:7a:ba:77:61:44:1c:c1:89:66:6a:4a:c9:6a:
         c8:9a:73:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:06:17 2025 by rpki-client