Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/665a46fe-d68f-3fc1-a0fc-0072b78639b7.roa
File:                     665a46fe-d68f-3fc1-a0fc-0072b78639b7.roa (raw, json)
Hash identifier:          RdJDRGBOEFWjyZS3n2nPekxCVz9nuGLSL3XM3qLGf6c=
Subject key identifier:   E2:E5:56:98:A7:0F:79:BA:2C:0E:5C:EB:4E:43:3A:AE:A4:EA:63:2F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584ABBE634D26C219E8FCD09A680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/665a46fe-d68f-3fc1-a0fc-0072b78639b7.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     134351
IP address blocks:        108.165.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:34:d2:6c:21:9e:8f:cd:09:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=461c3309-8f0c-4abe-9025-e80948a30768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:60:e5:af:1a:e7:6a:99:a1:9a:e6:85:09:2a:
                    1b:7a:e0:6f:79:39:e9:cb:81:1b:e7:4f:e4:e1:65:
                    dc:6b:3e:00:2e:be:b7:98:e4:60:a8:2b:14:c6:90:
                    ac:12:19:c1:1d:42:40:96:75:34:82:5c:7e:9a:31:
                    c2:c8:be:30:5d:5c:66:ca:4d:e1:44:d2:7f:22:73:
                    78:ac:32:1d:5c:0e:f4:72:5f:c9:3a:48:2f:c2:18:
                    43:76:a9:a3:ef:e7:5c:ad:93:3b:b3:5d:e8:7f:67:
                    57:cd:20:fa:91:37:ef:80:e4:3d:e6:82:55:22:79:
                    cf:c3:af:56:3b:14:5a:fb:24:0d:25:9b:6e:ed:26:
                    c3:30:fe:a8:43:42:77:b1:ed:2c:0b:1d:4a:79:7f:
                    df:70:2b:53:cf:f1:bc:b9:5d:17:5d:5c:46:b8:78:
                    83:8b:34:a0:c0:cd:2a:cd:48:59:cb:9c:39:2f:f0:
                    ff:30:c9:ea:43:c9:b6:72:b6:f9:fd:be:92:f5:c6:
                    d4:73:12:6f:88:e8:ba:f8:57:93:93:65:9e:8e:6b:
                    db:ee:27:bb:c3:ed:d7:30:f4:11:21:f9:4b:29:46:
                    e1:d8:e8:8a:6b:8f:ea:ed:d9:b5:0c:39:69:15:6c:
                    df:00:53:d0:66:96:89:8d:4e:22:e7:2e:dd:99:98:
                    37:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E5:56:98:A7:0F:79:BA:2C:0E:5C:EB:4E:43:3A:AE:A4:EA:63:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/665a46fe-d68f-3fc1-a0fc-0072b78639b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:33:0d:df:12:fa:ae:d7:27:16:9d:e0:45:92:c6:d0:66:2b:
         9d:3e:05:1c:b8:07:ba:ad:2e:9d:4a:36:b6:82:f3:6b:66:41:
         51:a4:45:6e:73:a3:67:77:6e:57:07:34:33:25:04:fa:71:ad:
         ce:3b:d6:a3:28:c1:c1:4c:ce:19:73:51:eb:31:82:28:78:85:
         ef:bb:c9:2a:2f:1d:6b:69:94:b4:81:79:4c:9c:10:5c:e8:f8:
         fc:7b:9a:b1:3d:78:f7:6d:57:6b:a0:86:cb:4a:85:de:39:0e:
         87:82:18:35:bf:d5:aa:0c:9b:65:57:e4:36:49:03:fe:ea:b0:
         ab:8a:5f:1b:3c:78:ca:8e:dd:1a:cf:ad:d7:e9:c4:a7:d6:ee:
         85:b5:14:ef:7f:79:2e:6f:07:39:07:b5:87:d2:b6:1a:c7:43:
         df:29:43:0c:29:25:ef:04:d5:2f:65:5c:1f:1e:62:57:45:dd:
         b7:1f:a8:1c:75:f7:eb:5b:bf:f9:2d:0f:4d:e1:d3:40:48:30:
         f6:fa:b5:73:e2:d0:b0:a8:07:e1:a4:21:dd:f5:8d:f2:3a:24:
         e4:9b:60:82:62:65:8b:e3:21:2a:0a:46:3a:92:25:61:54:c6:
         a7:26:f3:73:44:0a:c6:59:09:43:45:e6:8f:2f:2a:f6:07:ae:
         c5:3a:84:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:29 2025 by rpki-client