Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ed068fb-e777-3264-b447-dc622312f0ff.roa
File:                     6ed068fb-e777-3264-b447-dc622312f0ff.roa (raw, json)
Hash identifier:          p3ehAxKSItLFwVFQJ2kJ5ypEaK4HWr8g8ZM+Musv0Fk=
Subject key identifier:   8F:3D:6A:30:90:74:B4:91:35:29:1E:8B:CC:36:65:C6:EC:B8:E2:6D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584ABBE634C195DE7367EB69B680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ed068fb-e777-3264-b447-dc622312f0ff.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     134351
IP address blocks:        108.165.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:34:c1:95:de:73:67:eb:69:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=9ef1e7fe-abc9-4d56-be31-82091ff76b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:97:3d:84:84:47:fc:b4:ee:02:2a:97:fb:a1:
                    a6:62:fb:42:de:45:69:68:0f:6c:28:6b:08:8e:dd:
                    02:d3:63:0c:f1:29:11:5a:b5:c1:71:ee:eb:a2:be:
                    af:d0:a4:fe:01:b4:57:fc:1a:57:1f:01:39:30:08:
                    d8:10:42:e9:18:6c:9d:28:63:f1:ed:fd:26:77:eb:
                    b1:cc:18:c3:85:e5:d0:f4:fe:24:96:8d:a9:81:da:
                    24:73:e4:b2:2f:25:00:0e:b5:9f:18:38:8a:6e:89:
                    9c:1f:dd:b7:06:8b:42:27:e3:ce:a8:87:62:b5:36:
                    35:5e:ab:d4:c1:0d:b3:e4:b7:b7:70:25:67:a5:d2:
                    85:a2:2d:c2:09:51:3a:ca:17:05:de:32:98:4b:09:
                    46:8a:20:d5:6a:78:ae:16:e6:24:8e:87:43:8c:4a:
                    18:a3:0a:50:04:92:9e:0b:6b:b8:bb:14:c9:29:a2:
                    46:a1:5a:40:41:a7:44:9f:14:68:08:08:80:38:a5:
                    ba:f9:d4:3d:1d:12:0e:a9:e4:89:3a:b8:88:0f:eb:
                    e1:d9:b5:2b:56:e7:67:64:58:46:81:7b:8a:4d:b8:
                    8e:58:12:ba:72:87:f5:9f:09:07:c2:eb:00:10:43:
                    54:08:bb:72:44:15:0a:b6:b4:19:29:49:ba:f0:8e:
                    e0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3D:6A:30:90:74:B4:91:35:29:1E:8B:CC:36:65:C6:EC:B8:E2:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ed068fb-e777-3264-b447-dc622312f0ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:04:5a:d2:30:cf:c3:ae:3a:6a:8c:84:06:27:95:25:fc:ef:
         0d:59:37:7c:c8:68:a7:f2:fa:44:de:dd:ce:23:78:e4:b9:33:
         af:3f:b5:e3:55:cf:9a:f6:3e:7b:4a:40:5c:45:3e:3a:aa:11:
         85:6d:94:50:57:50:d4:3b:5b:d3:2e:fe:2a:c1:b7:04:e0:f7:
         14:65:40:ba:b2:ca:37:e4:5c:b4:30:54:aa:f5:b3:07:89:31:
         90:43:03:7e:0a:b6:47:d7:5c:43:68:da:8d:fd:7e:f7:c7:f3:
         3c:ee:99:82:06:13:87:a6:8d:d7:ce:63:dd:67:4f:a2:cc:4b:
         da:41:d9:79:e8:1a:8d:2d:fb:65:e4:0b:e4:25:bf:44:43:8c:
         66:85:1c:54:9a:37:7a:1a:50:d7:e1:06:fc:d2:39:7f:64:c0:
         1b:67:79:93:75:2e:02:85:d1:b3:b8:42:30:88:53:94:9c:19:
         bb:c8:45:5a:d5:df:21:a4:f5:55:e7:53:d5:ec:d2:64:a9:ef:
         bf:f6:41:7d:17:5e:2b:13:5b:59:6a:73:68:46:45:26:bc:85:
         9f:f0:94:d3:35:2e:27:4d:65:86:17:28:0b:79:40:5e:12:a4:
         33:23:22:e6:a6:b8:e0:ca:d9:0c:4a:6b:8c:7d:fa:c8:8e:9d:
         d9:4a:4e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:14:46 2025 by rpki-client