Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6fcacb0c-38fe-39af-b1bf-b03b8ac4ae75.roa
File:                     6fcacb0c-38fe-39af-b1bf-b03b8ac4ae75.roa (raw, json)
Hash identifier:          PyI3/5+m4MIStny8d6KbW+PMoZVdRUf7KrEroz57M7E=
Subject key identifier:   92:CD:23:49:07:C6:7C:2A:21:C9:8A:2F:B8:AC:DD:DD:7B:DB:DF:DA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A68260884BB7B91BAA298B080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6fcacb0c-38fe-39af-b1bf-b03b8ac4ae75.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     21859
IP address blocks:        108.165.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:08:84:bb:7b:91:ba:a2:98:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=3e4fbbd9-1729-4c5c-a35c-9393e662e133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:98:54:6c:60:f2:c6:5f:1b:dc:32:59:21:9e:
                    4b:8a:7a:a8:fe:00:40:32:07:26:f5:95:31:8e:e7:
                    97:7b:19:e9:7b:2a:ce:91:aa:02:ff:64:5b:49:ce:
                    8a:83:47:25:85:c6:12:15:fa:7c:25:c5:28:11:27:
                    08:3c:5d:22:9b:0d:ed:03:f1:dc:ef:85:8e:6d:a1:
                    20:69:9e:af:3e:ba:84:30:16:9b:f9:02:20:c3:5f:
                    b4:77:f3:ad:10:86:44:71:13:bd:5c:33:a1:25:67:
                    cc:2a:34:52:e5:3c:eb:f3:81:2a:34:8c:ae:79:49:
                    d4:59:97:ba:59:55:9a:c6:e2:48:68:0a:ce:66:77:
                    9e:df:da:59:72:35:a4:e5:cf:2d:be:fb:79:fa:dd:
                    b6:7f:8e:13:63:e1:98:b8:c1:76:f0:00:87:9d:74:
                    27:95:c2:43:57:fb:10:26:02:08:ca:0f:fb:ae:05:
                    8e:d0:93:a0:3a:e1:3d:19:15:94:ed:e8:ed:1f:a6:
                    11:a5:be:8c:b6:97:be:27:3e:fb:a1:ef:9d:b1:98:
                    bf:6b:ce:21:17:0d:a5:4a:ef:71:4f:a7:ac:16:08:
                    61:a7:d2:7a:66:32:b3:8e:07:c8:fd:de:6b:5d:67:
                    e9:f6:b4:41:0d:c1:b1:47:c8:4d:f5:86:81:79:61:
                    cd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CD:23:49:07:C6:7C:2A:21:C9:8A:2F:B8:AC:DD:DD:7B:DB:DF:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6fcacb0c-38fe-39af-b1bf-b03b8ac4ae75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:cd:c0:2f:fb:93:9d:d3:0d:22:a1:09:91:16:3c:a7:9c:5a:
         47:8b:04:c2:93:d2:c6:f3:76:9d:d8:55:e4:43:4d:d9:97:12:
         09:1e:60:c8:8f:55:bd:0b:f3:07:94:06:c2:c4:9f:3e:b6:a8:
         42:68:e0:34:a5:96:1e:a4:7b:b7:ef:15:f2:76:1d:ab:e0:ed:
         01:f3:dc:13:ed:28:54:3d:3d:0f:c7:2c:12:be:6e:5a:d5:cf:
         2c:5d:2c:f1:7d:77:a6:2d:cd:c0:b8:41:0b:26:0a:ec:7c:fd:
         a3:d1:65:10:34:ef:08:0c:e6:1f:2e:9a:37:2b:5b:3b:50:69:
         73:fa:92:91:51:67:af:ac:3c:41:74:a6:1a:d9:f9:6e:c5:f2:
         f2:b9:2d:14:9c:ca:18:ad:a8:87:2a:02:6b:c8:37:55:51:51:
         02:c4:ca:27:4a:f5:c4:94:54:b1:d4:cf:cb:5d:3f:b2:87:bc:
         52:8b:17:5a:a1:c8:ac:bd:c5:90:91:21:c9:be:49:5e:05:16:
         11:a3:99:3c:50:80:f1:80:ef:72:7e:f4:4e:c5:1f:f7:41:31:
         f4:55:c2:c6:97:ef:4a:0d:e1:79:c4:1b:fd:27:c1:6a:41:a5:
         77:54:65:5c:63:54:f7:de:8c:49:eb:6f:d3:24:25:a7:67:8b:
         06:85:52:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:05:37 2025 by rpki-client