Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7117449d-c6d1-3ac2-b87b-f1b578f91e07.roa
File:                     7117449d-c6d1-3ac2-b87b-f1b578f91e07.roa (raw, json)
Hash identifier:          vYJllmf8/IBUqGXvX+yKYJtU5mIE7Npt2MEx3pDJucA=
Subject key identifier:   6C:33:3F:20:CB:ED:49:75:0A:2A:37:64:4D:B0:DB:2C:02:24:75:E0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A9900B7F7668FFD83809F7F00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7117449d-c6d1-3ac2-b87b-f1b578f91e07.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     401152
IP address blocks:        108.165.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:b7:f7:66:8f:fd:83:80:9f:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=400147b4-e310-4042-be33-5f6615deab16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:40:20:56:46:83:ce:31:f2:35:21:61:2a:28:
                    ba:e1:72:01:c0:b1:2b:95:79:88:63:41:a6:5d:99:
                    cb:19:e3:bf:75:ae:3b:0e:ec:2b:6a:97:ab:36:da:
                    b7:65:07:db:08:a5:43:c8:3a:c4:9a:71:fe:20:82:
                    c9:a5:22:fd:9c:66:4e:56:d3:b8:89:11:54:67:61:
                    c9:01:a5:68:05:0f:fc:b0:0a:5b:58:71:74:6b:64:
                    66:7a:f0:7e:8e:32:3b:34:9d:bb:5f:e2:5c:38:7b:
                    d3:82:18:bd:a7:58:5e:6f:08:c1:ee:ed:71:31:3e:
                    09:62:d7:e2:58:9a:8a:af:cf:a9:8d:df:bf:7e:6a:
                    26:2f:37:dd:ef:82:ef:97:bc:34:9f:f6:e8:b4:6f:
                    91:79:01:cb:99:90:a3:64:f5:92:50:9c:92:bc:a0:
                    e9:7f:5e:d8:67:f5:30:fd:21:30:dc:03:79:60:46:
                    11:46:f9:ae:dd:ad:57:f8:dc:04:90:5e:fa:d7:01:
                    37:be:02:64:86:e0:57:e6:30:42:e0:81:f0:de:1e:
                    d5:6d:3b:90:20:78:1c:53:16:0a:ca:9f:3a:46:9f:
                    cc:06:61:82:e6:f1:12:a6:30:fa:a1:7c:9e:9e:d3:
                    cb:c9:f9:e2:e1:7d:fb:3a:28:c3:77:1f:bd:88:12:
                    9b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:33:3F:20:CB:ED:49:75:0A:2A:37:64:4D:B0:DB:2C:02:24:75:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7117449d-c6d1-3ac2-b87b-f1b578f91e07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:83:d6:d4:1a:16:1b:2d:99:e2:b6:32:f1:44:6f:17:83:7c:
         44:f0:a1:ba:21:28:ae:f4:4a:0d:ef:7b:f1:4a:c6:3c:46:60:
         c8:d1:f1:38:8c:9d:27:a2:db:77:dd:8d:1c:f1:aa:01:37:2b:
         1f:62:b5:18:26:6a:3b:0c:ea:3f:8b:d4:6a:ec:02:50:57:5b:
         52:2f:f1:0e:30:50:c3:64:9a:a5:7e:79:95:1c:59:f5:a7:05:
         bd:7d:c0:88:2b:e9:0e:6a:66:b9:8f:4d:9c:0d:c5:b3:ff:3f:
         65:8f:31:6d:f4:ea:7a:a7:de:95:09:bf:25:e3:8c:3e:27:02:
         57:b4:1f:4b:e4:72:41:90:4b:b4:3c:7f:6b:ef:f6:60:22:55:
         40:46:18:e0:fe:9a:53:2d:f2:4d:f3:ff:06:b3:46:ba:18:5c:
         f8:1e:5a:8a:4b:fb:97:6c:be:55:c3:0c:d2:ad:85:01:7c:d3:
         03:ff:45:8a:57:ac:18:eb:b5:fd:be:ef:ce:6f:9a:23:c8:3a:
         4c:b6:0e:3b:1c:35:dc:01:05:5d:45:59:11:9f:6e:7c:69:57:
         2f:ed:8d:cf:a6:00:38:8e:29:b3:24:8c:50:43:3b:9f:b7:40:
         f9:87:c1:76:91:c5:f3:e8:9a:4e:a7:99:3e:dc:2d:39:03:7c:
         65:2d:1e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:30:09 2025 by rpki-client