Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/77769568-439f-32dc-9255-d56d9b47daad.roa
File:                     77769568-439f-32dc-9255-d56d9b47daad.roa (raw, json)
Hash identifier:          zVHQV0aontKB+Gyo586isNajdAUnlw8Qzzc/9pcYYjc=
Subject key identifier:   47:9C:24:6D:08:67:B9:F3:DE:D6:B7:71:71:5C:51:2E:87:0D:B2:9D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AC5AB969A3809A84522823E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/77769568-439f-32dc-9255-d56d9b47daad.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     148996
IP address blocks:        108.165.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:96:9a:38:09:a8:45:22:82:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=fff350c2-db1e-4975-a5bb-ad5018893a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:53:44:a7:47:ab:3d:5a:51:37:4b:61:b2:db:
                    2a:ce:17:5e:40:4d:50:93:df:47:57:68:3f:bc:eb:
                    37:8f:57:c6:31:c7:2f:07:80:f3:ca:55:8f:34:59:
                    d6:da:a8:9c:c8:9e:dd:60:0a:0d:c7:4a:94:68:bc:
                    04:5b:12:3a:ac:1c:4c:1f:49:b9:14:de:ae:37:67:
                    8b:ed:dd:58:78:9f:65:ac:9b:78:ea:90:93:da:89:
                    54:21:b4:7c:2e:fb:3f:06:a0:96:92:a9:09:2f:3a:
                    3a:c4:67:b6:53:ec:24:37:43:f1:ce:0d:b6:10:3e:
                    c3:81:22:1c:e1:ed:1a:cf:3a:75:b3:9f:02:80:f5:
                    29:0b:07:c2:07:07:19:c3:32:7e:bb:82:09:9a:4f:
                    ac:ea:80:1d:e3:1d:ef:29:b5:fc:b6:4e:ab:d4:77:
                    a5:94:e1:41:bb:6e:84:db:ea:bc:c7:5b:ab:87:ef:
                    3a:50:51:73:de:78:f3:86:b9:78:de:57:6c:8e:ed:
                    9b:6c:bb:07:a6:55:39:61:2d:57:77:93:ba:33:b0:
                    07:12:7d:5f:8e:9c:19:48:1a:7e:c0:ff:33:c0:a2:
                    66:39:39:61:3a:d0:cc:e7:22:2b:63:3a:ce:be:fa:
                    74:bb:9a:e1:93:2f:5e:74:7f:52:31:4f:2d:ea:90:
                    ce:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9C:24:6D:08:67:B9:F3:DE:D6:B7:71:71:5C:51:2E:87:0D:B2:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/77769568-439f-32dc-9255-d56d9b47daad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:d6:8a:b4:54:6a:39:49:4a:52:31:ba:9c:0a:f2:bd:fc:ef:
         f7:50:51:b9:c9:01:94:80:76:6f:58:8d:bf:c2:94:c3:26:af:
         7e:07:2d:81:d1:03:27:cb:f3:29:85:19:f0:e0:11:3e:1a:91:
         c9:22:38:36:82:c6:3b:2a:d6:90:d1:a4:dd:31:fd:86:25:4b:
         0c:8e:16:f4:7c:b3:32:ee:18:28:99:f1:af:c4:9e:ab:1a:57:
         e6:f4:46:1c:48:1d:ed:33:f0:e7:74:0a:26:53:d5:fd:12:04:
         17:55:ba:e5:49:31:df:89:a3:a9:91:94:e0:c6:a1:47:a6:5b:
         31:2f:00:7c:60:d3:cf:ec:47:35:5b:88:41:35:23:87:0b:c6:
         34:a1:7a:0f:ed:49:a8:79:6f:3a:1c:04:87:b8:16:d2:4c:ef:
         90:b0:7f:10:f8:ac:7e:dc:7a:ac:01:fa:a5:37:50:c5:5d:e0:
         e2:3a:63:a6:cb:ad:79:c2:52:8e:ea:ca:6a:c6:95:c8:10:01:
         95:00:7f:48:b9:17:0c:12:23:ef:c3:4c:70:89:f7:64:00:49:
         c0:9a:bc:00:3d:46:07:2d:04:65:af:31:7d:eb:43:35:dd:2d:
         eb:cf:a1:3b:fc:df:ae:2f:33:55:2d:19:40:a5:df:4d:70:fc:
         1a:cc:54:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:58:25 2025 by rpki-client