Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7b0b5015-4fa6-3600-a62b-ef094990a262.roa
File:                     7b0b5015-4fa6-3600-a62b-ef094990a262.roa (raw, json)
Hash identifier:          ORkdB5+sr1126Gz9JQUJwm8TfaybMYMrKdNoM9oPPvo=
Subject key identifier:   6B:10:71:09:9C:2D:0C:65:99:3D:76:FF:4F:ED:CA:CA:9F:17:CC:2D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A936B620234FE804818C950EC
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7b0b5015-4fa6-3600-a62b-ef094990a262.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     62240
IP address blocks:        108.165.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:62:02:34:fe:80:48:18:c9:50:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=f24c8528-3df8-4f6b-bebd-a71ff27925b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:21:4a:ae:6c:95:9f:0d:77:f8:63:93:3d:b2:
                    c7:5f:1d:42:5c:71:c6:63:30:64:6f:e3:36:36:a6:
                    64:fc:ab:1a:29:2a:a1:1e:5c:78:ba:25:a6:f6:79:
                    3f:23:44:c8:40:c7:ed:62:d8:32:84:79:cb:c4:eb:
                    19:6f:88:60:1f:9b:ec:b7:17:93:b9:24:a8:da:34:
                    7d:22:bc:eb:31:8e:fd:d2:45:03:b3:fb:7c:17:04:
                    23:fc:66:a1:fd:61:81:2e:f6:4c:0d:b5:7b:97:93:
                    e3:89:e7:0e:e9:a4:f4:70:bc:68:84:9f:69:80:69:
                    6c:76:e9:08:75:82:19:7a:65:d4:09:e9:27:89:3e:
                    f2:bf:8c:cf:39:9f:58:03:0e:c7:c6:d1:60:87:ae:
                    65:6d:19:05:0a:08:61:3d:54:b9:77:4c:17:5e:ef:
                    15:8a:bc:5a:8c:26:dc:97:46:bf:cf:4b:b2:e5:9a:
                    1e:8c:47:94:6c:1c:3b:7a:85:02:5e:a2:15:75:1f:
                    21:aa:25:e9:61:53:d8:c1:53:d1:48:67:d3:23:dc:
                    a4:d4:de:29:a8:50:4e:26:05:2a:49:1a:e6:c9:a1:
                    ad:66:19:c9:f1:d7:6a:50:fa:e8:27:10:dd:7d:ed:
                    16:27:bb:32:f4:63:08:8c:e6:04:fa:a8:79:1b:f3:
                    cd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:10:71:09:9C:2D:0C:65:99:3D:76:FF:4F:ED:CA:CA:9F:17:CC:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7b0b5015-4fa6-3600-a62b-ef094990a262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:cb:e0:0a:8c:6b:a0:c6:de:e0:d1:4d:07:e8:84:40:c0:c3:
         c4:b2:3c:c9:da:fc:57:9e:06:4d:1e:cf:fd:b7:ae:d0:60:66:
         cb:a7:35:a3:6f:39:da:d6:63:13:69:78:cc:22:e9:58:17:81:
         06:f3:b1:9f:85:dc:67:aa:77:4e:48:12:94:6c:ea:e6:f1:53:
         12:d1:e1:ba:91:1e:85:3f:d3:c3:c2:0a:13:79:34:9a:c0:fa:
         66:66:f0:4d:d0:c8:9c:70:63:18:cf:3e:78:60:01:2d:54:3d:
         f5:d5:3f:1d:e2:2a:8a:6e:7b:fd:74:03:ec:ce:1f:bf:91:64:
         2d:e3:3f:5f:0f:b2:1f:42:99:34:d5:55:3b:1e:44:ff:0a:de:
         c6:25:22:b3:24:42:21:83:d4:f2:1a:88:c5:24:88:16:c5:05:
         c0:e1:d5:20:9b:ef:c7:d6:89:76:db:ed:da:0f:2f:87:2c:7a:
         2d:a4:9c:46:9b:d1:8c:04:0b:93:16:8d:12:b2:eb:c5:85:a7:
         79:3c:11:c7:8c:36:5a:ca:bb:8b:3b:55:3a:51:d7:d2:6f:05:
         00:12:bd:a0:4e:8f:2f:9b:1e:14:76:eb:73:f1:c0:e3:09:db:
         35:07:7c:a9:de:3e:c7:51:07:c3:dd:7d:f8:e9:75:f9:65:0c:
         b2:67:7a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:05:05 2025 by rpki-client