Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d412494b-0d71-3291-9c4a-412759c45e5f.roa
File:                     d412494b-0d71-3291-9c4a-412759c45e5f.roa (raw, json)
Hash identifier:          J2fJu604VnNKxEOAFwnM75QSZVV0WauS2RiC7JWkbNc=
Subject key identifier:   F9:B5:EB:39:C4:1B:50:07:C2:6E:DE:A2:B6:B1:D6:F7:61:4E:05:72
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A6826094982B1DDC99C608980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d412494b-0d71-3291-9c4a-412759c45e5f.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     21859
IP address blocks:        108.165.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:09:49:82:b1:dd:c9:9c:60:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=91f5bfcb-272e-47cc-a0a2-0c0f7660b9a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:58:51:d7:ba:46:95:79:c1:8c:66:94:e2:4d:
                    b7:ef:71:02:df:01:3b:8c:d2:02:54:35:40:e7:05:
                    7f:ff:f8:fb:22:d1:46:82:22:ea:5b:0c:df:0d:2a:
                    6c:ec:97:88:e7:e9:7b:ca:04:15:8f:d2:ca:fb:db:
                    5e:cf:ab:1a:a6:cc:e7:ec:2e:5a:31:f4:23:09:99:
                    5c:fe:d7:a5:d8:cd:56:62:c3:e8:63:ef:f2:3c:52:
                    ef:a7:27:f1:a3:16:a3:49:a5:d0:a7:ce:ad:4e:a4:
                    2c:04:2e:5a:76:b4:a7:c3:d2:48:6c:4c:a2:91:1c:
                    69:f8:3f:20:dd:5f:fa:43:42:09:6e:7a:18:1c:2b:
                    f1:bf:1c:ad:79:f7:38:04:2a:10:7e:cf:9a:84:c8:
                    af:7b:3d:f1:18:9d:9d:1d:01:4c:86:66:d6:8d:b2:
                    ee:06:2a:7e:b8:d8:98:d6:c8:ba:cf:83:de:b8:ec:
                    12:69:49:8f:70:ea:c1:45:e3:41:b1:76:57:fb:b9:
                    e5:62:77:5e:6b:b8:91:a3:67:cc:cc:d5:d5:16:f5:
                    fa:06:78:65:ed:98:47:90:cf:18:49:2f:04:02:52:
                    db:24:7f:b3:8e:ca:f8:a3:6a:b4:b2:e0:ea:ec:ba:
                    f2:de:12:16:af:22:e2:63:72:63:0b:0a:16:82:b6:
                    a1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B5:EB:39:C4:1B:50:07:C2:6E:DE:A2:B6:B1:D6:F7:61:4E:05:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d412494b-0d71-3291-9c4a-412759c45e5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:f8:7d:f5:48:9a:80:bf:d2:76:5a:87:85:cb:75:16:6f:11:
         f5:12:ce:34:cf:43:15:32:ec:86:94:68:05:45:bc:f9:12:eb:
         04:79:ed:5f:d5:d9:be:c8:db:0e:e9:0e:4c:3d:b9:5f:5b:25:
         a4:48:aa:ee:6a:43:18:2c:71:37:4f:61:67:08:75:f8:cb:d6:
         78:02:53:2e:c5:93:1d:06:d5:f4:83:41:5e:20:7b:9d:42:ed:
         fe:f6:f0:17:36:63:36:96:80:3d:f5:aa:cb:58:8b:7e:e5:ba:
         0a:26:01:1e:b1:fd:4d:ee:71:05:0f:8b:98:ac:c0:2d:63:26:
         34:ba:9a:88:b5:9c:eb:11:a4:4b:06:fb:d9:dc:18:4f:a6:f8:
         a8:84:f5:bb:6e:74:c0:8d:ac:ed:23:48:fb:e2:30:7f:a2:d5:
         0c:63:bd:26:d6:08:e7:d6:86:ba:0c:e7:9d:36:9d:57:35:71:
         60:ae:af:fb:33:d3:a0:51:54:06:7f:4b:fc:5d:36:a5:0c:5e:
         e4:0c:9c:47:0d:03:a2:a2:d6:6e:6b:8c:c4:11:63:77:ae:dc:
         7d:7d:41:c2:09:d2:c9:4c:a6:4f:b9:f7:13:0a:77:26:71:66:
         21:b0:72:e2:38:5e:bd:8f:46:61:4f:f8:8d:97:7b:3f:84:11:
         a8:78:ef:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:15:08 2025 by rpki-client