Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e2aa1256-fdfb-31e3-81d7-0c703718b4cf.roa
File:                     e2aa1256-fdfb-31e3-81d7-0c703718b4cf.roa (raw, json)
Hash identifier:          CSM7ZN/ZHxleexVZsYgxlEdv2s+cS10QVPRXavSxRjY=
Subject key identifier:   57:13:52:3C:D3:3E:44:59:C8:73:D0:42:C1:E0:ED:54:45:EE:4E:3F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A682608DD0D8B2FAE08CEEE80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e2aa1256-fdfb-31e3-81d7-0c703718b4cf.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     21859
IP address blocks:        108.165.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:08:dd:0d:8b:2f:ae:08:ce:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=8eedbd6c-a6ae-4eca-9877-0758cb8d5fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8d:ac:6f:fd:26:b1:af:2a:cd:a4:2a:17:82:
                    98:b0:be:bb:af:93:ba:c7:fa:af:b7:40:0e:ae:04:
                    20:b9:fc:67:3e:4d:6b:dd:dd:a0:0b:35:67:cf:76:
                    77:f8:ea:5e:e9:50:0d:c1:e5:e8:e1:b2:c2:2a:f6:
                    22:c8:2f:95:16:91:53:56:c6:80:f5:9c:ef:92:c3:
                    dc:e5:c7:f0:f0:15:a0:15:67:e7:3e:81:a8:0a:57:
                    08:83:0c:36:24:cd:f2:ca:5c:f7:d1:d1:47:db:6c:
                    bd:73:84:b2:7e:42:84:7d:d2:23:0a:2a:fb:33:ea:
                    d6:44:e4:ef:dd:de:65:b3:0f:60:93:68:03:35:42:
                    93:87:de:b5:52:b5:66:5c:b2:89:35:1e:c3:ed:04:
                    32:08:45:35:6e:99:c6:5b:5b:7c:88:aa:f8:da:e9:
                    76:2b:8d:0c:21:ca:ca:dd:89:fb:79:98:c1:b0:9c:
                    37:b8:ed:14:6c:b8:d0:30:f6:8d:8d:cf:02:25:84:
                    c4:c7:77:c4:09:8d:2f:a8:42:7c:ea:49:9c:88:d9:
                    bf:06:99:38:42:93:54:c5:4e:a7:5f:e2:80:8f:d1:
                    d0:13:f9:21:3e:3d:dc:c9:3a:da:9f:80:49:40:30:
                    96:fa:03:f3:fe:cf:8e:f1:ba:f7:41:0b:b7:97:c0:
                    fa:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:13:52:3C:D3:3E:44:59:C8:73:D0:42:C1:E0:ED:54:45:EE:4E:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e2aa1256-fdfb-31e3-81d7-0c703718b4cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:59:aa:02:5d:da:66:5e:0f:ef:b7:c7:02:30:bf:ae:59:f5:
         2e:50:9c:40:bc:3e:8f:da:15:53:5f:fa:75:ef:ef:c6:7d:f9:
         9a:b9:5f:b2:16:34:1d:e5:88:c4:7c:0a:7b:77:45:85:13:0e:
         5c:d1:ca:a9:52:93:cc:9d:ce:88:20:5b:0d:d0:46:77:db:40:
         cf:5a:1c:2a:4d:ba:ca:1b:c4:f6:10:35:c9:50:c9:f4:9b:a8:
         81:ac:9d:f8:10:0a:4d:a8:32:bd:c0:4a:22:36:c5:94:f3:c9:
         d7:8b:e0:c8:8c:b0:79:a7:6c:1e:8c:40:50:4b:5f:29:c4:da:
         19:c8:1c:33:d2:d1:96:90:fb:5c:29:01:9b:01:7f:26:d1:77:
         97:72:75:b2:4f:cf:7e:4e:3d:f4:9b:4c:75:38:21:ac:0d:89:
         f5:cc:bd:b9:cc:d3:24:77:2d:f7:f9:51:23:eb:bf:55:5c:e0:
         a4:cb:45:88:c2:4f:9a:54:56:f5:ff:ca:6a:34:d5:96:45:8c:
         09:12:ee:13:ef:6c:e5:bc:8f:57:ef:f6:0e:6a:21:69:c7:46:
         4f:00:ba:0c:2e:0f:f8:f4:34:2e:b9:9e:29:d3:8e:b1:87:4a:
         24:2f:3b:b0:e4:0d:29:25:86:43:65:6b:12:97:dd:7c:39:d3:
         b6:e5:74:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:09:32 2025 by rpki-client