Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f21161fa-38e1-35b2-9a66-343c5977ffd5.roa
File:                     f21161fa-38e1-35b2-9a66-343c5977ffd5.roa (raw, json)
Hash identifier:          L0LfQ/3oYdd0TPGoxP3d3NW87hZbgiAJwhWZ969gF6s=
Subject key identifier:   95:99:AF:AF:7C:40:32:1D:44:60:6D:E3:CD:E3:E9:4B:DC:49:C3:B7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A6826076C6D99BEC62317EDC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f21161fa-38e1-35b2-9a66-343c5977ffd5.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     21859
IP address blocks:        108.165.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:07:6c:6d:99:be:c6:23:17:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=11d9037d-402f-4e41-99a5-e8be949f45aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6b:e3:07:36:d0:d0:c9:36:cc:73:d7:41:fd:
                    7a:ff:88:1b:17:1f:b5:a5:64:60:cf:ad:db:d9:a7:
                    11:41:63:9d:2c:e4:6f:6a:67:dd:bf:cf:83:85:af:
                    e2:4b:bd:d2:14:67:b3:87:19:12:3b:05:28:d6:1d:
                    cc:15:1c:13:34:b9:d0:a5:20:eb:a7:ed:42:ca:86:
                    60:13:c1:d0:c5:eb:60:5b:fe:ee:4d:a1:27:10:06:
                    e6:9d:fb:4e:46:5b:e8:ff:7b:b6:75:e9:b5:e0:e6:
                    a7:46:f4:42:36:e1:2f:0a:df:70:21:ac:d0:2a:50:
                    77:81:b0:96:d3:e1:12:35:0b:fd:bf:9b:53:56:18:
                    bc:a3:b6:5c:1f:4b:4b:74:01:c9:17:e9:de:a8:77:
                    07:c7:a7:df:4a:3b:ae:04:9e:49:ec:6f:80:ae:9a:
                    3d:90:28:3b:06:50:72:76:39:6a:dd:88:9a:e7:b2:
                    06:08:59:70:36:0c:84:bd:22:bf:29:70:2c:e0:1b:
                    76:9a:5e:5f:25:ee:4e:5f:a3:86:ed:e8:db:a5:ec:
                    47:0b:7c:7a:f7:12:5a:a9:ae:8b:9d:43:8a:3c:7c:
                    ce:7c:fc:09:90:ac:c2:da:48:22:ac:d6:b5:18:a8:
                    d4:88:70:58:6a:9b:fa:b9:ba:ee:e2:52:52:83:b8:
                    df:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:99:AF:AF:7C:40:32:1D:44:60:6D:E3:CD:E3:E9:4B:DC:49:C3:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f21161fa-38e1-35b2-9a66-343c5977ffd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:a2:e2:ed:bd:1a:78:3a:66:11:77:4e:97:a5:cb:15:cd:e8:
         03:85:21:e6:cb:0e:60:b2:dc:12:40:10:aa:9d:51:e6:8c:08:
         09:82:98:43:b7:37:30:f4:b3:e5:f2:d8:d7:b2:5e:65:54:27:
         cd:e9:dd:9a:af:8b:36:d3:7b:46:61:22:45:14:18:26:a8:11:
         38:72:fe:c8:dd:99:c2:f7:28:50:19:34:70:0b:e1:03:90:a3:
         2c:8a:a6:a9:3f:c6:18:9c:b6:ba:5c:29:4c:09:94:ee:70:02:
         6f:2f:9f:06:49:30:cf:cf:e1:a9:b9:9c:be:d3:56:86:e1:0b:
         d8:49:26:59:7d:af:95:6e:61:f1:2f:ec:e3:05:f6:aa:59:d8:
         80:38:80:1a:17:d9:23:f4:8c:f8:63:2a:2d:37:73:6b:fc:aa:
         69:1c:38:57:10:03:32:f7:41:5f:b0:8e:41:d0:83:2b:75:a8:
         03:1e:9a:8f:5d:38:7c:16:d0:65:7c:ae:54:fe:b4:5a:55:5c:
         ff:cd:19:01:27:5a:b9:58:5c:91:d1:ae:f7:c4:f5:18:f1:4e:
         74:ba:b5:c4:18:10:c3:0f:84:5a:75:7e:cc:00:5c:25:7f:ed:
         e1:92:a5:80:91:2d:17:67:cc:dc:8a:5f:4c:be:8d:34:85:95:
         85:25:86:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:21:24 2025 by rpki-client