Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f268b691-0349-3129-a4c4-b94cf8701fc5.roa
File:                     f268b691-0349-3129-a4c4-b94cf8701fc5.roa (raw, json)
Hash identifier:          fRVrvFkjYnCtZLxqwrZ0uorjO/9F1yYZu06UBpstzYE=
Subject key identifier:   19:36:19:01:DA:47:CC:36:0E:E8:99:05:4B:CD:BD:19:A1:A6:F9:A4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A63F5BED383AA677C90843EC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f268b691-0349-3129-a4c4-b94cf8701fc5.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     16509
IP address blocks:        108.165.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:be:d3:83:aa:67:7c:90:84:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=578f9f3a-6290-47e0-bca1-d1dc670ae78d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:62:72:a5:0d:66:b2:2d:1d:f4:ec:97:41:e2:
                    f9:dd:df:5b:1e:ca:d7:2f:bf:63:06:4f:0c:80:a1:
                    d5:e4:00:ac:48:e3:35:b9:c9:cd:f4:5c:21:ec:56:
                    22:b2:a4:fa:83:bb:28:75:c4:95:e7:a4:c3:f0:04:
                    ed:4d:12:00:2e:f9:0c:ea:c2:d9:27:84:50:12:5d:
                    44:69:72:10:a1:85:01:67:9c:d3:34:b0:75:bf:c1:
                    74:40:b3:08:d8:30:e7:28:a5:21:01:a7:c9:c4:78:
                    89:be:ee:b0:74:59:78:d2:45:dd:08:cc:01:67:06:
                    db:52:62:f0:f5:e6:a3:91:c4:ae:be:7e:46:6d:f1:
                    d3:95:5e:a7:63:25:11:28:33:e3:41:2d:82:4f:1d:
                    d1:92:cb:a3:14:dc:a3:8b:f0:fd:20:49:38:5b:91:
                    75:34:99:b3:f5:37:e4:a8:97:73:0f:59:5f:10:e7:
                    7b:69:79:aa:d4:a4:53:2b:aa:3b:49:0f:9f:23:b1:
                    b7:7f:58:6f:52:fa:6f:f9:b8:0a:94:d3:cb:8d:0e:
                    ae:c9:0c:b4:72:fd:d2:eb:df:c7:f9:e5:7a:63:75:
                    94:60:1d:21:bb:78:2f:81:d4:f5:10:ec:ba:49:be:
                    6c:12:95:fe:06:74:0e:81:27:ac:29:c4:5d:05:61:
                    0a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:36:19:01:DA:47:CC:36:0E:E8:99:05:4B:CD:BD:19:A1:A6:F9:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f268b691-0349-3129-a4c4-b94cf8701fc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:6c:1b:13:6b:dc:87:98:91:9f:5f:c1:42:52:f2:62:71:4a:
         ea:6d:03:42:0d:2f:c6:b4:0f:2d:3d:78:c3:bb:c4:a3:87:9e:
         0d:bd:f6:e3:16:f3:88:c5:a5:7f:83:d9:fa:7c:63:df:0f:81:
         81:8b:43:d5:0c:d9:c2:6d:3f:86:df:30:8e:ac:04:2c:e6:08:
         2d:af:cf:47:8c:55:83:de:8e:da:b8:2d:84:ab:d6:a2:cc:f0:
         87:21:fb:0c:b2:43:91:14:f6:9b:06:8e:bc:82:8e:4e:92:6b:
         2c:66:68:50:3a:52:86:93:24:f3:d2:c8:0a:28:b6:12:a4:6d:
         27:20:fc:be:c3:53:1d:d0:e6:b7:a8:a3:13:3f:4e:6a:62:bf:
         2d:e4:cb:87:7a:c4:3b:36:c2:8b:d7:8e:b4:77:ab:a7:8a:1f:
         f9:ec:05:49:da:a5:1a:8a:ca:23:89:ff:02:b2:87:aa:7f:fd:
         3a:67:a9:8a:7e:e1:08:df:8e:ea:51:d8:b4:d1:c4:1c:76:30:
         bd:ff:03:19:af:56:f5:4f:49:26:bc:04:3c:76:7c:be:c1:df:
         35:f7:dd:ca:83:e6:a5:c6:fd:d7:24:b5:0a:93:c2:42:d0:51:
         a0:82:ac:9a:26:6b:dd:0f:ec:0d:8c:a6:ce:15:17:39:02:5f:
         96:5f:f9:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpj9b7Tg6pnfJCEPsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDcwMzAxMDA0OFoXDTI1MTAwMTAxMDA0OFowLzEtMCsGA1UEAxMk
NTc4ZjlmM2EtNjI5MC00N2UwLWJjYTEtZDFkYzY3MGFlNzhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9WJypQ1msi0d9OyXQeL53d9bHsrXL79jBk8M
gKHV5ACsSOM1ucnN9Fwh7FYisqT6g7sodcSV56TD8ATtTRIALvkM6sLZJ4RQEl1E
aXIQoYUBZ5zTNLB1v8F0QLMI2DDnKKUhAafJxHiJvu6wdFl40kXdCMwBZwbbUmLw
9eajkcSuvn5GbfHTlV6nYyURKDPjQS2CTx3RksujFNyji/D9IEk4W5F1NJmz9Tfk
qJdzD1lfEOd7aXmq1KRTK6o7SQ+fI7G3f1hvUvpv+bgKlNPLjQ6uyQy0cv3S69/H
+eV6Y3WUYB0hu3gvgdT1EOy6Sb5sEpX+BnQOgSesKcRdBWEKMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBk2GQHaR8w2DuiZBUvNvRmhpvmkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjI2OGI2OTEtMDM0OS0z
MTI5LWE0YzQtYjk0Y2Y4NzAxZmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHVsGxNr3IeYkZ9fwUJS8mJxSuptA0INL8a0Dy09eMO7xKOHng299uMW
84jFpX+D2fp8Y98PgYGLQ9UM2cJtP4bfMI6sBCzmCC2vz0eMVYPejtq4LYSr1qLM
8Ich+wyyQ5EU9psGjryCjk6SayxmaFA6UoaTJPPSyAoothKkbScg/L7DUx3Q5reo
oxM/Tmpivy3ky4d6xDs2wovXjrR3q6eKH/nsBUnapRqKyiOJ/wKyh6p//TpnqYp+
4QjfjupR2LTRxBx2ML3/AxmvVvVPSSa8BDx2fL7B3zX33cqD5qXG/dcktQqTwkLQ
UaCCrJoma90P7A2Mps4VFzkCX5Zf+YA=
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:13:37 2025 by rpki-client