Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f899c8de-acb8-3838-b603-e048941918eb.roa
File:                     f899c8de-acb8-3838-b603-e048941918eb.roa (raw, json)
Hash identifier:          MFPfnm/SoGnPeq3AyXdrWDcXJCqcWorTcXmnc9ZgVkA=
Subject key identifier:   64:59:28:ED:96:A4:2F:5F:28:F0:B1:0B:B0:75:5E:77:0C:73:3D:60
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584988CF2E4D36DF17C5FF481180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f899c8de-acb8-3838-b603-e048941918eb.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     21859
IP address blocks:        108.165.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:2e:4d:36:df:17:c5:ff:48:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=85d45354-d938-4b9e-9991-ab9a2a63ffc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f2:f8:13:a6:2c:cd:ac:95:10:06:0d:54:94:
                    7b:e7:f5:dc:72:a8:85:f0:58:80:a2:74:1f:68:8f:
                    b1:db:70:d3:16:70:b9:35:ef:25:b3:10:c7:0f:05:
                    31:92:ff:3a:50:a2:ab:07:af:0a:6e:17:95:0d:a3:
                    7d:09:e1:c9:8c:e4:80:10:c1:ae:64:16:10:c2:b5:
                    d2:ba:09:2b:ac:31:ac:51:66:b2:cf:76:dd:aa:c6:
                    c3:d0:ab:0a:69:f6:f0:75:dd:90:99:c7:b5:14:84:
                    0a:72:6a:fc:b2:b2:c0:7b:d3:46:00:18:f6:42:53:
                    8b:2e:7a:2b:3d:3e:05:e6:3d:c0:6d:ae:d1:63:12:
                    df:62:9d:36:08:72:b0:5d:09:4e:9e:d7:d0:c3:b4:
                    89:be:5c:a8:62:31:42:bb:30:be:e4:8a:e5:a3:d6:
                    5e:65:9f:e7:9d:4d:01:bf:cf:7b:db:0b:60:36:d5:
                    b4:aa:0a:7a:b2:a2:d5:0f:04:3c:5f:c7:78:60:28:
                    08:9f:ba:13:d9:b5:7f:83:30:10:d2:be:38:95:9a:
                    fb:c1:44:34:24:ba:f3:7b:36:33:01:b6:f5:fc:d0:
                    37:96:6c:aa:bf:20:f0:9f:25:aa:c8:d6:42:9d:2a:
                    61:a8:35:20:4e:19:2f:33:bf:fd:f1:10:18:6b:39:
                    6c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:59:28:ED:96:A4:2F:5F:28:F0:B1:0B:B0:75:5E:77:0C:73:3D:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f899c8de-acb8-3838-b603-e048941918eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:93:c2:1b:a9:db:1c:ba:98:76:b2:d3:bb:93:6e:4b:72:c6:
         4a:44:d1:2c:09:87:00:3c:5e:6d:e8:a5:9c:d5:31:22:fb:15:
         e3:3d:53:c8:49:74:03:3b:15:09:08:e3:76:07:bb:06:d1:6d:
         ae:f1:b4:7e:47:68:96:35:af:a1:d9:01:e8:e7:b6:28:ec:6c:
         7e:b7:aa:6a:5f:1a:d3:71:0e:cb:17:04:06:85:4e:9b:d9:db:
         eb:1a:5d:60:a1:aa:fe:5a:2b:86:ad:39:41:c3:40:9d:c9:36:
         fa:f7:7e:c7:5a:f7:05:fb:3c:9a:52:5f:ba:a5:86:cb:b2:35:
         b3:4a:8e:c5:bb:11:4d:aa:df:32:e7:9d:05:93:03:2c:a6:22:
         2c:4c:f7:47:e1:51:15:2a:a8:cf:55:0c:cb:f8:a2:93:48:a0:
         65:aa:d2:67:48:c4:29:a5:a5:29:b0:ac:e9:26:eb:f0:3f:65:
         71:3d:d7:f2:b4:ba:a4:0d:aa:13:32:6c:75:04:a3:13:87:ec:
         20:2c:f1:08:f6:02:be:08:b1:5a:6f:f1:cf:99:74:b6:da:06:
         db:53:0c:ef:88:98:92:b7:b7:66:b9:db:e8:01:10:56:42:0e:
         15:18:96:8a:9b:d8:b3:8a:9f:53:82:70:ba:13:63:ee:0b:2f:
         63:c3:d9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:33:05 2025 by rpki-client