Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe0799e7-bcee-3d5a-84d9-00e3ae3a4722.roa
File:                     fe0799e7-bcee-3d5a-84d9-00e3ae3a4722.roa (raw, json)
Hash identifier:          lS0Qro3lF0ZeQ/3955j3J4po5KzAXVzVjjjxzeKYhxo=
Subject key identifier:   85:94:28:54:37:FA:71:7C:1D:7F:82:04:17:58:8A:DF:A4:29:B7:DC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A6826071E647B3D0901E5C800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe0799e7-bcee-3d5a-84d9-00e3ae3a4722.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     21859
IP address blocks:        108.165.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:07:1e:64:7b:3d:09:01:e5:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=2ec11ca3-1752-4098-9625-6aaebb50a3db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1c:97:c7:bf:07:5a:01:38:38:2a:6c:24:05:
                    6f:74:f1:41:c8:57:e5:88:3f:7d:14:76:2a:28:8c:
                    d2:d5:bc:f5:37:79:18:bf:89:78:e8:d5:65:e4:a5:
                    06:03:ef:9c:8a:cd:7d:fd:02:22:df:4b:12:00:f1:
                    1e:82:8c:57:cc:17:9d:e5:bb:ea:09:b5:00:00:db:
                    a2:45:b3:fc:95:c1:0e:c3:3d:1d:67:de:cb:6d:b6:
                    84:45:6b:c7:bb:cf:3e:25:69:30:e5:5a:9c:5d:df:
                    51:e8:d5:7f:0d:61:ff:3f:60:2c:87:be:1f:e3:7a:
                    f0:b0:70:41:13:46:02:2a:39:cc:f6:28:f4:b5:b8:
                    fb:49:52:f3:de:b8:8a:91:d5:e2:1f:50:78:5b:ed:
                    8c:2c:08:5e:f0:d1:6c:8a:b4:46:c1:35:3b:fc:6e:
                    c9:30:e3:fa:15:05:8b:ab:99:ff:aa:40:ce:9d:03:
                    30:16:ee:ba:6c:85:7b:70:d4:34:c5:fc:cb:45:5e:
                    42:da:2d:74:b0:7f:ac:b3:94:c6:98:61:f1:95:c7:
                    28:fe:59:e5:e4:a3:de:21:a9:73:8d:b3:6e:b4:23:
                    5b:5d:db:cd:1f:3f:ff:00:a9:2f:3f:71:f8:f3:b0:
                    77:44:b3:ac:97:57:54:74:9f:86:4e:69:47:88:1d:
                    e4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:94:28:54:37:FA:71:7C:1D:7F:82:04:17:58:8A:DF:A4:29:B7:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe0799e7-bcee-3d5a-84d9-00e3ae3a4722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:7b:bc:9b:6b:c0:aa:b7:22:b3:2a:0a:ba:ad:6a:b4:d5:d5:
         c8:c4:f1:ac:2e:c0:33:0f:5c:f9:a9:36:77:cf:9b:f7:71:f7:
         55:0a:63:4d:7c:bd:3c:e0:a3:62:40:28:ed:66:65:75:0b:0d:
         c6:f2:e3:93:ac:0d:e1:c6:30:4d:e6:d2:4f:5d:79:a5:58:ff:
         87:42:91:83:39:04:7a:56:1a:db:66:d9:78:b2:e6:5c:0f:a4:
         63:3a:ff:e3:f9:5c:d4:2e:6e:f6:24:fc:d1:e1:c4:79:74:40:
         cb:76:5e:d7:ee:9a:53:9c:49:15:e2:b1:51:9e:e2:e4:99:ca:
         63:61:9d:f0:71:b8:f2:ba:2d:8b:cd:15:59:a7:66:57:39:e8:
         23:39:82:7b:fd:2c:d1:a7:00:03:d3:4d:4d:2d:e0:74:f0:24:
         21:b6:b6:22:5e:7c:cc:bc:17:9a:7f:1f:d1:3f:2b:0a:84:09:
         04:8c:a9:5e:93:f2:7c:1f:15:2c:06:7b:70:24:d1:e1:e6:8d:
         f4:7d:2b:68:65:93:bb:03:f0:1c:6d:36:4c:0c:08:ff:ef:79:
         42:19:1b:85:9d:52:4f:47:b3:9c:13:96:b4:13:1a:57:c8:cf:
         89:9e:ac:a6:be:25:42:ae:0f:fa:f6:cc:42:33:7b:c3:9c:1d:
         d9:31:e7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:10:41 2025 by rpki-client