Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe0799e7-bcee-3d5a-84d9-00e3ae3a4722.roa
File:                     fe0799e7-bcee-3d5a-84d9-00e3ae3a4722.roa (raw, json)
Hash identifier:          nfDkPr7ccxYm5JeUUjitIDFgSqsHfgq3NTL1pmmdpcQ=
Subject key identifier:   AF:E0:4E:E4:2B:6B:C9:91:AF:1D:C8:ED:CB:64:3D:B7:9D:FA:06:EA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584988CF2E1FB1818F9610CAEC00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe0799e7-bcee-3d5a-84d9-00e3ae3a4722.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     21859
IP address blocks:        108.165.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:2e:1f:b1:81:8f:96:10:ca:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=f6cc7663-f9da-46a9-8530-9d7e9092c423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:12:af:a3:b4:76:70:31:dc:be:4c:94:77:48:
                    dd:d5:aa:07:58:85:4c:05:44:0c:53:b5:fa:c5:3a:
                    c2:3e:b6:8d:53:4b:41:c6:68:a1:d0:1e:37:ca:f7:
                    aa:81:bc:50:da:d4:6d:3f:97:92:9e:5d:1f:2d:6f:
                    85:04:4b:88:5f:27:f4:90:92:ae:20:07:b1:20:7b:
                    47:7d:81:cf:1b:ad:0b:a7:20:98:80:7f:24:20:47:
                    c2:79:6a:ac:02:63:b1:ba:88:21:74:02:81:15:b5:
                    aa:cc:04:0f:6a:4b:87:a6:45:56:3d:53:9d:0e:25:
                    e0:ac:6b:d3:5a:3f:0a:c7:0a:b2:8c:8a:31:9e:46:
                    93:ed:fd:1e:1e:91:52:b7:01:ca:5b:45:90:0d:f9:
                    26:45:cc:39:2a:3b:da:f6:8c:77:49:44:57:3f:0a:
                    cc:32:4d:cf:78:5d:cc:39:01:c3:59:7c:96:18:8a:
                    de:7b:8e:f0:fb:fb:04:70:c8:dc:cf:6e:83:59:05:
                    ab:f4:62:2d:8c:fe:45:bc:0c:8a:48:af:49:8f:f7:
                    b4:b0:78:1c:11:eb:b7:08:67:1b:ef:20:1d:49:59:
                    0f:e0:1e:4f:30:3a:64:65:57:32:ee:40:65:dc:5e:
                    33:65:03:95:8f:d0:d3:49:4f:54:ce:ce:d9:e5:1a:
                    27:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E0:4E:E4:2B:6B:C9:91:AF:1D:C8:ED:CB:64:3D:B7:9D:FA:06:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe0799e7-bcee-3d5a-84d9-00e3ae3a4722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:99:cb:7f:d2:0e:36:da:2f:2a:03:8b:c9:39:a8:43:e9:07:
         eb:7a:e4:17:cd:20:9d:81:e7:6b:69:e1:81:20:f1:91:ca:92:
         3c:e3:69:87:22:4c:a7:b7:5b:ba:a9:a4:a4:aa:1e:3f:50:c7:
         34:1a:df:21:d1:d8:02:2c:2a:a8:01:a5:20:34:09:e9:d4:b0:
         0a:f6:28:30:93:ff:39:24:96:70:d9:d1:c5:ee:c0:7a:f3:25:
         a2:88:2e:0d:16:25:2b:e7:25:b6:53:e2:71:b0:2d:a3:c5:80:
         57:07:9a:70:1a:19:a3:33:b9:4e:85:3a:79:d9:dd:71:6d:9c:
         8a:43:82:b8:5d:0e:eb:e5:2c:28:d9:01:b7:9c:04:e5:66:1f:
         d8:c4:e6:ee:ec:17:c3:f8:d0:39:ff:e9:78:0d:02:26:27:c3:
         3f:77:ed:ac:9c:d2:94:58:90:5f:7e:e4:34:a3:dc:09:39:35:
         4e:b4:66:9e:a6:cf:bf:e1:d7:04:9c:f6:24:9a:d3:77:e9:fb:
         87:1e:fe:3d:84:33:c3:93:16:ca:ed:e0:28:a1:e9:60:2a:e1:
         f2:d0:b5:0c:34:3a:4a:c6:ab:13:c3:9a:31:77:12:7a:d1:d4:
         55:77:3e:c2:78:34:54:e4:7d:24:84:8b:4a:d6:37:b7:92:b3:
         2a:35:17:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzy4fsYGPlhDK7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk
ZjZjYzc2NjMtZjlkYS00NmE5LTg1MzAtOWQ3ZTkwOTJjNDIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRKvo7R2cDHcvkyUd0jd1aoHWIVMBUQMU7X6
xTrCPraNU0tBxmih0B43yveqgbxQ2tRtP5eSnl0fLW+FBEuIXyf0kJKuIAexIHtH
fYHPG60LpyCYgH8kIEfCeWqsAmOxuoghdAKBFbWqzAQPakuHpkVWPVOdDiXgrGvT
Wj8KxwqyjIoxnkaT7f0eHpFStwHKW0WQDfkmRcw5Kjva9ox3SURXPwrMMk3PeF3M
OQHDWXyWGIree47w+/sEcMjcz26DWQWr9GItjP5FvAyKSK9Jj/e0sHgcEeu3CGcb
7yAdSVkP4B5PMDpkZVcy7kBl3F4zZQOVj9DTSU9Uzs7Z5RoncwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK/gTuQra8mRrx3I7ctkPbed+gbqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZmUwNzk5ZTctYmNlZS0z
ZDVhLTg0ZDktMDBlM2FlM2E0NzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKUyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIeZy3/SDjbaLyoDi8k5qEPpB+t65BfNIJ2B52tp4YEg8ZHKkjzjaYci
TKe3W7qppKSqHj9QxzQa3yHR2AIsKqgBpSA0CenUsAr2KDCT/zkklnDZ0cXuwHrz
JaKILg0WJSvnJbZT4nGwLaPFgFcHmnAaGaMzuU6FOnnZ3XFtnIpDgrhdDuvlLCjZ
AbecBOVmH9jE5u7sF8P40Dn/6XgNAiYnwz937ayc0pRYkF9+5DSj3Ak5NU60Zp6m
z7/h1wSc9iSa03fp+4ce/j2EM8OTFsrt4Cih6WAq4fLQtQw0OkrGqxPDmjF3EnrR
1FV3PsJ4NFTkfSSEi0rWN7eSsyo1F1s=
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:54:59 2025 by rpki-client