Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e1ef914e-7922-3dce-88b8-868962b5bac7.roa
File:                     e1ef914e-7922-3dce-88b8-868962b5bac7.roa (raw, json)
Hash identifier:          sdsEZ4CVXnDdIeV99tQBCOTvN9OXgrW2hv/lJXVcPpk=
Subject key identifier:   F1:85:76:66:C2:3F:25:FD:F4:3D:31:76:16:CE:DD:2F:A2:23:77:F7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A9E655F9CF996384870EA7680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e1ef914e-7922-3dce-88b8-868962b5bac7.roa
Signing time:             Wed 23 Jul 2025 23:22:44 +0000
ROA not before:           Wed 23 Jul 2025 23:22:44 +0000
ROA not after:            Tue 21 Oct 2025 23:22:44 +0000
asID:                     7385
IP address blocks:        108.165.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:65:5f:9c:f9:96:38:48:70:ea:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 23 23:22:44 2025 GMT
            Not After : Oct 21 23:22:44 2025 GMT
        Subject: CN=59ad284a-8093-4c34-8c45-07e239f3b17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3e:56:24:11:d5:ff:74:ed:cb:b3:96:ab:3e:
                    d3:93:6e:7f:7a:5b:f1:7b:00:ae:82:46:47:07:90:
                    9a:d0:a1:6e:05:e0:4e:96:71:22:e0:5e:ce:3b:18:
                    79:74:30:73:dc:b5:cb:f5:6d:9d:25:e3:6a:b1:c9:
                    72:1c:c3:58:39:9a:a4:c2:9e:14:7c:e7:a0:41:a0:
                    64:95:fd:c5:5e:96:93:7a:dc:bf:4c:a8:2a:e8:bd:
                    d7:99:33:3e:58:30:8d:0a:5d:5b:3c:a6:fe:87:df:
                    75:13:83:02:95:91:ca:27:92:81:8e:1e:38:bd:07:
                    69:e7:54:76:5c:07:b9:22:18:f9:91:a7:c2:54:02:
                    e0:b8:0b:40:d1:d0:12:2c:c5:62:d2:c5:b7:df:ec:
                    68:70:be:e1:d7:0b:c0:ce:54:44:e0:39:d0:54:08:
                    26:8f:95:55:71:a2:ab:81:35:36:a3:bc:db:9d:d9:
                    b3:79:e9:6c:02:7a:ae:2d:c2:df:5b:be:b1:23:e7:
                    47:e0:9e:1a:f6:e6:23:24:cd:6f:1f:b5:9d:39:56:
                    01:cd:a5:2e:34:7f:67:4b:c1:3a:2f:0f:f9:b6:f1:
                    72:13:1b:31:79:a1:00:06:12:1d:b4:ed:6b:c7:9e:
                    3e:e1:69:d7:aa:d4:56:db:06:14:9d:7d:12:d0:50:
                    b2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:85:76:66:C2:3F:25:FD:F4:3D:31:76:16:CE:DD:2F:A2:23:77:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e1ef914e-7922-3dce-88b8-868962b5bac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:f3:c2:33:3b:44:ee:5d:b1:af:fc:e5:0f:9c:ee:5e:3f:c4:
         9f:5d:ac:f2:03:96:9e:b6:f9:4a:57:8d:a4:e9:2e:a6:18:94:
         4c:d5:e2:50:b1:09:b3:15:34:1c:98:fe:cb:d0:1d:2b:e8:8a:
         3e:d6:bd:9b:55:b7:17:ab:da:ab:b6:4f:f7:e1:27:a7:79:b3:
         1a:9d:12:6d:e3:31:da:61:1a:61:22:a6:40:68:0f:56:1e:ee:
         6f:bf:d5:5c:33:38:ab:5d:25:c2:50:26:3d:d3:c7:2e:7c:8b:
         bd:28:6c:1a:51:cc:d6:4d:f9:ef:f8:9e:8f:22:52:37:4e:59:
         a2:35:54:f2:8e:0c:e1:4c:32:c6:b3:98:09:d4:c5:f8:34:1c:
         e4:90:82:07:a0:62:e5:ea:98:06:da:b3:5d:ac:9e:5b:a7:6f:
         5b:b4:ae:40:2e:bc:d5:d2:41:37:cf:a9:8d:31:0b:f9:a0:4f:
         f3:b8:2a:99:f0:ab:cc:aa:d6:c0:6c:2d:16:3c:88:1e:1d:36:
         1e:b7:ef:eb:37:50:36:5c:63:1d:b7:50:49:d2:e7:34:8a:94:
         fd:6c:50:0a:3a:b1:66:5e:90:f8:65:77:57:9f:2b:8f:e9:76:
         9c:53:55:e3:3b:c4:c2:46:60:78:55:c5:f0:d1:a3:5b:1b:00:
         f2:43:6c:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqeZV+c+ZY4SHDqdoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDcyMzIzMjI0NFoXDTI1MTAyMTIzMjI0NFowLzEtMCsGA1UEAxMk
NTlhZDI4NGEtODA5My00YzM0LThjNDUtMDdlMjM5ZjNiMTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD5WJBHV/3Tty7OWqz7Tk25/elvxewCugkZH
B5Ca0KFuBeBOlnEi4F7OOxh5dDBz3LXL9W2dJeNqsclyHMNYOZqkwp4UfOegQaBk
lf3FXpaTety/TKgq6L3XmTM+WDCNCl1bPKb+h991E4MClZHKJ5KBjh44vQdp51R2
XAe5Ihj5kafCVALguAtA0dASLMVi0sW33+xocL7h1wvAzlRE4DnQVAgmj5VVcaKr
gTU2o7zbndmzeelsAnquLcLfW76xI+dH4J4a9uYjJM1vH7WdOVYBzaUuNH9nS8E6
Lw/5tvFyExsxeaEABhIdtO1rx54+4WnXqtRW2wYUnX0S0FCymwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPGFdmbCPyX99D0xdhbO3S+iI3f3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTFlZjkxNGUtNzkyMi0z
ZGNlLTg4YjgtODY4OTYyYjViYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKX5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAvzwjM7RO5dsa/85Q+c7l4/xJ9drPIDlp62+UpXjaTpLqYYlEzV4lCx
CbMVNByY/svQHSvoij7WvZtVtxer2qu2T/fhJ6d5sxqdEm3jMdphGmEipkBoD1Ye
7m+/1VwzOKtdJcJQJj3Txy58i70obBpRzNZN+e/4no8iUjdOWaI1VPKODOFMMsaz
mAnUxfg0HOSQggegYuXqmAbas12snlunb1u0rkAuvNXSQTfPqY0xC/mgT/O4Kpnw
q8yq1sBsLRY8iB4dNh637+s3UDZcYx23UEnS5zSKlP1sUAo6sWZekPhld1efK4/p
dpxTVeM7xMJGYHhVxfDRo1sbAPJDbNs=
-----END CERTIFICATE-----
Generated at Sat Jul 26 13:09:34 2025 by rpki-client