Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f58b66f3-fef4-3c13-af81-acd886f6f6a4.roa
File:                     f58b66f3-fef4-3c13-af81-acd886f6f6a4.roa (raw, json)
Hash identifier:          nr12B14WpVafFHWXHR9vfQkh4eYG9lX/D7cKHPCIyqE=
Subject key identifier:   F2:61:12:57:66:E1:0E:8C:EC:AA:66:93:AE:30:4E:F4:C0:CB:CD:BD
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584902A5F42F89E0A3D69638D180
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f58b66f3-fef4-3c13-af81-acd886f6f6a4.roa
Signing time:             Wed 26 Feb 2025 11:39:49 +0000
ROA not before:           Wed 26 Feb 2025 11:39:49 +0000
ROA not after:            Tue 27 May 2025 10:39:49 +0000
asID:                     30036
IP address blocks:        108.166.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:a5:f4:2f:89:e0:a3:d6:96:38:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 26 11:39:49 2025 GMT
            Not After : May 27 10:39:49 2025 GMT
        Subject: CN=d8232f0d-df7b-465c-9df8-e6556ea0f3c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b0:cb:13:24:9b:ce:2c:aa:9f:cc:7c:58:34:
                    d6:82:ed:34:29:13:fc:de:95:a4:b8:42:37:fd:dd:
                    38:63:7b:e3:53:44:9f:13:93:36:11:0b:8a:f7:09:
                    71:79:33:71:d9:51:b8:9d:7f:85:f3:da:c4:df:10:
                    64:3c:9e:17:fa:e5:f7:b3:90:ee:5f:a3:f4:19:09:
                    29:76:c2:ed:c3:3e:97:c8:17:90:05:e9:0d:53:22:
                    a6:8b:2c:2b:6f:88:4e:c2:2f:32:d0:a1:fe:94:39:
                    e5:8c:61:8d:17:8a:e6:c0:56:0f:28:57:7f:91:7e:
                    94:c8:1e:45:a9:a7:e1:df:56:e1:fb:09:aa:89:4b:
                    17:03:a2:39:a7:88:e0:67:64:bb:9e:d9:d6:03:43:
                    76:61:35:9d:15:5a:43:2e:3c:c7:d1:c0:4f:69:28:
                    d2:e8:3e:90:8c:1c:1a:ba:ac:fd:68:d8:06:99:0c:
                    6c:94:3c:72:55:51:05:1a:f4:2e:7f:36:e0:6d:7c:
                    3b:b6:9e:14:43:ad:08:06:00:dc:a5:f2:32:77:5d:
                    eb:e0:97:d4:f3:8c:6c:ac:82:2d:57:65:73:da:45:
                    bd:04:20:ce:1c:c6:d2:bf:a0:33:61:3a:44:53:72:
                    0b:b5:ff:1c:bf:f2:6a:10:50:14:88:37:8b:be:c4:
                    ae:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:61:12:57:66:E1:0E:8C:EC:AA:66:93:AE:30:4E:F4:C0:CB:CD:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f58b66f3-fef4-3c13-af81-acd886f6f6a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.166.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:83:a8:23:87:c4:77:90:5d:c4:19:43:00:6f:c2:38:a6:1d:
         4b:19:d3:18:d6:cd:41:57:2b:e2:5c:ab:09:e5:b4:0e:c2:96:
         5e:09:2b:7b:87:53:65:c6:02:d3:a4:6b:74:9e:a3:8f:f9:f5:
         95:f3:ef:83:08:1b:89:bf:e5:00:8c:85:8c:53:88:43:8e:af:
         e1:a6:ea:6d:43:16:ea:b8:0a:ea:e8:56:12:ba:f1:58:7a:19:
         5b:e4:07:6e:3c:d6:d0:df:cf:1f:60:e6:f2:1b:dc:be:99:63:
         ce:b6:47:a9:1b:d3:c9:2d:d2:c2:7a:66:91:0d:c1:46:f3:df:
         59:60:e7:d8:b8:98:58:71:2b:19:6e:97:78:77:b5:b4:70:46:
         b7:2f:d9:54:05:46:a0:a8:7d:a4:ab:59:a1:81:00:0d:80:54:
         26:fb:83:31:dd:5b:6c:4f:7d:9e:1c:80:6e:50:cd:6f:32:70:
         c2:a6:21:9d:68:dd:96:45:c6:0e:50:04:2f:66:8d:4a:af:9d:
         6a:2d:22:28:83:93:5a:d7:ac:d8:54:bc:cb:f1:2a:5d:3f:73:
         da:2c:5d:78:ea:a9:bb:a0:ab:e5:95:ce:08:bb:82:21:93:c4:
         80:14:60:ab:21:42:3d:05:4b:44:a1:5b:ea:8f:fe:03:ad:e2:
         ab:a6:03:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:53:43 2025 by rpki-client