Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/439125ad-10f0-33e1-b8ed-145eecccae06.roa
File:                     439125ad-10f0-33e1-b8ed-145eecccae06.roa (raw, json)
Hash identifier:          nTSJX0ccg8nVzrL4fX6LBijmmrcpx57uBhbaYn89p7I=
Subject key identifier:   09:93:A4:E3:D2:B9:F7:B2:DE:2D:45:5E:B5:F7:FB:2B:8C:16:66:62
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B13499EBB052CD6F134E97200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/439125ad-10f0-33e1-b8ed-145eecccae06.roa
Signing time:             Wed 03 Sep 2025 20:16:24 +0000
ROA not before:           Wed 03 Sep 2025 20:16:24 +0000
ROA not after:            Tue 02 Dec 2025 21:16:24 +0000
asID:                     21859
IP address blocks:        108.165.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:49:9e:bb:05:2c:d6:f1:34:e9:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  3 20:16:24 2025 GMT
            Not After : Dec  2 21:16:24 2025 GMT
        Subject: CN=0bd88b09-dc77-481d-95a2-9d9f24395e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3b:15:c2:31:03:57:89:71:52:46:1d:99:61:
                    af:94:0f:ad:c2:6a:3b:38:27:24:33:0b:43:91:67:
                    f4:b2:94:48:92:04:61:c8:32:6a:66:03:8c:13:1e:
                    03:fa:2d:00:8d:97:eb:2f:12:e4:66:b8:ee:65:22:
                    0e:51:b3:fa:3d:da:f8:79:40:a5:59:36:b5:fd:3c:
                    c6:58:d6:ed:a9:6d:33:5b:00:a9:a5:ab:46:63:8e:
                    09:05:b8:c2:dc:ca:fe:2f:68:32:82:53:b5:84:80:
                    82:27:a8:8a:7c:38:4a:ed:f9:f9:70:2a:e3:9d:97:
                    0f:e0:ba:91:07:56:f0:98:85:98:13:e8:a5:da:48:
                    03:b2:e0:50:89:aa:da:23:f1:f4:b4:ad:0d:8e:23:
                    bb:6e:8f:d3:ba:36:6b:0c:a1:c5:57:97:f2:be:9b:
                    14:3f:cd:88:a6:5d:a9:00:b2:22:ce:ca:36:6d:22:
                    76:fa:93:37:d0:5e:51:b5:05:88:b2:d4:fc:59:ba:
                    f5:d8:bf:e4:a8:4f:f7:8b:da:33:40:c2:4e:1a:4d:
                    7d:e6:cf:aa:fc:aa:fc:4a:14:26:97:b6:5b:ff:22:
                    88:53:1c:f7:7f:a8:3c:4b:b1:89:66:42:8c:94:30:
                    64:a9:7a:11:0d:ef:a3:50:42:42:be:8b:db:78:ba:
                    33:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:93:A4:E3:D2:B9:F7:B2:DE:2D:45:5E:B5:F7:FB:2B:8C:16:66:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/439125ad-10f0-33e1-b8ed-145eecccae06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:d1:1f:c3:3c:ba:df:3d:cc:04:38:b6:d3:98:20:58:52:8f:
         2a:82:56:2b:47:2a:c3:79:6c:b5:b2:c8:18:32:8b:4c:50:a1:
         2b:52:59:a5:7c:fa:b8:64:01:a0:dd:5c:34:77:9d:73:8d:bd:
         7a:2f:58:37:fc:eb:f9:60:13:0f:e8:96:f7:15:ff:03:71:79:
         09:26:a8:d6:22:d8:ad:c1:a0:8a:4d:09:90:80:ee:af:cd:89:
         80:ee:57:7e:a3:26:1a:54:a1:06:f3:5a:27:07:cb:76:e7:37:
         46:ce:33:b0:09:33:a3:b9:8e:c2:25:09:64:56:d7:fe:af:fc:
         ff:75:1c:44:4c:fa:38:f1:6a:79:86:9a:91:38:05:f5:03:ae:
         4c:1f:c0:bf:e5:93:b4:c7:8b:31:7b:b9:83:a6:84:70:2a:7b:
         38:c0:ae:8a:a6:30:cc:82:dd:f2:c2:70:b1:ba:36:1e:b6:fe:
         29:c0:47:42:61:ce:46:a5:d8:11:12:6a:01:3e:2f:a4:73:18:
         f8:f8:17:30:db:48:89:d7:8a:23:83:34:e4:0b:24:b5:90:69:
         52:1a:5c:21:0a:bc:f8:03:19:c5:4d:86:bc:22:c7:3c:9e:10:
         b3:b0:80:42:ea:17:4f:f0:8f:f0:24:86:0c:3b:0f:67:39:4b:
         26:11:9f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:48:06 2025 by rpki-client