Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4939177f-0358-3150-9805-90a412e0baef.roa
File:                     4939177f-0358-3150-9805-90a412e0baef.roa (raw, json)
Hash identifier:          9oIM77qZcXju83o24ZqEZeFe6eK6SAIBQmjk6YnK5xc=
Subject key identifier:   2C:94:C7:D3:03:D5:B7:F4:B2:A0:49:F1:4F:F3:CB:74:F1:CF:E3:83
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848E20D5656ABBC177D46934EEA
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4939177f-0358-3150-9805-90a412e0baef.roa
Signing time:             Fri 14 Feb 2025 19:26:27 +0000
ROA not before:           Fri 14 Feb 2025 19:26:27 +0000
ROA not after:            Thu 15 May 2025 18:26:27 +0000
asID:                     401152
IP address blocks:        108.165.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:0d:56:56:ab:bc:17:7d:46:93:4e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 14 19:26:27 2025 GMT
            Not After : May 15 18:26:27 2025 GMT
        Subject: CN=5be20855-fbba-48af-8c16-b5b894c2584f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:22:f2:d2:8a:fe:33:6a:1e:b8:13:2f:c6:
                    07:f4:7e:e6:9e:27:17:6f:c7:a3:05:ba:b7:6a:9c:
                    60:d4:82:45:c7:55:73:d9:4c:e0:53:80:b2:05:b0:
                    a3:0d:87:05:f0:2e:7c:a5:9b:e3:a7:49:42:98:18:
                    d0:a2:78:e7:6b:38:24:ba:f4:f9:5e:1d:22:fe:8f:
                    06:55:96:ab:ea:41:75:44:0e:4b:a3:0b:a0:db:eb:
                    0f:d8:85:24:50:70:03:d4:a9:66:0e:6a:95:ec:3f:
                    ef:05:27:fd:af:89:d4:ec:3e:73:37:79:98:da:05:
                    51:6b:cc:e8:44:da:c9:e4:5e:80:55:95:b6:b2:c7:
                    d7:e4:0b:11:c0:d7:53:e0:f8:f2:aa:34:82:81:e7:
                    c9:90:7d:6c:37:b3:b9:9d:d8:26:aa:8c:ae:4a:e1:
                    24:6a:cd:1c:c4:48:0f:ea:da:ba:c0:d2:d0:39:a3:
                    7e:34:6e:39:b1:2d:0a:f0:55:09:ab:6a:77:aa:28:
                    c5:75:7c:4e:29:a3:ee:c7:50:08:52:73:dd:1a:28:
                    94:90:18:9e:b9:10:dd:ab:fb:c6:6d:05:fd:d4:2a:
                    39:5b:3e:61:46:e6:40:1b:bf:bc:ed:b4:99:76:8f:
                    54:96:65:84:64:64:47:f5:22:9c:e8:a8:1f:14:96:
                    c0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:94:C7:D3:03:D5:B7:F4:B2:A0:49:F1:4F:F3:CB:74:F1:CF:E3:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4939177f-0358-3150-9805-90a412e0baef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:20:ce:97:cc:c0:28:4d:9a:78:10:f4:12:ec:83:f9:31:8c:
         e1:69:26:0a:87:cb:92:a1:ae:cd:82:f1:78:4f:f4:5f:39:05:
         39:03:62:44:75:22:8e:29:28:41:0d:8c:30:38:90:6c:4c:2a:
         1d:c9:1d:d6:b1:e7:aa:be:79:e2:4f:fb:f5:fe:0f:c1:45:06:
         84:46:1d:36:03:69:dd:91:b1:c8:87:db:bf:b9:31:0c:ad:c5:
         39:2d:15:0e:fe:f0:37:67:36:79:41:50:c3:1c:e8:bc:3e:2a:
         8c:a9:6e:c5:48:ac:f8:4c:e5:33:47:d3:0e:c8:ee:47:65:6d:
         13:fe:05:62:a6:5d:3f:5b:0b:cc:9e:c2:02:d9:de:aa:b4:90:
         2f:20:63:ff:fe:f9:24:61:2d:9e:74:68:15:3b:24:34:ff:89:
         40:5a:ea:7a:7e:d2:24:d9:3d:26:58:75:ad:cc:59:8c:6b:13:
         72:b2:a3:25:8d:d1:d8:00:63:6d:d4:a0:b5:bc:32:7e:13:aa:
         4c:37:f3:bc:69:fb:dd:63:1b:dd:b0:e4:08:d4:4a:55:62:94:
         02:e9:70:58:03:3d:59:fd:be:82:d6:d9:7d:06:35:60:62:01:
         05:85:3d:28:da:5b:f8:03:57:af:8c:76:f4:ad:c6:68:a3:1b:
         3e:f8:ac:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:33 2025 by rpki-client