Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5112fe68-bd2c-39f3-a722-2a6261a4a98b.roa
File:                     5112fe68-bd2c-39f3-a722-2a6261a4a98b.roa (raw, json)
Hash identifier:          eZuFU8RAQfWICInaS5vy/F+FUCe0iUdiaibts2a5H0U=
Subject key identifier:   9C:A2:87:A1:D1:98:D0:01:AB:B5:5E:C8:2C:3B:DD:97:18:A4:44:A7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858495ABEC4CC67709BAB6344CF80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5112fe68-bd2c-39f3-a722-2a6261a4a98b.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     174
IP address blocks:        108.165.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:c4:cc:67:70:9b:ab:63:44:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=baf2ca68-da92-46ed-8868-4c643e354449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:db:86:e9:5d:ba:3d:3b:5a:8b:57:c7:fd:2f:
                    32:c7:bc:cf:62:29:49:91:05:8f:83:11:11:47:58:
                    86:21:90:0f:2f:3d:1c:64:e3:dd:05:bc:9b:ee:70:
                    b9:0c:e1:99:8e:c6:de:85:17:52:85:2b:a7:15:67:
                    fb:69:3a:df:a9:a4:a7:dd:62:b9:e7:ad:d5:60:cd:
                    a4:ca:09:25:bf:51:f2:ae:e4:77:9c:af:eb:cf:7f:
                    60:70:8f:e6:d5:b9:38:21:3d:57:4e:60:0b:35:89:
                    5c:61:56:20:9e:77:16:2c:a6:ea:b1:02:34:25:fc:
                    63:37:7f:49:1b:4d:37:d0:d1:38:67:01:d2:cf:55:
                    a4:fc:f7:b7:ee:20:72:4b:0d:27:37:fd:4b:9b:0a:
                    82:0c:f8:cc:ca:1a:33:9c:90:36:42:45:06:80:5a:
                    fb:2a:ed:31:00:08:2c:ee:77:2f:08:e9:13:ab:da:
                    89:3e:dd:72:1f:7d:c7:86:18:00:0f:e1:c9:c6:94:
                    8c:70:a7:6f:a2:b6:d6:c6:58:cd:ad:90:a5:59:bd:
                    40:0e:4d:82:bb:5e:ca:a6:6a:6c:d6:1d:2e:9d:08:
                    2b:f9:d7:ef:2b:bd:01:36:bb:0d:b2:13:29:80:5a:
                    df:e6:b5:7c:c1:0f:67:f9:c2:87:e7:e7:88:4e:9b:
                    27:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A2:87:A1:D1:98:D0:01:AB:B5:5E:C8:2C:3B:DD:97:18:A4:44:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5112fe68-bd2c-39f3-a722-2a6261a4a98b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:c5:d4:58:7c:33:8f:75:b4:4e:14:f8:04:c5:e6:56:77:4a:
         47:4f:a0:b9:0e:47:c0:c2:27:bb:67:a6:35:cc:61:12:0f:28:
         16:fc:6d:7b:21:18:48:93:8f:fc:d9:30:51:c4:f4:d5:55:11:
         a5:29:0c:f1:df:3a:35:39:1f:af:50:3e:da:05:d7:82:a5:d5:
         eb:97:f7:fe:a4:f0:7c:ba:9d:23:74:93:31:b2:a2:82:58:15:
         41:d2:83:33:32:5e:49:b8:0f:e4:a6:1b:8b:9c:79:ce:b1:73:
         2f:19:3c:ac:fd:81:dd:d4:ea:04:12:6b:9b:b5:db:bc:e3:8c:
         76:97:aa:90:e1:f4:ed:07:72:d2:ca:d9:03:cc:aa:c9:e0:67:
         3b:68:db:14:7f:c3:08:b0:bf:84:b6:06:a0:d4:d5:aa:66:38:
         e6:5b:57:b7:0f:6e:f8:97:c9:d4:80:12:c7:19:81:fd:5b:da:
         60:25:18:c9:55:41:bb:c0:bf:d1:fc:03:e4:b7:80:60:ba:1e:
         20:04:f9:dd:a7:72:22:fa:7c:9e:90:9e:76:a3:16:ad:c2:98:
         52:74:2d:77:7f:9c:35:56:80:2a:03:61:41:62:51:33:64:50:
         17:99:df:c9:f2:a5:87:d5:96:d0:e8:25:da:73:22:dc:6f:4e:
         e8:13:5e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:14:27 2025 by rpki-client