Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/56fb94c9-0bc8-35ea-9e9f-80891875558e.roa
File:                     56fb94c9-0bc8-35ea-9e9f-80891875558e.roa (raw, json)
Hash identifier:          2idCVKr/4S3oJuoU2Ku7pLWszkNpoj/6Kt4/14/PEqU=
Subject key identifier:   FB:99:44:B7:BD:33:B2:CB:5C:55:3E:E7:C6:F4:0C:BF:E3:24:66:5B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B13499E785E928E29A4750800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/56fb94c9-0bc8-35ea-9e9f-80891875558e.roa
Signing time:             Wed 03 Sep 2025 20:16:23 +0000
ROA not before:           Wed 03 Sep 2025 20:16:23 +0000
ROA not after:            Tue 02 Dec 2025 21:16:23 +0000
asID:                     21859
IP address blocks:        108.165.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:49:9e:78:5e:92:8e:29:a4:75:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  3 20:16:23 2025 GMT
            Not After : Dec  2 21:16:23 2025 GMT
        Subject: CN=92c58773-ab14-4e7c-b27d-b10ffa5f98b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3e:29:60:74:75:5b:18:e7:8f:5d:73:7a:6d:
                    47:d9:3f:12:d8:84:ee:76:b4:e5:78:83:42:b1:75:
                    e4:0f:cf:77:8c:65:fd:5c:d7:27:4b:d4:76:66:26:
                    b5:78:e3:25:91:10:c0:6a:71:fd:3a:cf:f9:da:85:
                    88:89:75:54:e0:3a:e2:c7:7f:d3:92:80:ba:30:80:
                    64:8c:6f:69:ea:e2:53:23:9e:71:15:ff:34:5f:7e:
                    35:83:ea:34:54:10:16:2f:fc:dc:1a:d7:06:6f:72:
                    e7:0e:79:65:3e:70:5c:54:81:5c:c8:04:12:82:8e:
                    80:a0:01:4b:67:a4:90:31:89:6c:69:73:11:10:5a:
                    f3:82:f8:6b:0d:1d:4c:1a:c7:f0:02:e5:2f:b0:76:
                    1e:54:f8:12:3d:f1:c3:89:ba:ff:c1:87:d0:c1:47:
                    97:f7:ba:a6:e3:63:ae:59:81:70:1d:dc:1f:ea:be:
                    45:c6:24:76:7f:54:1f:1a:71:ce:88:77:d9:3b:f2:
                    0a:ee:6a:f9:08:fc:0c:25:cd:3d:a1:f4:5d:6f:bf:
                    10:9d:68:a0:78:e1:5b:c5:a2:b3:ca:13:40:f5:1d:
                    3a:27:70:a0:61:a3:66:c5:4f:6c:6c:09:59:3f:ce:
                    7d:e0:5e:aa:a9:6a:1b:c6:0a:64:93:4f:c9:44:52:
                    c3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:99:44:B7:BD:33:B2:CB:5C:55:3E:E7:C6:F4:0C:BF:E3:24:66:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/56fb94c9-0bc8-35ea-9e9f-80891875558e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:61:db:52:cf:dc:fd:82:4a:4e:93:41:5b:d9:e2:cc:c3:16:
         3c:8d:11:b3:a2:b5:c5:8c:54:93:83:85:a7:00:5d:a2:63:e4:
         46:5e:c6:da:df:52:1e:c9:3c:50:bf:71:5e:e1:33:ee:76:64:
         4f:d2:c9:9e:18:2d:dd:46:d7:e9:fb:5d:76:1c:97:9d:76:d6:
         e5:87:9e:0c:66:77:22:a8:fd:21:89:5a:cf:19:bb:e7:ad:4c:
         6a:ad:6c:0c:d3:1e:dd:d8:a8:45:c6:ef:89:a1:15:4e:63:a3:
         6a:0b:e8:1f:99:dd:f4:64:18:4e:c3:c0:af:7f:36:82:16:84:
         99:e0:ed:7f:a5:dc:9d:f0:a7:90:de:c1:28:1f:b8:0c:6c:1e:
         09:96:bf:1e:10:72:74:25:b6:56:b3:b4:3d:8e:4e:1f:33:73:
         8b:67:17:57:62:b0:b6:cd:23:ac:c5:fb:39:dc:07:99:c8:1e:
         87:67:d9:cd:01:57:0a:b0:79:56:6e:83:8d:4d:39:69:84:37:
         14:f0:60:ed:0d:a9:c6:3f:c3:70:68:04:33:87:31:6c:e1:b0:
         6d:13:c8:3e:76:40:97:8e:4d:ff:b1:43:c7:e5:00:75:7e:f9:
         bb:ac:44:bc:1b:f6:e4:b4:9c:99:af:00:47:2e:31:48:0e:0a:
         f9:41:bb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:51:32 2025 by rpki-client