Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5ea516ff-1921-3378-b1e8-92f8c7ebec13.roa
File:                     5ea516ff-1921-3378-b1e8-92f8c7ebec13.roa (raw, json)
Hash identifier:          C3K07udXhfjMFaLOf2frtUSq8wRG+Kme1xxdzYKGmcM=
Subject key identifier:   FE:5B:F2:8A:A9:D0:30:15:48:EE:28:55:6C:D3:90:61:B7:F4:42:38
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849DF5A7BA0F2465D64ABD64800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5ea516ff-1921-3378-b1e8-92f8c7ebec13.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     396982
IP address blocks:        108.165.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:7b:a0:f2:46:5d:64:ab:d6:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=8899e2b6-92a5-42f0-bffc-d07c08ff5ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7a:ba:3c:8b:6f:0e:30:2b:b8:f8:3b:cc:e1:
                    51:d0:25:88:17:89:9a:30:ad:b4:e0:18:de:6b:3f:
                    1d:b6:f6:74:b4:98:4e:12:42:d8:ac:4f:d5:88:ef:
                    c4:5e:5c:4c:37:4b:43:7e:ca:11:1f:09:ce:ef:fa:
                    eb:94:33:2b:11:47:a1:d9:db:87:5a:d7:af:a6:78:
                    4e:41:87:87:61:68:09:8a:6e:ae:62:c1:e7:db:90:
                    00:01:a9:17:fd:fc:5f:e0:94:4d:c5:b2:62:fa:55:
                    a7:2e:9d:1d:09:c6:47:df:59:24:59:1f:f3:d9:c3:
                    1f:32:cd:a0:fc:ed:08:9e:57:76:34:ab:61:87:b7:
                    08:7c:f0:f6:3c:f2:65:e8:4d:45:18:75:98:fc:0c:
                    03:fa:34:a7:bf:7d:58:55:3c:7d:96:60:7e:26:ee:
                    4f:0c:9e:d7:59:8d:32:72:27:a7:8d:6f:72:7b:9f:
                    77:cc:68:c3:fc:57:79:e9:2c:54:47:2d:d4:46:7d:
                    d8:a5:e5:e3:d8:1d:1b:51:f1:c6:94:2d:1b:45:52:
                    b4:d6:14:13:bb:83:c1:ed:a4:8f:9e:a6:87:12:d0:
                    07:4c:c7:fe:0d:28:a6:90:e8:b8:e2:47:e5:8b:e2:
                    46:9f:e7:dd:26:5a:7e:c4:f7:59:2e:68:81:c8:b8:
                    da:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5B:F2:8A:A9:D0:30:15:48:EE:28:55:6C:D3:90:61:B7:F4:42:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5ea516ff-1921-3378-b1e8-92f8c7ebec13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:26:5e:4d:e6:e3:06:24:5b:4b:44:00:e5:38:49:f8:78:68:
         39:24:17:d1:b5:bf:18:ea:1a:a1:b4:41:81:cf:9e:13:c0:88:
         a6:cd:11:41:cf:6b:fc:a2:b0:fb:47:10:ff:26:a7:a5:70:00:
         2f:f5:c0:1a:c1:a8:f0:29:cc:9c:eb:51:b2:e0:1f:81:e0:d0:
         fd:b3:82:d3:76:63:59:a9:d9:1f:1a:e7:9d:78:20:65:60:36:
         da:0c:39:94:49:0e:0d:52:8b:3d:94:df:0f:8b:1e:06:10:8e:
         61:a5:b2:1a:ac:22:81:04:5c:35:5e:0a:c1:07:a2:4c:f8:e2:
         10:a1:f8:3a:64:0e:62:12:84:b0:cc:c1:e7:0d:89:cf:dd:c8:
         c0:09:17:88:c7:e7:bf:07:24:dd:d2:d8:b9:2f:69:1d:78:6c:
         7d:36:22:6f:64:d9:9d:00:3e:9c:e1:1f:94:5c:83:41:79:9e:
         7e:c8:33:a8:21:ed:42:5a:a4:06:47:36:cf:64:22:4a:5d:43:
         0f:bc:96:99:ce:05:ea:da:1f:c3:b0:da:4a:e4:0b:6b:bd:75:
         54:65:0b:98:59:23:c0:e7:1e:8a:66:7f:b3:a1:f7:23:8e:b4:
         56:09:1a:d7:5e:33:98:45:9a:61:be:9a:86:c0:ad:ab:1c:c2:
         10:91:70:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:25:21 2025 by rpki-client