Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5fa32363-88e1-32fa-a20d-478ff8c52370.roa
File:                     5fa32363-88e1-32fa-a20d-478ff8c52370.roa (raw, json)
Hash identifier:          IW2fL7rNFsCT80oJFeslKkRTBUa5jV4/ojTndCFj2Z8=
Subject key identifier:   BF:D3:58:D4:F2:36:FA:66:63:43:09:F6:66:1F:10:97:00:4C:E6:CC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A63A27139DD5F77880118E880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5fa32363-88e1-32fa-a20d-478ff8c52370.roa
Signing time:             Wed 02 Jul 2025 22:13:05 +0000
ROA not before:           Wed 02 Jul 2025 22:13:05 +0000
ROA not after:            Tue 30 Sep 2025 22:13:05 +0000
asID:                     199925
IP address blocks:        108.165.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:a2:71:39:dd:5f:77:88:01:18:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  2 22:13:05 2025 GMT
            Not After : Sep 30 22:13:05 2025 GMT
        Subject: CN=b5e29771-f7f2-4ef1-8418-8880f8130175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:af:e8:22:d6:5d:de:c5:e3:1a:fb:0a:d7:d9:
                    c5:8f:50:91:4f:c0:8c:11:6c:d4:47:49:26:89:40:
                    12:6b:f4:a1:39:29:08:72:2d:39:85:7f:74:dd:f1:
                    08:a0:02:03:9f:4a:f8:68:d8:a7:76:3a:a7:e5:0a:
                    a9:70:74:18:2a:ec:b0:60:67:22:fe:3d:7b:f5:fe:
                    18:4e:1e:d5:fa:6c:76:d3:50:62:3d:f0:b3:4f:de:
                    69:6d:cd:0b:28:79:77:d6:eb:ad:6a:60:63:06:38:
                    d2:0d:0c:55:f9:d0:87:37:ce:cb:3e:9c:35:9e:ba:
                    00:94:f2:d4:a3:5d:50:bf:08:b1:94:87:cf:ad:43:
                    dd:60:53:8f:ef:20:ec:3c:82:ea:35:ec:ec:1c:c3:
                    a1:37:43:e5:05:a4:23:7b:af:0b:a7:66:94:23:e5:
                    c6:6c:a3:d4:3c:ca:9a:e2:4e:56:11:e2:53:97:0c:
                    61:36:10:26:01:ba:05:58:7f:40:fc:fc:8b:88:4a:
                    e7:95:90:02:59:4a:56:0e:d9:72:94:c9:fb:bd:5f:
                    09:b8:1c:6c:51:3e:4e:7a:5e:85:2f:50:cb:35:b0:
                    cb:81:e7:2a:f7:7b:7f:52:65:3d:56:10:1b:80:60:
                    3d:cb:8a:f3:11:16:7d:2c:34:98:d6:bc:e6:47:26:
                    05:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D3:58:D4:F2:36:FA:66:63:43:09:F6:66:1F:10:97:00:4C:E6:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5fa32363-88e1-32fa-a20d-478ff8c52370.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:20:96:7f:1b:72:9c:4f:db:3e:44:13:48:16:c7:df:fc:29:
         47:d8:85:4f:22:97:2c:5d:cb:01:bd:27:34:05:29:21:51:b9:
         aa:7b:12:b1:d1:92:8f:4e:2e:79:9d:d0:85:9c:b0:aa:b2:43:
         35:7d:f5:91:53:a5:77:d6:96:1d:eb:5b:d7:8b:9e:8e:67:6c:
         70:fe:97:20:ca:d6:b7:a5:02:57:1a:be:0c:51:75:ea:15:2f:
         44:6d:14:b7:00:24:79:39:f5:e0:52:83:9d:4c:61:ae:d7:b4:
         a3:8d:86:e5:00:88:80:e3:2b:15:dd:99:13:76:24:ff:65:de:
         2c:14:1a:52:33:13:ef:55:83:13:97:4d:d7:8e:13:3b:2e:2e:
         10:4d:4f:b5:02:87:18:d4:7e:1c:45:76:9d:a7:d5:1e:14:05:
         ef:3a:69:db:eb:0b:95:9a:ec:5e:4d:fc:0f:46:98:30:b2:32:
         da:cf:5d:33:37:3b:b3:5b:7f:46:ba:82:4a:98:a4:8c:f8:93:
         0d:7a:a8:e1:19:3e:d3:a8:11:b5:0d:e9:0c:2c:24:ad:fe:52:
         df:91:6f:32:88:9e:24:5f:97:cf:a6:a4:fa:51:d9:19:e5:21:
         15:48:1a:8f:50:f7:7c:49:9b:9c:c5:95:59:e2:82:1d:1d:c6:
         ff:b9:4c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 02:34:03 2025 by rpki-client