Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ad28f96-5834-3cee-aa48-fb1aac830ce2.roa
File:                     6ad28f96-5834-3cee-aa48-fb1aac830ce2.roa (raw, json)
Hash identifier:          5u4EvhWzOVbdErpuE3MFWLEMaT3fgBkhEbG6TfyqCa4=
Subject key identifier:   2B:94:E9:23:E0:E7:72:C8:33:4B:25:2E:2D:AC:84:9A:41:9C:B2:D2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848D64113B64CFF2FAA1B22F880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ad28f96-5834-3cee-aa48-fb1aac830ce2.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     200017
IP address blocks:        108.165.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:13:b6:4c:ff:2f:aa:1b:22:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=cdafe201-0fb8-46b9-a8f0-9efbcf214d86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8b:54:87:8d:18:8d:35:25:2d:01:5e:08:78:
                    37:8a:19:ad:7e:bc:f9:b5:d7:89:31:5c:95:ee:3d:
                    da:6c:35:80:8a:4f:0f:78:50:65:d3:9d:4c:55:c9:
                    fc:e2:67:93:f6:29:a7:17:de:3c:7a:c0:15:31:67:
                    6a:32:a1:7f:79:9c:96:ee:dd:d5:54:61:08:59:b8:
                    cd:90:96:59:de:70:e6:d0:62:74:cf:05:7d:2e:65:
                    4a:66:a2:af:39:ab:3a:1e:dd:da:a6:22:a1:37:ad:
                    37:05:41:ae:b5:3f:96:6b:7c:e8:c4:9f:13:9e:38:
                    88:2f:7d:3a:e6:7f:ad:9c:73:76:be:ef:ec:6d:14:
                    79:3a:a2:a8:65:ac:a5:77:eb:81:bd:7e:12:ef:14:
                    43:99:21:ce:40:ff:80:54:f3:ec:4e:cc:8f:cf:fb:
                    de:af:67:32:78:59:80:16:bd:6a:3c:6f:7e:bf:8b:
                    50:d9:54:ac:77:20:89:d8:b6:f2:2c:70:d8:60:52:
                    3d:88:30:f1:29:bb:6b:50:8b:5d:6f:4f:25:c0:40:
                    06:f1:9e:ab:d9:08:12:50:41:e9:8b:5f:36:78:3d:
                    f6:1d:ea:9b:33:a7:a2:ed:a4:37:92:9e:18:d7:84:
                    08:fb:ed:9e:18:01:5e:73:7d:c0:49:d0:d1:ab:5a:
                    c7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:94:E9:23:E0:E7:72:C8:33:4B:25:2E:2D:AC:84:9A:41:9C:B2:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ad28f96-5834-3cee-aa48-fb1aac830ce2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:cd:81:13:5c:4f:85:99:c0:40:70:16:6f:c1:55:4b:81:a4:
         0e:0d:c7:80:ab:7b:a9:60:ad:72:7b:e1:cc:68:31:c2:8d:4d:
         0c:ef:e9:ad:8f:b8:49:c5:9d:62:0b:f5:e4:f2:20:c1:a0:c7:
         aa:c3:17:a7:33:af:93:fc:7b:9c:be:99:1f:d5:2f:f1:37:b4:
         0e:95:0c:58:d2:8a:4d:de:88:c4:94:2b:c6:d3:01:eb:b2:fa:
         d0:6f:59:2a:1e:a6:61:38:70:42:d6:67:bb:4d:40:d7:9a:29:
         42:5c:7f:70:e0:79:98:39:7e:ae:4a:5f:7f:60:e6:c2:88:96:
         5a:bb:a1:2d:6c:93:e1:73:51:b6:1d:fd:1c:42:9b:73:fd:2c:
         6e:c8:fd:7c:b1:f7:81:01:1c:6e:98:50:0d:ee:39:a3:9b:fd:
         04:a0:54:fa:76:c1:c4:51:4b:c8:20:43:4d:e2:74:9a:62:de:
         37:6b:ed:9a:60:0a:aa:e5:a6:1e:df:3c:86:00:67:58:fc:05:
         8c:70:d3:58:ad:01:dc:f1:f8:7a:06:b0:4e:f8:1c:c6:2a:8b:
         00:7a:6a:64:42:9c:2e:49:2a:f1:f5:09:76:42:57:da:1d:c3:
         99:a2:68:a7:f2:9a:b0:15:3e:9c:98:6d:b6:a0:63:f3:13:f7:
         46:f5:e0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:10:55 2025 by rpki-client