Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6c025a85-cfb5-34a9-a062-f53da221cc49.roa
File:                     6c025a85-cfb5-34a9-a062-f53da221cc49.roa (raw, json)
Hash identifier:          SISZZM6oCLROZAkstKqVXcH8wQdhPQH6162iDljCVUE=
Subject key identifier:   C1:FD:51:92:C6:01:35:A6:2D:7E:13:97:C3:37:6F:F7:23:9B:B3:61
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849F3745D3C4B9D8E0CA0A4CC00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6c025a85-cfb5-34a9-a062-f53da221cc49.roa
Signing time:             Fri 23 May 2025 17:49:43 +0000
ROA not before:           Fri 23 May 2025 17:49:43 +0000
ROA not after:            Thu 21 Aug 2025 17:49:43 +0000
asID:                     49770
IP address blocks:        108.165.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f3:74:5d:3c:4b:9d:8e:0c:a0:a4:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 23 17:49:43 2025 GMT
            Not After : Aug 21 17:49:43 2025 GMT
        Subject: CN=ee756e2a-7ee5-4aaa-8a86-72f508ee186f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1d:67:4d:bd:38:8b:d6:b1:23:28:0b:16:de:
                    fc:fe:35:09:10:c5:e7:c8:d9:c9:70:d3:d6:e9:6f:
                    fa:7d:27:b0:8a:a9:27:08:79:55:5d:20:20:f0:4b:
                    cb:0a:0e:82:88:37:34:1a:c6:14:95:5c:b0:65:49:
                    83:76:cb:52:a3:a5:53:f8:6e:5e:89:0d:12:e5:9d:
                    01:28:ce:52:1a:6e:bc:cc:f1:24:0e:83:3a:b8:f4:
                    b4:b6:dd:ac:14:16:dc:4c:42:ac:d1:f3:01:17:e9:
                    b4:1d:48:8c:76:52:6e:66:01:83:81:a1:2c:dd:50:
                    be:01:ac:5d:75:df:f1:ee:8c:69:9f:9a:db:a0:58:
                    8d:a1:0a:06:80:61:4d:ba:9e:6e:75:10:7b:bb:7f:
                    17:25:9e:fc:96:e5:ce:29:7e:4f:5a:17:37:a8:51:
                    2a:d3:2f:96:84:41:f6:77:6f:85:b9:2f:86:9b:e5:
                    34:7c:05:4b:b9:d1:94:8e:82:4d:e6:65:c2:1d:35:
                    76:11:b2:b7:aa:86:1d:fe:bf:66:82:21:66:5c:d0:
                    28:90:05:02:04:18:35:f6:c1:9f:68:c9:3e:79:aa:
                    f9:b1:20:86:87:b8:f6:e7:8d:8a:24:bc:bd:62:47:
                    d7:2e:35:e7:74:f0:13:91:5a:b6:ec:11:05:6f:40:
                    6a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FD:51:92:C6:01:35:A6:2D:7E:13:97:C3:37:6F:F7:23:9B:B3:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6c025a85-cfb5-34a9-a062-f53da221cc49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:8d:bb:6a:54:ad:57:dd:dd:43:72:9b:b0:94:c8:50:16:a8:
         1d:8a:5c:a7:7f:61:1b:19:9c:ba:c7:5f:b9:d2:ba:90:44:cf:
         37:50:2e:72:66:1e:cd:0e:81:de:34:7e:16:c0:31:0b:75:9b:
         b8:13:05:38:6c:3c:cd:3a:ff:be:0c:29:79:72:e6:58:0b:5e:
         32:f0:5a:fe:31:ca:99:60:68:d7:9f:f1:a3:cc:24:da:90:ed:
         df:ba:0b:e9:79:88:70:59:e4:08:de:ce:21:b2:b7:36:7a:8c:
         8e:7a:82:d0:d3:04:bd:7b:1d:71:47:f1:8f:0d:59:80:cf:b7:
         fa:4c:0a:a0:bb:bf:61:eb:d1:45:49:4f:88:60:8d:a7:ec:9e:
         8d:e4:dd:9c:bb:42:bc:7c:ee:8a:2c:6b:cf:d6:01:4b:94:24:
         4b:b7:70:0e:25:b8:64:8a:e1:57:cb:57:b9:5a:40:9a:46:34:
         7e:f6:06:a6:d9:4b:8c:3d:77:70:83:47:15:b1:1e:6c:6c:af:
         85:a0:dc:49:fe:df:c6:ea:b8:1b:26:13:73:7b:e9:af:81:a6:
         56:0b:0b:30:27:5d:f4:08:2d:49:a0:37:fa:5f:fa:6d:2e:82:
         09:74:23:fa:6d:f1:3a:96:ec:95:3a:15:2d:8e:25:5c:d0:88:
         02:f9:60:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:15:29 2025 by rpki-client