Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ed068fb-e777-3264-b447-dc622312f0ff.roa
File:                     6ed068fb-e777-3264-b447-dc622312f0ff.roa (raw, json)
Hash identifier:          RxbEqRn4oxeUcj3tDUjQTr+/J8gploOWZocvcoGJJOc=
Subject key identifier:   C3:A6:5C:E5:61:8A:B1:E4:04:C6:6C:AB:BE:18:C4:03:C0:CA:10:1F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849DB2A324B5F123ECC0D05A000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ed068fb-e777-3264-b447-dc622312f0ff.roa
Signing time:             Thu 15 May 2025 01:00:47 +0000
ROA not before:           Thu 15 May 2025 01:00:47 +0000
ROA not after:            Wed 13 Aug 2025 01:00:47 +0000
asID:                     134351
IP address blocks:        108.165.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:db:2a:32:4b:5f:12:3e:cc:0d:05:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 01:00:47 2025 GMT
            Not After : Aug 13 01:00:47 2025 GMT
        Subject: CN=ef709386-748f-4b74-9749-7a9581bdf476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:32:68:05:9e:a7:5d:fd:b6:51:0e:69:a2:da:
                    df:4b:3f:39:b5:67:74:a5:5e:e6:26:df:24:05:ae:
                    af:0a:f7:e4:95:79:61:c0:ee:11:f2:b0:1f:25:3f:
                    73:6e:db:c5:7c:2d:9a:88:ac:63:b9:82:fc:27:57:
                    c1:4d:d2:b4:b5:c3:cb:77:45:fc:ef:e6:56:3a:c7:
                    9f:68:75:bc:8a:fc:02:0d:f0:fb:8a:20:24:8c:e3:
                    27:3a:e1:21:8b:71:a1:95:52:69:b8:80:b8:13:97:
                    60:66:02:82:f2:3d:ca:db:7c:34:f6:07:1c:54:ae:
                    90:d8:50:00:cb:21:79:76:39:8e:4a:7e:8e:8f:d9:
                    45:a3:41:ec:74:60:de:39:81:ec:a5:aa:81:03:c9:
                    6f:b7:52:05:af:63:f8:91:6c:ba:9e:38:4c:61:2a:
                    43:b8:40:89:f2:4d:b2:c4:20:e3:53:6f:6c:c9:90:
                    f6:54:08:41:67:8d:d6:b7:f0:d0:31:c9:25:e0:42:
                    0f:34:09:1a:14:5d:71:c9:f9:25:01:73:d8:83:2e:
                    60:b0:70:88:65:84:e6:36:f3:e0:ac:79:dd:ba:a7:
                    f8:68:15:62:ad:c4:a6:ad:6f:bb:ad:b4:d6:6e:d9:
                    1f:ea:e8:76:55:da:18:de:04:6d:77:42:49:da:21:
                    7b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A6:5C:E5:61:8A:B1:E4:04:C6:6C:AB:BE:18:C4:03:C0:CA:10:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ed068fb-e777-3264-b447-dc622312f0ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:8d:93:c6:d0:2d:30:76:44:27:db:c8:ef:1c:8f:4d:56:0f:
         1c:4b:bd:ed:1b:0c:70:ce:e8:0f:4a:f8:ad:9b:66:36:17:6a:
         40:08:04:ea:c4:a4:cc:66:09:fa:d1:69:e3:1e:82:f9:f4:c9:
         89:ac:31:d2:c9:a4:7b:03:91:7d:76:18:93:52:f8:37:97:5f:
         a4:42:0c:c4:43:5b:a5:4a:07:29:45:56:0d:e4:6e:82:51:9a:
         07:f1:b6:8c:16:cb:ca:22:c3:60:93:60:d9:23:3f:24:88:47:
         64:3b:b5:8b:64:94:ea:a3:13:7e:70:58:a3:50:c9:72:bd:1a:
         4a:b4:27:c4:07:eb:dc:27:7b:96:e3:2d:44:4f:25:00:70:b7:
         18:16:04:90:4b:ea:c4:60:91:b6:32:e2:17:6a:19:59:a9:ba:
         2b:4d:02:9e:20:3d:a4:46:2f:3f:e5:b3:93:8d:59:d6:e2:d5:
         0a:4c:b9:8f:7f:e2:1e:b2:56:6b:f1:ee:34:b9:77:f7:37:85:
         a4:fa:aa:90:53:36:88:a2:1e:30:a6:f7:de:31:6e:4e:99:61:
         1c:a8:f9:da:e9:a4:b8:60:91:cb:c6:b8:5f:77:e4:69:6e:3f:
         03:4a:c5:07:b7:86:47:f0:46:d3:12:ac:08:17:2e:18:44:8f:
         f3:dc:f9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:26:18 2025 by rpki-client