Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/752f981f-3f0d-3077-9287-3379360cb483.roa
File:                     752f981f-3f0d-3077-9287-3379360cb483.roa (raw, json)
Hash identifier:          xLSiNtUVHIfuEs8PzgDkRSG5TMUlwBUTZ36Pnic9NPk=
Subject key identifier:   9A:FE:B9:8D:AC:5E:6E:BB:6A:76:92:1E:65:E0:17:53:87:A4:0E:16
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B1349A0CED6FA43EDE90D5D80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/752f981f-3f0d-3077-9287-3379360cb483.roa
Signing time:             Wed 03 Sep 2025 20:16:25 +0000
ROA not before:           Wed 03 Sep 2025 20:16:25 +0000
ROA not after:            Tue 02 Dec 2025 21:16:25 +0000
asID:                     21859
IP address blocks:        108.165.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:49:a0:ce:d6:fa:43:ed:e9:0d:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  3 20:16:25 2025 GMT
            Not After : Dec  2 21:16:25 2025 GMT
        Subject: CN=a81b30a8-2b2c-4b7d-9461-026d9eae4db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ad:fa:19:23:91:6e:0b:15:66:26:54:ae:55:
                    4f:67:ad:20:c2:a6:de:ab:9a:96:a1:71:e5:86:ef:
                    a1:b4:cd:b6:bf:f0:1a:e7:9a:30:e1:5b:6d:4c:db:
                    31:92:4e:fe:15:b5:3e:6b:17:68:3c:16:2f:db:95:
                    91:99:99:34:12:6c:0c:cd:0c:af:38:c8:04:c4:f9:
                    bf:da:93:dd:6a:38:1e:27:21:44:d0:08:d2:29:27:
                    f6:74:ae:ad:03:6b:7b:e2:f0:2e:77:79:83:8d:45:
                    35:9b:2e:0e:b6:63:00:6d:15:61:8a:0b:d0:11:15:
                    15:e9:e5:40:21:d1:a3:2e:ee:be:65:4d:34:ab:e2:
                    e7:b0:d9:38:06:d2:ad:70:ac:8e:fc:80:d6:8e:4c:
                    9c:22:09:c9:db:cb:7a:9e:b3:ce:98:b1:04:92:d8:
                    5c:ef:d7:3c:ce:54:41:20:92:e2:d5:54:9b:91:a8:
                    dc:ee:c6:4b:ab:79:a8:96:49:9e:8f:01:99:7b:0c:
                    6d:a1:6c:e7:7c:db:78:8e:e9:d9:ee:8c:ce:e8:3f:
                    4f:4a:b9:e5:af:95:f8:32:ce:63:09:60:b5:0f:3b:
                    9d:a0:2b:50:ea:2a:2b:c7:c0:1d:f6:0f:f6:f8:9f:
                    91:d5:44:c3:5c:b7:a5:86:1f:81:48:4c:f6:f5:6e:
                    5a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FE:B9:8D:AC:5E:6E:BB:6A:76:92:1E:65:E0:17:53:87:A4:0E:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/752f981f-3f0d-3077-9287-3379360cb483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:90:3a:cf:b1:92:8d:60:1b:5e:54:8f:f0:57:f4:5e:1a:64:
         49:21:07:a3:63:d7:ee:af:34:2c:66:d1:21:c9:cc:5d:21:0e:
         e7:03:3b:c9:4d:7a:9b:7d:38:f4:f3:b8:a2:e1:41:cb:33:10:
         e1:21:32:39:f5:1e:3a:1b:9c:4a:67:5a:02:4c:26:e9:fc:26:
         cf:95:31:dc:c2:48:83:bf:d4:06:0b:c9:9b:ee:40:1e:1f:16:
         00:2d:a1:d4:04:d3:60:94:30:98:2e:4c:e7:51:a1:d6:c4:f9:
         0f:6a:75:a6:c7:b9:a6:e7:dc:a2:20:a0:e1:ce:61:83:11:b5:
         43:9e:2f:1e:e3:b1:f2:12:dc:77:9a:ff:0f:40:80:50:6b:ab:
         68:5d:ef:50:f9:3f:4a:d3:8b:d9:f5:ed:cb:91:46:88:89:a2:
         71:dc:0d:1c:4b:8c:4c:fe:1a:9a:70:8d:4a:6f:61:79:b4:6f:
         d7:c6:20:bc:b2:ca:06:4d:2f:36:b4:17:78:10:95:f8:6f:63:
         7c:1f:73:b4:f6:d0:09:d9:2f:ed:b1:d6:65:b8:82:e2:00:0f:
         2f:20:8d:f2:53:d9:d1:35:23:8f:ff:39:9f:cd:ac:99:8d:60:
         e0:14:86:6f:65:d6:6e:9a:cb:15:82:64:a1:cd:88:f2:5f:9d:
         99:6e:ce:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:47:29 2025 by rpki-client