Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/77769568-439f-32dc-9255-d56d9b47daad.roa
File:                     77769568-439f-32dc-9255-d56d9b47daad.roa (raw, json)
Hash identifier:          bgoViikm7S07tkhrshqtDqBkICTIqPt6jvqwkTI7lb0=
Subject key identifier:   81:9E:5F:C8:25:82:F0:99:7C:07:1E:97:3F:47:B5:AA:27:E2:D8:9E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849E4EFC66B9ED5D7DE3856BF80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/77769568-439f-32dc-9255-d56d9b47daad.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     148996
IP address blocks:        108.165.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:c6:6b:9e:d5:d7:de:38:56:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=db91a55d-c8df-428f-adcc-fa69a847bdaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6b:be:76:fc:ef:58:f2:5e:47:1f:8c:bd:1f:
                    7f:05:1d:78:4a:33:ef:26:0e:a3:98:a7:c1:6b:a4:
                    14:66:58:fe:66:7b:1b:28:4c:4b:e8:eb:e6:76:cb:
                    14:5f:49:0f:92:98:15:b5:df:46:45:4a:9d:4f:d3:
                    64:27:de:b5:8a:10:cf:d7:89:d4:f9:63:25:f4:32:
                    a8:b7:e4:70:d6:a8:f0:9d:1d:01:6e:e2:9b:6c:5e:
                    15:46:30:a4:b7:cc:56:ed:d4:db:b2:b5:e2:6e:37:
                    7d:0a:a9:30:16:3f:44:44:ad:15:cf:c2:df:cc:cf:
                    18:77:5d:ad:a0:84:c3:d9:e9:60:87:02:4d:cb:41:
                    d9:f4:e4:95:02:54:1b:27:f9:76:e2:30:c7:5d:b9:
                    3b:0d:67:8c:1e:06:9c:98:70:94:7f:be:4d:48:6f:
                    60:f2:ff:ab:6a:e6:6c:8d:c2:f4:5a:f9:cc:74:b0:
                    c5:09:c5:63:eb:2b:00:47:85:3d:2e:28:3c:da:4c:
                    e7:44:bd:74:96:1d:ea:ed:fa:5c:51:77:d1:15:93:
                    be:61:d2:d4:7a:a1:05:02:8c:ab:56:48:f4:ae:ea:
                    28:86:80:b2:17:86:50:ae:b6:70:67:da:f8:49:93:
                    b3:c8:2b:de:a6:2d:21:12:75:ef:67:9a:27:f1:b1:
                    1a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9E:5F:C8:25:82:F0:99:7C:07:1E:97:3F:47:B5:AA:27:E2:D8:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/77769568-439f-32dc-9255-d56d9b47daad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:0d:c2:80:30:1b:d2:91:bb:69:45:e1:cd:96:2c:ba:d6:56:
         c9:10:66:10:40:bc:ff:4c:58:27:e1:af:51:38:a3:a9:c0:a2:
         49:f4:fc:74:a0:c2:f3:25:97:10:4e:18:7e:42:1f:de:06:ee:
         d0:ff:11:01:18:29:7d:53:cc:ef:5c:04:13:35:ba:0f:2b:0f:
         0a:e3:43:e2:f3:1f:b8:0e:09:e2:94:91:02:88:c5:da:7a:4c:
         8a:8f:f5:db:64:ef:7e:8e:b0:72:f3:4b:02:4a:6f:2b:44:1c:
         95:64:07:48:05:cc:16:ff:ab:90:da:7f:cd:81:24:ef:e2:ff:
         81:04:00:68:10:d3:0f:e3:12:55:ea:0e:42:a7:e7:96:68:5e:
         d1:18:e5:18:38:3f:76:84:95:2d:11:94:f2:4a:86:85:de:8d:
         0f:82:76:11:83:66:f4:b9:aa:4c:2f:06:b5:ff:79:a7:ae:c3:
         32:2f:35:7e:50:a8:47:2b:62:e4:18:0b:b6:5e:63:95:88:9a:
         26:6c:9d:18:ee:ff:07:a3:4a:5a:bd:4f:37:fd:76:76:69:ce:
         57:bc:59:e8:32:b8:45:12:1f:a6:e5:6f:17:57:6b:8d:70:cc:
         f7:bb:83:d0:90:15:02:2c:d0:5f:eb:1a:05:5c:33:65:74:ee:
         4f:94:5d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:00:18 2025 by rpki-client