Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9ab2e9a8-5368-3613-873a-87343efe58c9.roa
File:                     9ab2e9a8-5368-3613-873a-87343efe58c9.roa (raw, json)
Hash identifier:          FWJdLkiluPFnrVl0oLvPj7uA4kAXH/zjjhFg1WNVH70=
Subject key identifier:   7E:6E:23:B0:2C:3B:B9:47:3E:9D:CC:47:C3:73:36:F5:21:15:D0:74
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848CEE25D2AD320B03F0F4CD600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9ab2e9a8-5368-3613-873a-87343efe58c9.roa
Signing time:             Fri 07 Feb 2025 22:39:30 +0000
ROA not before:           Fri 07 Feb 2025 22:39:30 +0000
ROA not after:            Thu 08 May 2025 21:39:30 +0000
asID:                     401152
IP address blocks:        108.165.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ce:e2:5d:2a:d3:20:b0:3f:0f:4c:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb  7 22:39:30 2025 GMT
            Not After : May  8 21:39:30 2025 GMT
        Subject: CN=c1623c5f-aca9-4d7c-ae03-91c46d1774df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:97:5d:53:00:11:5f:dc:6a:15:ef:a1:0b:bf:
                    e8:d3:59:d7:44:3d:a4:ba:27:a2:04:6e:2d:85:14:
                    b2:b4:bd:99:ba:4c:f6:28:3e:82:26:a8:fd:a1:f9:
                    e6:f3:46:9f:b3:2c:c9:fa:48:6d:2f:44:63:cc:e7:
                    57:db:26:01:03:2f:84:a9:16:03:63:8e:26:f2:8a:
                    7f:70:e3:1d:5a:a8:41:e3:47:5a:45:1c:3c:75:44:
                    8f:c5:eb:d3:6e:0e:a2:30:96:84:3b:71:7d:ea:7f:
                    82:fd:b3:b2:10:7c:8a:8c:9e:b2:52:ea:b5:16:fa:
                    d9:5a:ab:7e:1e:93:97:60:8e:36:fa:b1:46:ab:04:
                    e9:c3:25:ec:fc:25:71:d3:a1:a2:6d:2b:13:c6:cb:
                    7e:dd:1f:ba:f8:a0:e0:69:63:27:cb:8e:58:ad:ea:
                    7b:6b:0e:0e:2f:5a:57:48:75:e8:06:e4:18:e2:3d:
                    cc:3f:12:64:9c:df:a9:63:99:34:a2:5f:16:33:e6:
                    b3:67:c4:7a:f3:db:c4:ef:e2:8f:cf:34:08:1a:f6:
                    bb:98:e4:41:0b:78:27:ae:16:49:7e:8a:0f:d2:3b:
                    6e:8e:70:84:0c:59:ef:81:d4:b6:0e:52:90:e2:c2:
                    00:15:12:f7:d7:01:6d:39:20:f5:e5:dc:f0:1f:e8:
                    83:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6E:23:B0:2C:3B:B9:47:3E:9D:CC:47:C3:73:36:F5:21:15:D0:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9ab2e9a8-5368-3613-873a-87343efe58c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:cf:2e:9e:2c:be:24:f9:61:c3:42:85:b3:47:c2:62:cd:c2:
         fa:bb:58:b1:fa:17:87:15:38:1e:22:7a:68:83:f3:ba:20:0e:
         ae:b3:e7:c8:24:e2:46:f6:f2:f0:22:f8:ec:aa:f3:5e:57:38:
         16:9a:26:14:f9:82:56:23:bb:12:a4:94:95:d3:93:6e:e6:51:
         67:51:5d:38:4d:a0:84:5b:c2:ea:c6:78:5b:76:e9:f8:b1:5d:
         a7:72:db:98:f6:01:e0:fb:b0:07:4b:85:74:4a:22:1a:28:40:
         d2:e8:ef:2f:a8:fa:0a:66:e5:42:fd:6f:8a:38:84:ed:e5:4d:
         36:9e:fe:10:40:e2:9e:a8:b0:1c:64:ad:e9:70:4a:2d:a6:41:
         91:75:a0:6a:3e:00:df:34:05:e3:25:ff:b9:61:9b:ba:72:13:
         13:f4:de:8e:fb:ce:6d:b8:78:5c:f5:6a:39:be:24:30:52:9a:
         3d:06:d3:b8:a2:b6:8a:0e:8f:37:90:ed:45:4f:93:80:66:02:
         e9:93:29:48:be:c8:99:56:27:fc:ab:47:a1:c1:a4:47:81:60:
         1f:dc:5a:d8:89:9f:64:49:3f:a8:67:6b:cc:99:e5:b2:bc:cf:
         7f:d2:ce:64:09:62:fb:61:e6:52:e7:a5:a8:8d:63:11:ca:cb:
         c2:9c:4c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:23:17 2025 by rpki-client