Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9ac19443-d22d-34c6-aa9c-716f114f3b4f.roa
File:                     9ac19443-d22d-34c6-aa9c-716f114f3b4f.roa (raw, json)
Hash identifier:          B421cFtx7oB+8AW+7T7HOoQhKdz1SiIyJV5rb/Juotk=
Subject key identifier:   36:C7:22:7D:1F:9A:0B:FC:60:84:D1:21:AA:A4:35:3C:D5:75:54:C6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A103551BB2AF6CB51DF8A1B00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9ac19443-d22d-34c6-aa9c-716f114f3b4f.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     63801
IP address blocks:        108.165.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:51:bb:2a:f6:cb:51:df:8a:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=d7a93c48-ac81-4236-b3b0-0f3340e71fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:29:a5:4c:10:3b:c4:01:69:13:eb:3e:55:3e:
                    d8:0b:9f:68:26:69:e5:b3:01:17:30:89:b5:75:65:
                    8f:19:8a:27:81:d1:82:e4:04:09:b0:6b:57:e7:f9:
                    79:92:eb:c8:0c:0e:25:57:8e:bf:3c:28:33:5b:c5:
                    84:3f:47:a3:81:ff:25:7d:1b:49:ed:53:14:9f:98:
                    f7:61:ca:be:77:4d:6e:23:f9:f9:52:d3:81:28:26:
                    ad:54:88:22:02:7d:16:4d:93:b6:31:55:1c:53:05:
                    59:7b:97:7e:28:29:da:ac:2b:71:52:2e:d4:82:4e:
                    8c:e7:e6:7c:9b:7d:1d:38:e5:82:c8:24:5d:a3:bc:
                    16:89:5b:ff:33:ac:7f:bd:84:f0:da:f5:57:fd:0c:
                    5f:c0:73:d2:fa:dc:d0:6b:c3:4d:ab:26:4a:f3:70:
                    ca:c7:10:5d:6c:87:95:02:dc:b6:73:1f:7e:21:c4:
                    9b:b0:bf:56:e4:ec:ca:81:3f:b2:ee:ce:bd:2f:c7:
                    ea:0b:38:6f:67:4b:b7:db:b9:74:e9:48:2f:34:96:
                    49:ad:fa:c2:d5:cf:5a:c8:7e:cf:c6:f9:fb:6f:4c:
                    10:e4:39:40:a3:fa:d4:8a:85:35:ed:02:60:ad:24:
                    27:c0:6e:dc:6c:37:a2:11:67:1f:d4:27:3f:69:b4:
                    1a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C7:22:7D:1F:9A:0B:FC:60:84:D1:21:AA:A4:35:3C:D5:75:54:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9ac19443-d22d-34c6-aa9c-716f114f3b4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:9f:38:07:d4:8c:3c:bb:8e:2b:62:64:f9:bb:db:08:1d:87:
         42:35:65:c3:af:4e:06:19:5c:2e:b2:bb:87:07:24:dd:50:c1:
         30:29:9f:fb:68:73:21:2f:0b:10:49:55:43:7e:a1:3e:a7:dc:
         32:fc:81:6e:ee:f9:85:9a:eb:06:b4:0d:d0:f8:02:0f:ce:6b:
         8b:70:5a:ab:3c:2e:04:40:49:3a:fc:38:d8:d1:73:7d:23:ff:
         c4:d7:a0:5a:dd:d5:55:be:75:46:62:f1:63:fe:ee:42:de:5c:
         f4:8e:db:76:18:bc:09:d6:48:94:d9:ab:eb:3a:5f:a3:2c:cf:
         12:c2:aa:e3:5a:48:27:7c:d2:7e:8b:07:01:25:a6:c3:bf:1b:
         ce:32:6d:f7:07:a2:db:48:1b:b5:80:27:8f:c8:23:a4:b3:80:
         81:fd:69:4c:f2:d0:41:41:cc:32:5c:f4:d8:b3:b8:10:5d:dc:
         c0:c8:2d:0b:d1:bc:16:6f:36:1d:62:24:b9:ec:dc:8d:16:4b:
         8e:e0:51:b6:38:30:f5:ee:c2:c6:4e:da:b3:06:fa:a4:05:77:
         a5:45:27:c6:84:b8:8a:7d:a8:44:36:8d:33:a5:48:2b:7e:fd:
         c2:87:bc:37:c4:6c:64:3e:97:70:82:ef:5d:0f:2e:73:96:36:
         b5:4c:0d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:25:49 2025 by rpki-client