Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a91284df-7ea4-32ac-aff2-31275499f2ed.roa
File:                     a91284df-7ea4-32ac-aff2-31275499f2ed.roa (raw, json)
Hash identifier:          dSraJjibEOKIuU2aOHbluXZGv8OB5xE2AgYo/gsLOmc=
Subject key identifier:   52:6E:43:5B:2D:AB:63:EF:7B:B5:AC:72:40:64:1A:7D:6D:C9:A2:64
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849FCAA9702DA3A97568CE56C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a91284df-7ea4-32ac-aff2-31275499f2ed.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     16276
IP address blocks:        108.165.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:97:02:da:3a:97:56:8c:e5:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=5ec67e03-54c6-4e6f-b4e9-4f650ae07853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d8:f2:8a:4d:cd:f6:f0:dd:58:a9:d8:a9:94:
                    34:a4:8c:cf:9b:10:e3:c6:7b:d5:33:92:62:5f:24:
                    c2:5a:9b:84:fb:03:e0:ec:e9:6d:1f:40:d7:58:c7:
                    cf:70:d8:b9:ae:d2:c6:ed:43:d3:00:c9:22:0d:9a:
                    23:a3:4f:07:6e:dc:2d:c6:95:7a:96:1a:0b:1e:f4:
                    84:64:89:27:01:22:a0:25:23:79:53:d8:24:f2:78:
                    91:e9:e3:92:8f:f6:32:15:94:4c:ca:cd:11:11:39:
                    61:7a:3b:1a:e3:11:d0:d5:d0:49:e8:60:6b:65:d5:
                    c5:83:8f:b0:5d:f2:be:4a:59:d7:fd:3e:d4:a2:d7:
                    a9:52:65:2e:b9:24:b6:17:7f:8b:64:15:c1:17:5c:
                    84:39:71:27:a6:cc:be:32:85:27:8a:35:0b:8f:2f:
                    c8:47:44:75:88:67:73:3b:4a:c0:8f:81:92:14:df:
                    c5:c1:7e:86:9b:15:3d:82:96:b6:10:83:56:de:7d:
                    ec:95:9b:48:e1:6a:5b:bc:f3:05:bd:c6:d4:e4:59:
                    bc:17:71:f5:cc:42:aa:6f:cf:90:ad:dc:9d:5f:57:
                    d3:96:aa:09:c2:d6:ee:fb:1c:b0:78:c3:9d:82:50:
                    9c:86:b9:d1:12:88:47:48:b8:75:19:cf:2d:73:87:
                    bb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6E:43:5B:2D:AB:63:EF:7B:B5:AC:72:40:64:1A:7D:6D:C9:A2:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a91284df-7ea4-32ac-aff2-31275499f2ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a5:51:f3:44:cb:37:14:d3:d6:ab:2a:f4:3b:e2:e3:6a:ea:
         59:6e:d4:55:c4:15:20:f0:81:6d:ea:ae:75:1b:58:9c:d4:c7:
         5c:3e:9f:32:af:d3:c8:c4:a0:2f:1f:2f:ee:cd:7a:c1:fe:35:
         fe:26:c5:36:fe:12:38:90:51:2a:fd:64:7d:0a:51:f7:0d:23:
         03:fb:ac:61:6d:7d:4e:e9:72:4b:30:af:f8:00:72:20:86:47:
         85:6c:6c:f0:2f:e8:bb:ac:1c:92:30:97:98:93:69:84:2f:b6:
         b5:dc:72:18:32:bc:dc:76:a4:62:eb:51:13:c1:52:26:0a:5b:
         6b:25:eb:d1:1e:c4:2b:1b:bf:0f:3f:65:d6:a0:e9:17:07:54:
         fe:ff:52:c7:ad:ef:72:4b:26:bb:47:54:6c:45:fe:cf:0e:72:
         71:72:00:c2:f7:73:50:1a:d7:cc:ac:e4:f6:c8:78:98:74:b3:
         0b:95:d5:61:c1:a5:71:ff:57:30:04:ca:a1:8c:fd:22:ee:22:
         34:7a:8e:52:5a:eb:be:de:ac:cf:ec:63:f3:79:16:86:10:59:
         9b:17:27:31:73:4b:f3:f5:06:ad:c5:f3:78:2a:53:98:39:b3:
         fe:70:09:e6:7f:57:0a:8c:a6:2f:5f:c9:18:ac:02:cd:ef:d8:
         72:97:74:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:42:32 2025 by rpki-client