Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a96a7921-45ce-34cd-a5e5-3252a3f9dabb.roa
File:                     a96a7921-45ce-34cd-a5e5-3252a3f9dabb.roa (raw, json)
Hash identifier:          RhH1WavMjAYAuiTghzaOo6BxD0uYfpt/WpiU90lKPJo=
Subject key identifier:   82:D8:E2:49:0B:15:0A:FD:23:32:FE:45:30:17:3B:CA:70:42:7A:9A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848A9962FC72AF2144CF49F2040
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a96a7921-45ce-34cd-a5e5-3252a3f9dabb.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     21859
IP address blocks:        108.165.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:2f:c7:2a:f2:14:4c:f4:9f:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=19a41e37-74b7-4fc2-a69f-bde8334b0bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:63:bc:5f:cc:d3:70:d6:2e:f2:58:58:ef:2a:
                    3b:ff:c5:be:7c:ac:f6:40:32:60:5d:62:8b:de:c4:
                    0f:39:da:d7:75:22:de:54:a0:0c:0b:09:c4:99:e0:
                    5a:e1:d9:2e:9c:93:d7:cf:50:56:1f:11:f6:eb:21:
                    be:e2:d1:be:a2:8d:40:e9:45:82:e4:58:cf:ae:c4:
                    b3:74:06:b7:75:77:c0:f3:02:6c:6f:0b:f4:fb:d7:
                    71:c6:a8:71:3c:eb:1b:af:8d:24:b8:1c:8c:5b:80:
                    7a:1d:5c:58:13:ec:f0:1f:01:78:55:ca:b0:cf:f7:
                    2d:3d:73:ff:fd:b3:4f:44:0b:11:e9:70:ab:30:7e:
                    0f:81:05:30:8d:c8:05:83:15:7b:c8:ac:81:87:78:
                    42:2f:e6:cb:15:51:98:aa:e2:1a:03:22:da:96:fc:
                    aa:c7:e8:a4:8e:38:54:36:a8:59:ad:a8:34:80:29:
                    20:a1:a4:5b:57:fe:6c:7a:15:6a:60:5a:34:94:77:
                    84:35:82:66:18:93:14:9b:29:4b:b1:83:99:b3:d2:
                    a5:e8:65:ff:f2:51:0e:98:86:ca:64:65:4d:45:b0:
                    ae:78:d1:a3:e4:d4:f2:a3:b3:55:91:85:75:8f:13:
                    48:6b:fd:ab:59:a2:f8:83:33:a1:a6:ca:76:80:1b:
                    69:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D8:E2:49:0B:15:0A:FD:23:32:FE:45:30:17:3B:CA:70:42:7A:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a96a7921-45ce-34cd-a5e5-3252a3f9dabb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:11:52:fc:b3:4b:62:91:29:e7:a0:1a:39:92:8f:04:6b:05:
         8f:42:85:19:41:ae:5d:a4:01:d5:b3:69:78:1b:f4:84:d7:e3:
         00:aa:b7:df:c0:fc:84:90:ff:30:cc:94:40:e4:c2:c3:7a:cd:
         68:71:45:5b:a9:57:f6:24:19:98:cb:b7:ca:8c:30:de:eb:8e:
         d4:e2:e7:fd:7d:86:fc:39:26:48:be:e6:b3:a5:cb:3b:4a:3b:
         f6:75:6d:3d:43:02:c0:2b:56:f6:60:89:34:ad:35:63:eb:86:
         f0:df:f5:e9:51:86:72:b9:ad:90:57:7c:da:87:b8:a9:89:99:
         62:66:b9:0a:4d:9c:27:1f:28:03:e1:96:a3:44:05:00:94:02:
         23:41:ea:69:da:c9:48:35:f2:9b:65:92:50:0b:eb:6c:9f:bc:
         ab:4f:9b:0b:52:d5:2f:ab:30:c5:72:8f:a7:e7:46:ae:4b:8a:
         31:d4:81:bf:da:fd:2c:fb:40:b0:5e:7c:92:91:c5:f4:34:80:
         1d:04:02:65:af:66:37:c9:1a:c1:f0:cd:84:a5:ec:08:34:3c:
         40:88:a3:76:79:52:d9:99:9a:22:62:ae:e5:5f:f4:e3:41:8c:
         34:8e:af:71:8b:17:94:80:2a:eb:02:52:4d:1f:62:cd:0f:fb:
         f3:04:4d:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipli/HKvIUTPSfIEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MTlhNDFlMzctNzRiNy00ZmMyLWE2OWYtYmRlODMzNGIwYmYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGO8X8zTcNYu8lhY7yo7/8W+fKz2QDJgXWKL
3sQPOdrXdSLeVKAMCwnEmeBa4dkunJPXz1BWHxH26yG+4tG+oo1A6UWC5FjPrsSz
dAa3dXfA8wJsbwv0+9dxxqhxPOsbr40kuByMW4B6HVxYE+zwHwF4Vcqwz/ctPXP/
/bNPRAsR6XCrMH4PgQUwjcgFgxV7yKyBh3hCL+bLFVGYquIaAyLalvyqx+ikjjhU
NqhZrag0gCkgoaRbV/5sehVqYFo0lHeENYJmGJMUmylLsYOZs9Kl6GX/8lEOmIbK
ZGVNRbCueNGj5NTyo7NVkYV1jxNIa/2rWaL4gzOhpsp2gBtpiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFILY4kkLFQr9IzL+RTAXO8pwQnqaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYTk2YTc5MjEtNDVjZS0z
NGNkLWE1ZTUtMzI1MmEzZjlkYWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJwRUvyzS2KRKeegGjmSjwRrBY9ChRlBrl2kAdWzaXgb9ITX4wCqt9/A
/ISQ/zDMlEDkwsN6zWhxRVupV/YkGZjLt8qMMN7rjtTi5/19hvw5Jki+5rOlyztK
O/Z1bT1DAsArVvZgiTStNWPrhvDf9elRhnK5rZBXfNqHuKmJmWJmuQpNnCcfKAPh
lqNEBQCUAiNB6mnayUg18ptlklAL62yfvKtPmwtS1S+rMMVyj6fnRq5LijHUgb/a
/Sz7QLBefJKRxfQ0gB0EAmWvZjfJGsHwzYSl7Ag0PECIo3Z5UtmZmiJiruVf9ONB
jDSOr3GLF5SAKusCUk0fYs0P+/METQs=
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:44:09 2025 by rpki-client