Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c0acb3b2-f327-3991-8b82-72e775b3982c.roa
File:                     c0acb3b2-f327-3991-8b82-72e775b3982c.roa (raw, json)
Hash identifier:          zZOz2UNVSiYzzz5MRK7F69WBlo1YUG+MpVJdPv9EtJU=
Subject key identifier:   E4:69:3F:3C:59:87:58:A5:D2:FB:50:9C:BB:58:3C:95:BC:E2:E3:B3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B38219E148F0EDF7E34848B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c0acb3b2-f327-3991-8b82-72e775b3982c.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     26141
IP address blocks:        108.165.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:9e:14:8f:0e:df:7e:34:84:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=a8c7c984-9d47-48fb-bff3-247c703d83a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:03:df:46:05:c5:4b:0a:de:3f:c3:ff:3d:57:
                    2f:37:b7:b9:88:70:37:ca:07:24:78:f8:01:b1:b1:
                    d4:41:c2:89:fd:25:1a:73:78:ce:b9:a7:16:fa:25:
                    b1:37:80:92:e4:5b:b1:c2:4f:a4:74:81:ab:a8:cd:
                    13:2a:5a:a2:f1:7f:8a:5a:c3:03:27:9e:7b:e5:ee:
                    e0:b0:b2:de:30:9c:f6:c9:6d:9d:7d:15:6d:83:9e:
                    53:60:69:e4:0b:90:bb:05:14:71:4c:e0:7c:64:de:
                    db:18:bc:5b:e2:f0:00:91:27:07:c3:42:94:82:bb:
                    d9:a8:10:40:a9:02:3f:6e:09:28:72:e4:44:df:03:
                    26:b7:72:25:02:36:c7:ca:57:a5:01:72:70:24:ba:
                    0d:f5:d1:51:e9:18:88:dd:36:e9:65:93:80:9c:d1:
                    74:70:cb:c4:01:cd:f2:f4:bc:e4:d7:b0:04:20:73:
                    a2:1e:51:d6:5b:a9:12:d1:c4:13:69:77:5d:91:4e:
                    a9:86:9b:bb:be:40:73:b5:08:f3:8f:f4:9e:32:4d:
                    30:9c:d9:86:4c:3c:a9:e4:65:32:74:9b:63:88:8e:
                    2f:b1:4e:ad:a2:60:94:40:11:05:79:9d:52:fd:c2:
                    c7:70:1d:8e:09:70:e2:5d:24:ba:2d:42:a7:68:03:
                    85:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:69:3F:3C:59:87:58:A5:D2:FB:50:9C:BB:58:3C:95:BC:E2:E3:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c0acb3b2-f327-3991-8b82-72e775b3982c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:e5:40:4b:dd:a1:06:7a:93:95:c7:57:61:9b:1e:fd:80:96:
         8b:e2:ea:09:ff:e1:00:25:a9:55:6d:a1:a1:71:21:34:ae:88:
         c2:67:38:27:2d:2e:fe:a9:fc:35:93:10:d0:d6:7e:24:3c:5b:
         c2:94:e7:0b:86:b2:cd:f4:76:9f:96:e1:de:35:34:43:a5:35:
         ce:a9:4e:46:3a:9e:43:ba:e1:a2:e1:aa:78:58:2d:b5:4f:0f:
         02:d4:39:a9:df:d2:17:dc:51:1f:a9:7a:22:d9:65:45:eb:48:
         e1:b3:f8:ea:9c:0f:48:e6:b8:ba:7a:68:c1:cf:6d:40:38:76:
         19:47:08:29:83:b1:65:bd:bf:9a:f6:c1:f1:25:1c:31:7d:a2:
         4b:9f:a8:1b:d8:ed:ca:ea:d3:90:7e:70:ec:2e:a3:b3:38:60:
         8c:34:8a:0f:9b:9d:1f:d7:a6:68:8f:48:ba:43:b6:26:bd:08:
         4f:db:b0:bf:72:2e:9b:f4:82:f2:15:57:57:46:f3:b8:71:d9:
         0a:76:2c:78:db:00:94:34:73:70:d0:3c:c5:5f:e8:71:a3:7b:
         72:e5:37:06:d8:fa:14:34:ab:da:63:0d:5b:05:a2:1c:3d:52:
         aa:ad:13:7c:13:8e:57:a8:44:40:2b:b3:0f:eb:ef:f5:03:bb:
         6e:a4:38:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 13:00:00 2025 by rpki-client