Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e4e157f4-674c-3dda-bdeb-ae81bd59721b.roa
File:                     e4e157f4-674c-3dda-bdeb-ae81bd59721b.roa (raw, json)
Hash identifier:          VYpf/wCEzfaZY45njQqgSM3erELkwRNjNlYiobh6tko=
Subject key identifier:   D2:A6:46:1A:FF:A2:17:DB:97:49:56:74:FC:2A:0E:60:2C:EA:E3:F1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849F3745D8B6851EA41D52704D0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e4e157f4-674c-3dda-bdeb-ae81bd59721b.roa
Signing time:             Fri 23 May 2025 17:49:43 +0000
ROA not before:           Fri 23 May 2025 17:49:43 +0000
ROA not after:            Thu 21 Aug 2025 17:49:43 +0000
asID:                     49770
IP address blocks:        108.165.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f3:74:5d:8b:68:51:ea:41:d5:27:04:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 23 17:49:43 2025 GMT
            Not After : Aug 21 17:49:43 2025 GMT
        Subject: CN=e08fe8a2-86ec-48ca-b6bf-2e27cd7b7f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:be:42:30:dc:8a:f0:29:73:07:66:e8:74:72:
                    80:ed:72:2a:7d:42:73:90:e7:7a:1e:41:4d:65:1f:
                    8e:c7:f8:49:8b:b2:50:78:ed:14:9e:e8:ba:58:df:
                    aa:12:4e:79:0c:28:9c:f8:04:30:e7:16:d9:29:63:
                    c9:22:cf:db:47:0c:ac:9d:ab:c0:b5:b0:9e:b3:5f:
                    05:49:5d:82:70:08:6c:f5:49:54:19:ed:84:b8:81:
                    c7:d9:53:bf:55:bc:4a:d1:eb:8c:16:1b:8b:b8:37:
                    40:57:6a:18:54:cf:39:38:11:4a:07:fc:ab:f8:50:
                    c5:b0:e9:a2:47:a8:aa:f1:aa:a5:a1:41:2f:1a:59:
                    f3:14:13:08:b9:3d:af:08:7c:b8:3f:f6:c0:73:db:
                    fd:e8:89:4a:9f:8b:e6:eb:68:a1:8f:38:ca:52:11:
                    29:97:b7:65:48:39:74:b1:b4:d8:17:e3:e4:a8:ce:
                    fe:59:7a:10:2b:47:d2:87:b8:54:33:ee:1a:ab:97:
                    50:e7:7f:b9:53:97:cb:69:3a:9a:29:bb:c5:52:09:
                    d6:13:fa:09:3e:9d:98:16:30:42:b5:3a:a7:40:65:
                    3e:df:05:95:5e:c8:4c:27:70:c8:dd:ef:f6:b3:bb:
                    7b:ac:37:26:7b:a4:15:81:69:10:d0:25:85:e5:40:
                    68:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A6:46:1A:FF:A2:17:DB:97:49:56:74:FC:2A:0E:60:2C:EA:E3:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e4e157f4-674c-3dda-bdeb-ae81bd59721b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:1a:fd:87:ea:67:cc:bd:ab:76:95:8b:75:12:74:a8:6a:15:
         b8:bb:f5:95:48:81:ec:62:74:fa:ed:6f:e4:03:c3:71:49:2b:
         c4:2e:29:ec:0d:6b:fd:34:0d:da:f6:c5:f1:14:75:e7:da:37:
         20:3d:dc:ad:fa:11:24:41:fa:15:c2:62:6f:55:43:b6:1d:db:
         e4:ad:57:47:e5:72:8a:e3:60:68:38:f6:ae:7e:d7:da:9e:c0:
         c4:2f:ae:b5:66:4f:b1:bc:03:19:8b:d0:85:c6:9a:db:63:6a:
         c0:30:d2:10:24:8b:23:bf:45:43:66:8c:73:bf:95:23:67:15:
         4b:3e:eb:1b:2d:b1:72:ce:21:a2:86:7a:c4:76:70:12:1a:8c:
         8e:a7:5a:ce:a8:02:ae:d0:f2:87:7b:ec:f7:fa:7c:42:a4:a8:
         79:08:5c:e2:b2:57:fe:d8:6c:ca:e1:65:81:be:bf:2c:fb:aa:
         5d:61:21:6e:03:18:17:6c:26:f6:f3:2b:9e:27:d4:d9:06:b5:
         36:55:9c:cd:75:87:18:da:2b:b3:ec:bb:7b:3f:33:d2:7f:b7:
         26:13:51:b6:08:73:5a:aa:b3:af:30:a3:65:f4:12:c5:96:1e:
         21:f2:89:a1:86:19:73:98:e5:26:c0:b2:86:0d:b1:f5:54:39:
         a5:fb:61:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:07 2025 by rpki-client