Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e6cb44eb-5d22-3cb3-af06-2292ff36d409.roa
File:                     e6cb44eb-5d22-3cb3-af06-2292ff36d409.roa (raw, json)
Hash identifier:          xtcrsd9op6v1TSFO6seUMOplx8fXiQCGDPxDHzm9qxQ=
Subject key identifier:   1C:BD:99:DF:B4:E3:8F:D5:FE:87:3D:65:EA:08:5C:9D:C7:25:89:AE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B2496C6655C865FF7F5567FD0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e6cb44eb-5d22-3cb3-af06-2292ff36d409.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     20473
IP address blocks:        108.165.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:c6:65:5c:86:5f:f7:f5:56:7f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=6d757d52-b020-4895-ab62-c0803bcf5787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f2:1a:cd:77:d8:96:c2:c1:c7:2c:48:fb:ca:
                    91:da:af:1f:a8:aa:5c:35:c7:4e:cf:34:cf:24:62:
                    08:99:5a:d7:73:c8:da:3d:ac:42:de:0b:6e:c7:a2:
                    e6:e0:02:52:22:df:6f:f6:e7:e1:47:9e:9d:78:10:
                    44:6c:1a:d9:c7:70:fe:f0:08:bc:f0:f8:fb:b6:3f:
                    64:e9:d9:4b:6b:58:19:b6:73:fd:60:2d:8f:fd:db:
                    eb:ba:a3:8b:e5:64:f1:4b:46:97:77:1b:9f:3d:62:
                    b6:15:a0:37:1d:25:93:de:d6:aa:cd:e6:b4:16:1e:
                    98:b5:e6:3c:45:86:c8:18:dc:28:93:1b:45:c0:73:
                    8c:dd:33:21:4d:e2:fa:e8:41:c2:65:8f:c7:f4:68:
                    bc:42:ef:02:fc:90:02:e7:3b:d3:11:04:f7:92:7e:
                    69:7a:e5:c7:61:8a:a6:30:6d:b1:0d:a4:f1:83:c1:
                    a7:b5:62:b0:e9:8b:d7:5a:92:13:e8:56:47:75:f8:
                    7a:9b:c6:5e:d2:82:fa:c2:45:66:cf:86:59:1f:53:
                    7c:5d:5d:56:88:15:85:3c:a4:58:f8:a1:3e:f4:5d:
                    ec:0e:dd:45:e5:81:40:a7:8d:89:39:0b:0e:7b:41:
                    f7:41:53:29:d5:64:93:59:9f:25:1b:d7:50:d3:ae:
                    ee:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BD:99:DF:B4:E3:8F:D5:FE:87:3D:65:EA:08:5C:9D:C7:25:89:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e6cb44eb-5d22-3cb3-af06-2292ff36d409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:6e:e9:db:1d:71:97:3e:39:23:dc:bc:79:15:81:c6:11:27:
         b5:c7:48:3b:23:9f:d6:7f:e5:e7:30:0d:1c:62:51:ff:fc:bc:
         83:32:2b:56:3f:01:3d:b4:22:82:fc:43:79:a5:d0:35:11:a9:
         29:aa:61:f2:6c:ae:29:d6:11:e0:49:31:a5:5c:ef:19:40:6a:
         b0:5d:d4:62:42:e3:7d:92:be:f3:b7:3f:aa:8e:07:4b:5a:1c:
         3d:06:eb:77:0d:d1:72:7f:3c:51:00:b9:06:2c:3d:ea:13:20:
         0f:44:da:65:15:c8:c0:6b:7a:d1:df:dc:0b:9e:a2:c4:a3:84:
         00:a1:f2:64:42:15:ac:53:59:10:d1:ea:eb:3e:8b:5f:f0:cc:
         b2:75:f6:cb:75:d2:eb:b5:b2:20:92:26:f5:b8:55:31:1d:bf:
         28:81:c0:01:a1:6d:66:29:48:b3:57:21:85:e8:b9:ca:2d:d5:
         a9:29:59:ab:04:48:f5:c2:64:d6:5f:66:fb:43:85:fc:8b:41:
         28:96:56:82:07:06:96:c6:21:fc:f1:3e:ef:ae:ae:13:a8:ee:
         63:e2:5c:a2:d3:20:76:ee:d3:e4:06:ae:b7:ac:3a:bf:64:d9:
         8d:ec:fe:a9:7d:cc:d0:7c:91:bf:d7:ae:81:38:9d:12:86:c9:
         54:29:ac:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 13 22:15:45 2025 by rpki-client