Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebe016bf-b2da-3a8b-9dc6-17839c98cf06.roa
File:                     ebe016bf-b2da-3a8b-9dc6-17839c98cf06.roa (raw, json)
Hash identifier:          d4ytxStUsbprzqGn7/p952XbN4jB806bQK7+Rp35/NI=
Subject key identifier:   8B:DF:D3:67:0A:C5:94:59:3A:E9:C0:B0:E0:08:E0:86:F5:2C:FA:4B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B10446C11B478BB35078962A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebe016bf-b2da-3a8b-9dc6-17839c98cf06.roa
Signing time:             Tue 02 Sep 2025 18:18:30 +0000
ROA not before:           Tue 02 Sep 2025 18:18:30 +0000
ROA not after:            Mon 01 Dec 2025 19:18:30 +0000
asID:                     401152
IP address blocks:        108.165.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:10:44:6c:11:b4:78:bb:35:07:89:62:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  2 18:18:30 2025 GMT
            Not After : Dec  1 19:18:30 2025 GMT
        Subject: CN=b0ae6482-95aa-4cc2-9310-bbc0f2739ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a7:7a:f2:61:2b:2b:0d:a4:09:8d:1c:6e:81:
                    70:ec:20:95:10:46:8a:a4:dd:e2:13:e4:c5:a1:f5:
                    cf:16:2a:04:d0:a7:b9:53:44:cc:7f:e4:9b:f9:a1:
                    db:d8:ee:0e:a6:89:82:ee:49:fd:fb:37:b2:a4:b6:
                    77:70:d9:41:03:47:38:f6:67:6a:e8:16:48:68:fd:
                    5a:5c:1a:7e:ec:25:ba:3e:03:d8:3c:db:cf:61:d3:
                    62:e8:d1:e9:dc:56:82:10:d5:77:42:b2:76:36:1b:
                    1a:04:16:8b:48:db:5b:5d:2b:78:4f:c2:d5:04:2d:
                    46:d3:43:42:30:4a:61:20:52:a6:7f:e9:be:cf:50:
                    98:ae:ad:49:63:09:b6:92:0d:64:c7:c0:e9:29:d0:
                    40:b2:1d:88:73:78:fb:3b:d8:59:5d:5f:78:c6:40:
                    8e:59:88:61:a5:5e:8e:ed:c1:16:9e:54:2c:55:e1:
                    4a:fc:89:e4:6f:ee:00:54:94:5c:d9:f5:2f:d8:aa:
                    06:14:78:92:35:c9:64:72:91:ed:24:a4:1c:ee:76:
                    b8:27:42:4e:6c:46:ba:5c:4f:31:e0:60:2f:cd:c6:
                    17:45:58:ae:46:d2:9f:4e:f9:fa:35:c7:07:80:db:
                    da:e8:12:7d:f7:07:d3:f5:75:c5:70:55:8b:c0:37:
                    11:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DF:D3:67:0A:C5:94:59:3A:E9:C0:B0:E0:08:E0:86:F5:2C:FA:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebe016bf-b2da-3a8b-9dc6-17839c98cf06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:78:d8:ea:06:5e:db:7d:cf:ce:2f:7d:54:23:06:e6:28:91:
         60:b7:96:3e:cd:69:c2:07:35:fd:79:f3:f8:50:54:f5:ed:d7:
         41:d5:9a:93:1a:ea:6c:cb:5f:d0:85:53:09:f9:52:dd:d7:1a:
         96:03:6e:87:63:42:f6:35:d3:10:fe:46:22:0b:4a:c6:96:26:
         c9:82:a0:db:fb:3b:c0:51:08:75:00:fd:62:5a:64:af:00:c0:
         cf:e7:38:18:20:9b:21:94:eb:e0:69:fd:b7:8e:0a:36:3d:cf:
         a5:0c:ad:b5:b6:ff:f8:f8:7d:e6:15:6f:f1:fa:35:16:1b:4d:
         66:2f:18:dc:4b:11:31:97:8a:94:82:1f:6d:6a:20:90:25:52:
         05:74:d1:8c:e5:5e:a7:49:92:ee:f1:03:88:84:57:7b:38:f9:
         ca:92:24:46:a3:bb:44:33:2f:11:2e:c6:6b:16:48:7d:14:ca:
         8a:69:27:b4:21:d3:ac:98:5d:45:4e:b7:b7:47:bd:f6:41:c6:
         aa:02:3c:79:40:df:04:4c:3b:2a:99:56:38:c4:eb:0a:04:1a:
         fb:41:83:7c:24:a7:cf:69:d6:18:d4:21:fb:60:e5:f4:ca:22:
         f6:76:3e:de:61:29:a3:9e:ed:41:5a:a3:83:3e:0c:f6:0a:86:
         1a:1a:f3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 10:47:11 2025 by rpki-client