Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec6cd21f-76ed-3b65-97de-c008f42e4cc0.roa
File:                     ec6cd21f-76ed-3b65-97de-c008f42e4cc0.roa (raw, json)
Hash identifier:          RB1LfQPzZ2uiSj2xBExrPfHRBUcKIM+8Q+FXsvGdqpg=
Subject key identifier:   EE:56:36:5B:5B:56:C1:11:F3:D4:9A:EF:17:9A:20:2A:59:41:1F:3B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848F5875F471495BC0994AAC040
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec6cd21f-76ed-3b65-97de-c008f42e4cc0.roa
Signing time:             Fri 21 Feb 2025 18:52:41 +0000
ROA not before:           Fri 21 Feb 2025 18:52:41 +0000
ROA not after:            Thu 22 May 2025 17:52:41 +0000
asID:                     401152
IP address blocks:        108.165.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f5:87:5f:47:14:95:bc:09:94:aa:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 21 18:52:41 2025 GMT
            Not After : May 22 17:52:41 2025 GMT
        Subject: CN=aae4e8a0-f7a4-40bb-a4b6-5faf17130b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:be:43:72:21:34:cc:d1:63:b6:a1:e8:b4:19:
                    87:1a:32:92:cc:cb:33:c2:cc:83:0d:d2:9a:de:c3:
                    f4:ae:0c:fc:36:33:b7:20:c0:a6:30:c8:b6:ba:81:
                    c4:e9:03:64:42:c5:df:6f:52:37:7e:ef:88:c2:b1:
                    09:68:a9:f0:c2:32:13:89:f1:a9:dd:de:8e:fd:44:
                    1f:c9:97:84:f5:fb:ac:0a:ad:31:a5:97:21:1f:6c:
                    5d:0b:e5:da:e7:fb:bf:b3:83:47:79:3a:78:99:f4:
                    1d:a5:c4:32:c0:b3:e4:6e:0c:47:cd:d2:90:63:84:
                    99:e6:af:bf:66:84:dc:b2:e8:a5:9b:ab:3a:16:35:
                    38:11:a1:bb:c2:0f:ba:37:5d:49:ec:4a:c7:92:f4:
                    9c:29:34:43:85:fd:93:72:9d:76:42:22:de:43:4d:
                    fc:37:ae:cc:06:cf:dc:66:02:9a:4a:a5:e6:65:fb:
                    90:11:d8:5b:a7:bb:b5:3f:75:25:ff:9b:5b:92:a4:
                    76:33:b5:93:9d:fc:0b:fc:71:ae:3f:0a:dd:33:7b:
                    13:b8:89:f2:e7:b3:6c:ba:2b:7c:20:e3:df:22:a7:
                    ee:17:bc:57:da:c0:20:76:da:f2:51:38:32:41:36:
                    72:21:ea:bf:18:24:5b:cb:17:3e:3e:86:83:16:e6:
                    56:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:56:36:5B:5B:56:C1:11:F3:D4:9A:EF:17:9A:20:2A:59:41:1F:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec6cd21f-76ed-3b65-97de-c008f42e4cc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:d5:d3:72:c3:90:30:1b:1e:c5:85:27:a0:6a:70:b1:41:f0:
         a4:17:ce:c1:ae:d0:d5:70:5f:e0:5f:e7:53:e9:4d:a5:f5:6d:
         c0:05:ec:a3:ed:92:ad:a6:22:4c:d9:c6:e5:9e:ba:17:76:52:
         d7:40:f3:6c:89:d6:5d:11:a9:13:b0:a4:10:09:bd:03:c5:c4:
         eb:7d:c2:3d:9e:4b:d3:1d:3d:30:2e:88:23:e9:2a:73:16:8b:
         d6:c3:a4:61:45:c3:3c:cf:7c:01:05:60:1f:8d:13:a7:ea:12:
         b1:fd:e3:1e:70:9f:22:10:66:ff:a9:f5:de:4b:a0:e2:6a:00:
         e1:a2:df:a2:b4:8b:c0:1d:c0:db:90:a3:88:39:69:d5:31:9e:
         d4:91:97:c2:04:78:9b:a8:84:20:43:33:e7:99:84:d7:ce:44:
         d3:da:85:c8:ff:ac:b8:61:48:cb:5a:6c:87:18:58:33:77:13:
         da:45:21:99:0e:e2:cc:2f:08:fd:22:d3:98:96:1a:00:4f:4d:
         b3:d3:a9:74:63:a3:c6:bf:b4:4e:d2:43:d1:e4:bc:37:e2:18:
         fa:0b:d5:a9:74:f8:02:c3:23:8d:d5:f5:0f:b4:bd:23:c6:04:
         0e:ab:ba:b6:98:01:7e:d7:fc:0d:5d:25:ec:95:2c:77:be:ba:
         31:26:59:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:10 2025 by rpki-client