Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/02e35ef4-74e4-3a9a-924e-809e55fb2e96.roa
File:                     02e35ef4-74e4-3a9a-924e-809e55fb2e96.roa (raw, json)
Hash identifier:          kEPaH3onkUHLSCsS1jkQbE+zVAFPNvgVedxrYEtYeOA=
Subject key identifier:   83:BB:45:29:C0:82:80:8B:D1:61:54:5E:04:ED:38:5B:19:A0:9E:E5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849B6DF4CF9D11200C950B90F00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/02e35ef4-74e4-3a9a-924e-809e55fb2e96.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     14935
IP address blocks:        108.165.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:4c:f9:d1:12:00:c9:50:b9:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=16089cfa-28e9-4f12-888a-5e9d481923f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:33:35:61:6f:28:50:ca:3d:6e:60:a6:d5:f3:
                    ac:49:17:db:ef:79:bb:b0:8b:d4:e0:fc:ae:4a:27:
                    29:99:8c:d0:98:ba:04:20:8c:5e:42:c7:29:36:3b:
                    3a:fc:3f:de:d1:48:ac:99:4c:84:90:d6:1e:4f:00:
                    e9:cd:c4:1c:7a:da:60:d1:90:3d:96:8b:72:38:52:
                    39:67:d8:50:5e:f3:4e:52:54:45:5e:bb:3e:bc:0a:
                    bb:fa:2d:b3:27:32:66:b3:b7:83:8b:12:13:f6:ad:
                    6b:c7:8a:50:f7:90:ab:3f:a7:d9:68:61:84:36:06:
                    17:3e:5f:14:41:87:13:04:78:59:79:51:15:51:4f:
                    70:47:8a:74:a4:43:6c:a1:0a:0f:12:a6:bc:44:51:
                    55:e6:77:35:1d:e4:4d:5a:10:89:5c:04:3b:a0:65:
                    54:fd:db:51:60:37:5b:5a:5b:11:cb:26:be:0f:f1:
                    ff:62:19:a7:5b:c3:2d:c4:02:54:b2:34:97:5d:b3:
                    cc:99:71:69:b9:5a:6c:86:5c:32:d0:2d:c6:28:bf:
                    fd:33:2c:2b:cf:8e:22:e3:d5:7c:c0:79:66:9f:28:
                    3a:5f:b2:db:65:17:aa:76:51:d5:86:93:97:c7:27:
                    65:af:e0:3f:02:89:1e:1b:b9:b6:14:6a:e8:c2:3e:
                    db:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BB:45:29:C0:82:80:8B:D1:61:54:5E:04:ED:38:5B:19:A0:9E:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/02e35ef4-74e4-3a9a-924e-809e55fb2e96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:f4:80:13:74:4f:20:e2:7e:98:93:1c:aa:4e:bb:84:e7:a9:
         d2:43:87:61:86:a3:f2:87:db:dd:50:03:a8:29:91:4e:de:d7:
         ba:4a:4b:8d:00:a2:30:4d:df:66:16:76:5d:f6:bf:ec:33:50:
         0f:96:c6:c2:39:30:63:17:74:54:0f:60:ee:68:84:d9:e6:e4:
         24:2c:af:e3:a2:75:f2:da:a4:30:c0:8c:4a:79:02:a7:51:06:
         66:90:b7:98:fa:f4:10:94:3d:71:87:22:cb:91:d4:3e:9b:ad:
         95:3e:b4:30:69:e8:79:87:74:f0:a6:62:12:7a:dc:5b:01:57:
         59:5e:81:74:fc:2b:51:a4:25:5b:4b:64:5a:41:a9:ce:7b:15:
         5c:96:92:f4:32:b7:d1:af:3f:e2:88:16:c0:9f:e5:30:41:7d:
         60:8c:5e:80:9b:7f:04:7f:43:7d:6f:62:ea:6d:22:4f:e4:1e:
         a3:dd:3a:96:a9:cc:b2:aa:02:f9:f6:11:07:32:e3:92:28:93:
         53:39:d3:d7:da:0c:13:17:2c:88:a5:66:cc:1f:f9:60:0d:84:
         19:fc:16:09:1b:45:1f:ba:a7:02:ae:78:3d:a9:f7:83:04:f8:
         76:1c:16:1a:cf:b5:29:26:b9:26:23:bd:a4:71:9f:01:b3:f0:
         55:cb:9e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:15:32 2025 by rpki-client