Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/02e35ef4-74e4-3a9a-924e-809e55fb2e96.roa
File:                     02e35ef4-74e4-3a9a-924e-809e55fb2e96.roa (raw, json)
Hash identifier:          aeTQ16VmVikRTXK49u6OHg/74WEydr6PR66nE0eQwt0=
Subject key identifier:   97:E0:F8:CC:38:74:EA:2E:EF:6C:0F:E2:61:25:B4:8A:F5:B3:BE:6C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B76F228E2C279D9A6B030B090
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/02e35ef4-74e4-3a9a-924e-809e55fb2e96.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     14935
IP address blocks:        108.165.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:28:e2:c2:79:d9:a6:b0:30:b0:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=10bc8667-e080-4e12-af7f-c7b62180f14b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f2:3b:4b:3e:f7:39:41:01:71:05:c9:a8:e0:
                    bb:2d:18:c5:ea:c6:f2:0e:16:b5:fe:04:23:01:02:
                    79:9d:22:76:26:00:87:c2:34:ca:94:05:87:1d:ea:
                    e1:25:d3:be:8c:d3:96:6a:8d:97:aa:1e:40:59:eb:
                    64:3a:9f:a9:86:89:46:d7:a7:72:0a:75:bb:1b:cb:
                    2a:68:cb:10:0e:cc:b0:4b:eb:a0:68:74:f3:e2:61:
                    fc:46:b5:bf:cb:bb:a8:8e:00:da:d7:d0:46:06:d5:
                    27:c4:4e:34:80:9b:53:b8:b0:2c:23:b9:41:12:4d:
                    85:10:32:4d:c6:d8:42:38:e6:cc:e6:62:fd:1c:94:
                    f6:50:5f:5d:42:9c:d8:ac:b6:fd:37:a6:b6:b6:80:
                    ff:97:b4:57:1f:bb:43:47:63:5c:b1:2b:60:89:ef:
                    34:5d:b3:67:06:19:67:ce:2a:7b:5d:c7:31:ef:85:
                    de:b1:fa:66:2f:a2:6f:0c:24:ba:93:b0:5f:13:17:
                    12:4f:b8:c2:21:0f:76:8e:53:b8:ff:46:c6:8b:ad:
                    01:9f:12:2e:1d:cc:a3:29:de:bf:5f:f9:d0:37:ab:
                    18:24:84:a2:bc:22:7d:27:17:9c:65:c6:e4:46:38:
                    85:03:42:19:11:a1:c3:7d:5a:e4:d8:90:75:47:14:
                    e5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E0:F8:CC:38:74:EA:2E:EF:6C:0F:E2:61:25:B4:8A:F5:B3:BE:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/02e35ef4-74e4-3a9a-924e-809e55fb2e96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:75:22:d6:3b:55:18:1a:71:54:5e:b5:36:25:f1:6b:6d:ad:
         fc:18:8c:f0:8a:37:2f:cb:8b:f0:60:c8:76:79:b6:82:00:7f:
         10:71:67:74:66:10:7f:3a:ce:db:c2:d9:2d:7b:91:6d:38:40:
         e6:1d:fd:59:5c:3d:a9:23:ec:fb:57:51:c9:62:3e:4b:7c:82:
         0e:f3:e7:62:94:80:1e:de:cb:c2:7a:57:1f:f6:e8:85:72:64:
         da:63:23:9f:8b:10:5c:f2:bd:78:50:06:e5:10:1b:16:bb:7a:
         e0:cd:32:64:32:8a:06:cf:68:36:c0:a7:ff:b4:9b:8d:40:88:
         c4:65:30:4d:23:fb:1f:4b:03:9e:98:0f:fa:59:d4:53:cb:78:
         9c:32:bb:49:57:85:87:20:ed:4d:f7:e2:a1:0e:05:dc:42:60:
         cc:d6:0f:62:6d:fd:0a:36:ca:0d:28:37:8f:cc:92:9a:71:d9:
         24:be:a7:06:80:1e:34:ad:6f:1e:e6:5d:16:91:28:0f:45:54:
         4a:56:68:97:c4:d2:e8:df:38:91:57:56:5d:c7:1b:f0:08:60:
         31:e5:d3:4b:3a:68:43:d3:1e:d2:0d:a0:4e:48:de:94:70:aa:
         c6:62:22:ee:15:9f:15:8d:f4:51:bc:c3:d7:7b:1f:9f:8f:34:
         1a:04:22:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:08 2025 by rpki-client