Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/04829ef5-0674-3912-8916-bde1753f46f8.roa
File:                     04829ef5-0674-3912-8916-bde1753f46f8.roa (raw, json)
Hash identifier:          23a4yDC/jYkrqgW9oMs3+ggmu4rhliHJH89tp3411lQ=
Subject key identifier:   85:51:65:57:EC:A2:93:7F:6E:3E:5D:FC:C3:4B:5A:B8:0F:26:5F:51
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A5E605A44083912A2E2919D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/04829ef5-0674-3912-8916-bde1753f46f8.roa
Signing time:             Tue 01 Jul 2025 01:00:50 +0000
ROA not before:           Tue 01 Jul 2025 01:00:50 +0000
ROA not after:            Mon 29 Sep 2025 01:00:50 +0000
asID:                     401152
IP address blocks:        108.165.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5e:60:5a:44:08:39:12:a2:e2:91:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  1 01:00:50 2025 GMT
            Not After : Sep 29 01:00:50 2025 GMT
        Subject: CN=fe505974-deee-4680-bb11-1ca5eb65538c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:83:11:21:3b:06:3a:b4:0c:ee:10:bb:98:72:
                    82:84:3a:f5:8e:e3:fe:d6:c1:ca:bc:be:fc:06:17:
                    48:0b:29:fd:40:9b:e5:5d:34:1f:1e:85:ea:d1:93:
                    3d:5d:d9:16:8c:62:24:4f:ef:a1:b8:7b:0a:e1:19:
                    60:8d:79:fb:39:5b:5d:07:cf:25:dd:76:be:a2:c4:
                    8f:fa:82:5e:36:fb:c5:95:0d:80:4c:67:aa:e8:53:
                    af:53:3f:f4:3f:53:0f:10:b7:8c:aa:66:7a:5a:e7:
                    cf:e7:3c:32:fb:8c:d0:f2:09:af:a5:5f:4c:d9:40:
                    91:d4:21:e1:7e:a3:30:3f:8b:bd:96:6a:54:cd:ab:
                    e1:50:bf:c2:ae:c6:60:47:c6:d4:fe:bb:a2:33:58:
                    c3:63:17:f0:f9:09:8f:1a:63:32:0a:f4:88:9a:aa:
                    d3:47:8b:6d:56:42:ee:aa:d8:65:68:ff:36:ef:d2:
                    ab:ca:ba:d3:ba:5b:32:6a:cd:da:33:47:c5:5d:b3:
                    4d:94:ac:05:73:07:67:da:c4:91:fe:40:3c:0a:19:
                    9e:58:b7:ab:73:bc:34:6d:f6:ba:7c:b4:ec:64:dc:
                    f8:fe:8c:be:15:50:66:e2:5b:7c:02:e6:11:14:92:
                    de:46:15:c3:43:44:4c:5e:47:a2:28:fc:c0:a5:33:
                    bb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:51:65:57:EC:A2:93:7F:6E:3E:5D:FC:C3:4B:5A:B8:0F:26:5F:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/04829ef5-0674-3912-8916-bde1753f46f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ab:2b:a2:dc:c2:ef:05:64:b4:93:0d:2d:4e:2b:8a:76:94:
         bd:03:f8:74:04:24:34:81:da:96:57:7c:d3:f9:8c:b4:d9:f0:
         39:47:0c:92:37:43:ac:7b:bb:de:96:ba:95:cc:d8:05:99:aa:
         ef:b5:09:25:41:d5:13:23:a3:50:cf:54:d3:7c:59:37:64:1f:
         02:bf:d7:e2:91:76:29:d3:0c:da:1b:86:15:5c:bc:3b:19:a9:
         ed:83:9d:e9:23:2e:2f:c8:e1:8b:b5:05:44:c5:a3:36:dc:7d:
         7f:68:ca:f3:11:5f:f0:35:2c:b5:96:0e:bc:b7:72:36:fe:0d:
         57:26:4e:4f:8b:7c:48:79:d6:4b:28:fd:86:99:82:2f:fd:6e:
         c7:9b:49:c2:d6:c9:6c:1c:f8:40:7b:85:da:58:24:1f:7d:d6:
         37:b8:3c:6e:96:19:8a:70:4d:d8:4c:23:06:71:7a:b8:da:b2:
         fa:1d:ac:0d:f9:a1:09:cb:45:84:a5:e6:58:41:09:52:c1:39:
         90:12:4c:0b:ce:2a:9c:49:84:b7:81:7d:e6:8c:23:0e:ef:e7:
         33:43:3b:9d:20:73:d4:81:92:06:70:a6:ae:ea:06:7b:6f:8c:
         85:71:6f:0f:a5:f9:5a:2e:09:96:69:dd:4f:48:0c:ea:27:53:
         37:6d:b1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:31:03 2025 by rpki-client