Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0d6dea67-8e7a-30f1-9fda-e86e9a762509.roa
File:                     0d6dea67-8e7a-30f1-9fda-e86e9a762509.roa (raw, json)
Hash identifier:          N4QBLgm/msEKhU6vrzy/0HZAEttdGqJjpyNYloF0ZUI=
Subject key identifier:   CA:FE:18:83:1F:37:32:54:E2:F0:1F:96:84:67:69:10:9F:89:36:61
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849B6DF487478360D5A3E26E980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0d6dea67-8e7a-30f1-9fda-e86e9a762509.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     401152
IP address blocks:        108.165.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:48:74:78:36:0d:5a:3e:26:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=a9516341-9a58-43ae-a739-358e77339f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:37:2c:96:82:45:7a:eb:72:ba:fe:79:7c:04:
                    ce:3c:86:89:7a:3a:8d:78:f2:f1:9c:ac:e5:eb:37:
                    16:5f:df:d7:32:0b:0b:c5:da:71:ab:5c:78:18:36:
                    b0:eb:45:e4:f0:6d:e8:2f:53:bd:a2:5d:3f:9f:4c:
                    8c:ed:b3:cc:62:60:13:21:ce:86:ed:4f:86:7c:0f:
                    f9:4e:50:87:2f:75:a0:c5:27:d4:af:8d:8c:8e:60:
                    b4:fb:ff:11:28:9f:b7:18:04:d5:d4:59:c7:d1:30:
                    5d:11:c1:a0:1f:f9:73:13:4a:e2:25:d7:13:86:81:
                    b6:cd:e7:3f:b8:a1:3b:6f:c9:2a:77:f1:7d:56:24:
                    19:47:10:e1:39:e2:c2:59:57:23:a8:3f:70:1b:03:
                    ed:22:90:cf:37:ed:5c:4d:fa:6c:3a:08:46:16:6c:
                    35:9c:34:ba:ad:ab:1e:51:13:fc:66:53:99:0b:83:
                    5d:83:e6:10:f6:a3:d6:57:00:cf:51:d8:5b:35:79:
                    35:4a:11:df:59:08:12:83:c6:55:b8:f5:f6:14:ee:
                    2c:d7:c7:86:f3:b4:e6:fb:e3:16:60:68:c1:d4:9b:
                    75:e8:65:e9:d8:a3:9c:47:99:04:78:43:28:7b:0d:
                    b6:cc:e0:b1:6a:59:45:52:18:9b:df:20:83:98:65:
                    78:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FE:18:83:1F:37:32:54:E2:F0:1F:96:84:67:69:10:9F:89:36:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0d6dea67-8e7a-30f1-9fda-e86e9a762509.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:4b:e1:47:18:15:7e:08:51:db:6d:c1:ad:f0:5c:64:66:6c:
         97:e3:3c:f8:28:70:e8:e0:df:70:f2:c1:e7:19:fe:6c:87:a4:
         ce:cf:55:cd:58:13:83:34:71:4a:6b:fb:dd:ac:07:78:0e:19:
         bc:bc:7d:d0:e8:92:bc:8c:d5:f5:95:4e:7e:f0:3e:99:50:85:
         37:36:6c:3d:fe:0c:da:b0:55:4f:9d:5b:91:28:8d:07:d8:7b:
         c4:18:9e:8e:97:a5:fa:a4:47:d6:a1:e5:5c:b5:dd:db:cd:c8:
         c1:76:a3:f1:a9:23:3f:a4:b1:9d:90:ab:f7:61:c7:80:e1:76:
         33:ed:65:b9:47:6d:4a:e8:27:22:1e:21:5b:1f:e1:98:de:95:
         28:7c:ae:f7:c8:f6:98:72:b6:fb:2d:c1:0f:29:9a:d0:72:f1:
         0f:b9:ff:23:a6:42:db:b1:64:e1:b5:8d:6c:75:da:ac:63:81:
         a2:11:fa:b1:be:bf:e9:67:a5:22:ad:90:e4:42:08:46:f4:07:
         b9:3e:a6:25:64:0d:91:98:16:f9:df:0e:6a:bb:e6:7b:ac:05:
         f1:20:20:3b:45:40:c9:9e:82:94:97:9e:d1:5b:7c:7b:f4:bb:
         3e:a2:89:fc:9a:b0:4c:e3:d3:77:d7:54:30:75:40:2e:0d:16:
         48:1f:a3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:01:12 2025 by rpki-client