Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/10d276ab-f751-35f0-a3e9-575d8f2ceb3e.roa
File:                     10d276ab-f751-35f0-a3e9-575d8f2ceb3e.roa (raw, json)
Hash identifier:          aH1zrr7wbjeC6GO6BB5DF7777/QgpJ2zDxqn4VbOqHg=
Subject key identifier:   F8:E7:85:E1:FD:CE:10:1F:A6:B8:31:68:3B:93:7C:D3:84:0B:C3:FD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B4E7710B83E74BEDB4AA6E200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/10d276ab-f751-35f0-a3e9-575d8f2ceb3e.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     211373
IP address blocks:        108.165.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:10:b8:3e:74:be:db:4a:a6:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=af1457d4-0803-4dd4-b0dc-dc4f6927ee97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fc:55:60:d4:57:bd:76:45:7d:cb:8c:b3:8b:
                    44:c6:07:da:28:2f:71:c2:5d:09:2d:fc:68:43:18:
                    4b:b7:ac:3f:3f:4d:7b:5b:4b:c5:84:79:fa:56:f3:
                    4e:28:f8:0c:52:eb:d5:84:62:07:af:d2:ee:b3:b5:
                    2f:f2:e6:35:b8:2e:5f:fe:4a:e1:9b:31:f6:f9:4a:
                    d8:87:86:91:0e:6c:63:d6:a1:fb:f0:9e:9d:7d:2d:
                    04:f7:74:70:18:6a:54:5e:e2:1a:19:9e:14:73:a3:
                    2a:f4:a0:b8:cc:ab:ff:61:4a:53:9b:f6:17:9d:9a:
                    a3:19:f4:ce:d5:ed:fc:2b:10:b2:eb:3a:91:8c:4d:
                    37:75:a5:06:a1:4a:d6:be:12:1f:d3:52:32:8a:6e:
                    5b:fe:9b:24:fd:7c:f7:4d:1a:88:13:8e:f0:b6:79:
                    d5:e3:dc:ee:66:10:fa:c9:10:a6:4f:bf:f6:c1:ba:
                    3c:e2:03:05:c7:e4:79:23:b8:42:43:3d:7f:17:cc:
                    01:29:49:2c:5d:74:53:9d:3d:1f:52:b9:7d:94:eb:
                    a1:99:ae:bd:fb:94:d8:08:ca:b6:53:67:6f:be:8e:
                    8d:7a:1e:88:27:bd:d4:70:ea:a8:ea:1a:4c:95:05:
                    c5:87:75:bd:d4:7c:bd:d7:48:81:02:54:48:54:8c:
                    ae:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E7:85:E1:FD:CE:10:1F:A6:B8:31:68:3B:93:7C:D3:84:0B:C3:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/10d276ab-f751-35f0-a3e9-575d8f2ceb3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:ac:cf:45:ea:45:61:f7:ea:ac:f9:db:9b:4f:d0:af:b9:f5:
         a7:ad:6e:7d:29:13:55:f6:b0:96:5e:d8:c5:35:80:8e:c9:40:
         6f:ac:26:0a:56:e1:f7:9d:89:94:7c:de:26:cf:94:39:00:b2:
         df:24:bd:68:e3:f2:23:77:8a:4a:52:45:c5:23:92:96:f6:39:
         84:7b:61:f8:92:53:b4:86:0a:12:92:21:18:c5:ad:89:5e:8f:
         9c:38:0d:d9:7d:0a:73:b7:02:6d:c0:dc:6d:9d:18:b9:71:73:
         00:04:06:ba:05:da:1f:f3:73:98:c3:a5:02:48:e3:b0:d7:a3:
         28:1b:85:16:84:00:86:a9:d9:97:51:95:58:d4:f8:10:ef:35:
         0e:1d:dc:a3:c7:22:4b:79:66:1c:76:1a:fa:1f:b8:09:6a:db:
         89:94:5a:55:16:24:0b:77:b9:e7:44:8d:4e:82:d1:24:50:12:
         52:eb:1d:32:b2:77:39:7f:e2:c7:a9:a9:79:05:fc:0b:d7:9e:
         f4:b4:0a:7e:d3:61:2d:2f:06:24:09:4f:bd:da:8d:a4:cc:b0:
         19:a7:af:e2:88:9d:8c:d9:da:80:e2:00:77:5c:3a:ff:7b:3b:
         a0:be:4a:b6:b7:5b:d5:36:2c:36:c9:1f:ae:cd:4e:b3:70:6a:
         1b:c2:b7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:13:19 2025 by rpki-client