Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/16ab9708-41a0-3e84-a745-d298063d5abc.roa
File:                     16ab9708-41a0-3e84-a745-d298063d5abc.roa (raw, json)
Hash identifier:          m38tR8qEP9weJa9rXQ1T94Rymdp+wQYWRY5giW4wOaU=
Subject key identifier:   68:E6:44:74:0B:4C:21:6D:60:9B:63:07:25:91:07:68:0D:7C:10:90
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849BC74AE2A56F0AC7ED40CD500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/16ab9708-41a0-3e84-a745-d298063d5abc.roa
Signing time:             Sun 04 May 2025 01:00:47 +0000
ROA not before:           Sun 04 May 2025 01:00:47 +0000
ROA not after:            Sat 02 Aug 2025 01:00:47 +0000
asID:                     23470
IP address blocks:        108.165.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:74:ae:2a:56:f0:ac:7e:d4:0c:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  4 01:00:47 2025 GMT
            Not After : Aug  2 01:00:47 2025 GMT
        Subject: CN=ec08b57d-eb5a-4a9e-9403-0e338c566ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:10:35:f6:4e:f9:12:2d:0b:8d:3a:7c:33:98:
                    5b:9f:e0:6c:62:03:ab:59:65:6c:fa:a5:5a:81:07:
                    47:3f:99:01:eb:2b:f4:73:c1:8a:b5:d6:07:e2:08:
                    e4:14:2b:48:a4:30:1f:f0:f1:f2:9e:2d:c4:44:a7:
                    cc:fb:7b:d9:b3:ea:c9:b1:1d:1f:88:c2:ee:b9:96:
                    d0:e9:48:f6:5b:b2:c4:37:2f:4b:22:0c:7c:65:7d:
                    1b:59:20:83:e2:46:77:69:3b:b4:4e:67:38:df:cd:
                    16:26:36:7d:88:87:45:e3:a4:a7:31:b8:9a:ec:25:
                    96:52:48:e2:00:99:6f:98:06:cd:a4:a7:b6:87:f4:
                    c7:68:92:e4:8b:93:94:6b:7f:99:9a:f3:42:76:09:
                    ae:40:c0:5e:66:06:37:23:3e:30:b2:6e:01:2c:95:
                    31:b6:e0:8d:e8:e0:47:82:32:8c:ef:2a:f8:c4:2b:
                    be:cb:3d:12:ac:3a:e4:f2:bf:27:45:80:a4:91:75:
                    82:80:18:07:7c:4c:63:0d:8d:d9:98:63:cf:71:a9:
                    eb:2d:e4:1d:bd:b3:a0:44:b7:b4:3c:c8:fa:d0:84:
                    33:39:07:fb:66:a3:cd:a7:ee:bd:af:7c:ce:7b:b2:
                    c8:f7:db:b9:08:45:ec:cc:03:22:19:43:cb:ef:8f:
                    7d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E6:44:74:0B:4C:21:6D:60:9B:63:07:25:91:07:68:0D:7C:10:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/16ab9708-41a0-3e84-a745-d298063d5abc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:d7:5a:6c:5b:94:6a:a3:6d:25:d3:f9:b3:54:d7:e6:d4:45:
         19:93:62:a5:00:4c:c2:5d:cb:5d:a6:76:4d:db:02:28:90:43:
         7c:bf:11:1a:2f:f6:05:19:eb:2e:6e:ed:de:e9:1f:71:9a:23:
         45:70:1a:c1:b5:5e:9e:61:a6:3e:7b:c6:3d:d5:ad:31:d5:a7:
         1b:e2:fb:ec:6c:ab:82:80:59:e0:05:51:04:1e:c6:ec:a6:0f:
         b1:27:9d:f7:23:8a:b3:51:fe:88:4d:98:b9:f8:d7:81:ef:1b:
         7a:e7:05:e5:85:65:a2:ee:ce:66:ac:f8:3f:09:4d:4b:3f:10:
         1d:db:7c:73:d7:0d:5c:30:8c:9f:6c:33:52:61:d3:db:b9:e7:
         78:3c:32:73:59:39:c4:2f:fb:1e:1e:9c:49:2a:dc:21:56:f3:
         02:e6:ac:d9:9d:d1:d1:5e:cf:f5:55:25:8d:1a:c8:0d:c3:8f:
         bc:62:c4:8a:5d:a2:e9:94:f2:94:ac:d2:ee:3b:f3:9a:a2:73:
         47:04:fb:7e:03:7c:ed:33:ec:fe:18:ef:63:a1:e2:fd:7c:ed:
         1b:2d:19:f3:e3:09:08:6d:43:57:d9:c5:9e:5a:e2:b7:4f:53:
         5e:33:f1:7f:45:74:b9:9f:11:d3:44:d0:1b:db:72:13:ab:1c:
         27:f1:25:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm8dK4qVvCsftQM1QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDUwNDAxMDA0N1oXDTI1MDgwMjAxMDA0N1owLzEtMCsGA1UEAxMk
ZWMwOGI1N2QtZWI1YS00YTllLTk0MDMtMGUzMzhjNTY2ZWNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRA19k75Ei0LjTp8M5hbn+BsYgOrWWVs+qVa
gQdHP5kB6yv0c8GKtdYH4gjkFCtIpDAf8PHyni3ERKfM+3vZs+rJsR0fiMLuuZbQ
6Uj2W7LENy9LIgx8ZX0bWSCD4kZ3aTu0Tmc4380WJjZ9iIdF46SnMbia7CWWUkji
AJlvmAbNpKe2h/THaJLki5OUa3+ZmvNCdgmuQMBeZgY3Iz4wsm4BLJUxtuCN6OBH
gjKM7yr4xCu+yz0SrDrk8r8nRYCkkXWCgBgHfExjDY3ZmGPPcanrLeQdvbOgRLe0
PMj60IQzOQf7ZqPNp+69r3zOe7LI99u5CEXszAMiGUPL74998QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGjmRHQLTCFtYJtjByWRB2gNfBCQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMTZhYjk3MDgtNDFhMC0z
ZTg0LWE3NDUtZDI5ODA2M2Q1YWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIbXWmxblGqjbSXT+bNU1+bURRmTYqUATMJdy12mdk3bAiiQQ3y/ERov
9gUZ6y5u7d7pH3GaI0VwGsG1Xp5hpj57xj3VrTHVpxvi++xsq4KAWeAFUQQexuym
D7EnnfcjirNR/ohNmLn414HvG3rnBeWFZaLuzmas+D8JTUs/EB3bfHPXDVwwjJ9s
M1Jh09u553g8MnNZOcQv+x4enEkq3CFW8wLmrNmd0dFez/VVJY0ayA3Dj7xixIpd
oumU8pSs0u4785qic0cE+34DfO0z7P4Y72Oh4v187RstGfPjCQhtQ1fZxZ5a4rdP
U14z8X9FdLmfEdNE0BvbchOrHCfxJfk=
-----END CERTIFICATE-----
Generated at Fri May 9 02:45:17 2025 by rpki-client