Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18516acd-e642-3583-a83a-a2d2c3e11f26.roa
File:                     18516acd-e642-3583-a83a-a2d2c3e11f26.roa (raw, json)
Hash identifier:          xRvSQTr9UJYew/L6ca/3t2oofwYsBqQk7S7iHcYD8EQ=
Subject key identifier:   3D:80:F8:5F:5D:5A:44:3E:94:0F:68:C7:7A:C8:93:9D:5C:00:BA:48
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849B6DF5078D8CB9C63AC8E0400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18516acd-e642-3583-a83a-a2d2c3e11f26.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     13768
IP address blocks:        108.165.162.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:50:78:d8:cb:9c:63:ac:8e:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=58db1f0d-b43c-40d4-a1af-9ec6b7b91b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a5:be:f6:99:ec:d7:e0:41:ec:2f:88:cf:cd:
                    42:5a:66:c3:59:c5:cc:a8:df:d7:f5:9e:26:eb:1c:
                    9c:ff:5e:86:10:4e:41:f4:ab:24:ee:a3:0c:39:86:
                    c8:c1:ee:63:5b:21:2a:df:b8:23:5b:d2:d2:b7:f7:
                    0e:ee:65:d2:0f:8d:f6:92:47:d3:e4:85:a7:1d:b3:
                    92:3f:ec:14:76:79:14:5d:e7:be:e2:00:e1:3e:c9:
                    e6:fa:b6:b1:c1:9c:9c:4d:c8:02:bd:27:6a:41:eb:
                    9d:bf:fe:f5:43:d7:e9:e7:fc:67:82:bc:39:4c:68:
                    5c:4a:1f:91:d5:2d:dd:ac:50:48:fe:6a:2f:fd:f8:
                    9f:22:eb:5c:02:b1:38:b2:2c:b4:59:8a:db:10:c0:
                    64:af:19:8c:cf:c4:98:bc:92:bf:c0:21:91:b8:14:
                    8d:6f:fe:45:6f:98:49:a8:ec:8c:59:75:d5:c0:5c:
                    a5:aa:0b:f3:b8:89:c5:db:e4:80:97:0d:43:e2:6b:
                    ff:2f:3c:c8:44:90:34:5d:6c:4b:0b:e3:69:51:1f:
                    63:3f:2f:d9:50:90:8f:6c:68:ec:6a:2a:fa:39:4a:
                    5f:2c:9c:c2:9a:aa:66:05:43:4d:c9:6a:5f:dd:86:
                    eb:c4:78:60:3d:c2:a1:03:1e:66:3b:75:4c:5d:84:
                    50:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:80:F8:5F:5D:5A:44:3E:94:0F:68:C7:7A:C8:93:9D:5C:00:BA:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18516acd-e642-3583-a83a-a2d2c3e11f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:7b:95:81:5f:cc:b3:59:4d:cd:34:36:40:52:d5:05:d4:2e:
         9f:9b:2f:05:99:f9:2d:b8:c0:12:ac:e8:2e:a7:d9:d5:80:7f:
         19:64:e6:f6:43:1c:7f:bb:19:01:78:e8:e7:15:9a:11:85:79:
         9e:ce:fa:c7:14:87:15:90:6f:88:82:63:55:80:6b:ee:8a:4b:
         37:e5:98:ab:3f:f6:e0:9f:64:93:0f:a8:99:18:ae:f3:b8:61:
         57:9b:48:e0:13:cb:b5:d9:5a:2c:a8:06:17:74:fa:02:da:49:
         a8:ae:45:a9:c9:07:32:c4:4d:22:3a:8f:33:ea:44:4b:b4:86:
         65:f9:24:91:2c:1b:61:cd:82:34:27:3c:fa:c7:2c:7d:f3:5f:
         d1:84:74:b5:7f:63:4c:a5:33:80:52:e0:d3:c4:4f:61:4c:eb:
         5d:85:99:d2:f6:65:08:7f:e8:27:3b:09:c5:ab:90:c9:1a:43:
         42:c6:61:ab:e3:7a:b4:57:62:66:26:b5:28:32:d5:aa:71:1b:
         d1:61:5d:a0:94:12:dc:69:1a:c3:61:e5:75:89:09:9e:35:f0:
         63:2d:e6:35:fd:37:5f:25:1e:db:31:18:31:ec:f9:b0:72:a3:
         f3:b0:59:e2:ac:03:24:dc:3a:23:e2:78:f7:22:2c:f5:58:00:
         43:b4:23:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:32:25 2025 by rpki-client