Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1edda83d-f4d9-30ff-91e5-7c9e9fe5d989.roa
File:                     1edda83d-f4d9-30ff-91e5-7c9e9fe5d989.roa (raw, json)
Hash identifier:          y5RdwhQsA3YbqkizlZWpsVfHb2RbExWg0czR7B+SVtw=
Subject key identifier:   B7:06:D6:F6:F2:18:F1:23:79:16:53:B0:E4:80:68:AB:BB:BE:D1:9C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B1349A0FCE4D4623BAE62D680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1edda83d-f4d9-30ff-91e5-7c9e9fe5d989.roa
Signing time:             Wed 03 Sep 2025 20:16:25 +0000
ROA not before:           Wed 03 Sep 2025 20:16:25 +0000
ROA not after:            Tue 02 Dec 2025 21:16:25 +0000
asID:                     21859
IP address blocks:        108.165.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:49:a0:fc:e4:d4:62:3b:ae:62:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  3 20:16:25 2025 GMT
            Not After : Dec  2 21:16:25 2025 GMT
        Subject: CN=b3ba9abe-2de7-4984-866b-2e8dbc2a9ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8d:24:96:dc:14:de:9c:51:a2:04:74:30:63:
                    c8:33:f2:7a:bf:a0:33:71:09:6e:08:d3:c9:da:5d:
                    d3:a4:25:ca:ad:d2:9e:d6:53:e0:ce:be:3b:1b:3e:
                    ee:bf:ec:8b:63:da:6d:8f:82:3d:83:31:4b:32:d0:
                    e4:94:4a:74:d0:44:76:06:52:31:16:b3:a5:90:70:
                    ca:bf:d5:df:38:ba:e6:fe:13:fe:15:db:8b:8f:1b:
                    ba:26:50:48:31:26:cc:92:0f:7a:c4:e7:0c:a8:8c:
                    29:1c:31:da:96:b1:53:94:4b:d7:95:d2:d8:1c:1c:
                    a7:7e:29:25:aa:64:94:ea:e2:e1:c5:bc:15:2f:26:
                    a2:1e:24:49:19:d4:27:9a:1d:4f:84:99:71:0e:71:
                    d2:5c:6d:8f:0a:d6:d2:c4:85:05:74:41:5a:0f:7e:
                    c2:81:0f:44:e2:07:66:5c:26:23:e0:8a:cb:ee:1f:
                    7a:41:ec:4a:79:cb:71:fe:2a:1d:96:7f:72:7f:5e:
                    e8:28:09:e8:1b:0a:90:ce:3e:5d:00:08:e9:7c:05:
                    72:7c:df:2f:3f:8b:b8:c3:2b:d4:6d:9a:a8:11:c1:
                    f9:ec:d3:80:d4:d2:a6:5f:f7:77:6c:e3:84:e9:4a:
                    c9:99:c6:1c:a0:75:ac:06:13:a7:08:08:8e:52:24:
                    85:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:06:D6:F6:F2:18:F1:23:79:16:53:B0:E4:80:68:AB:BB:BE:D1:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1edda83d-f4d9-30ff-91e5-7c9e9fe5d989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:c1:5a:e8:34:cd:24:26:42:99:12:db:73:27:aa:8c:e0:02:
         3e:3c:19:ff:3f:0a:99:c6:39:52:9a:bb:57:7d:73:06:b3:3d:
         64:88:1d:8d:37:86:cb:69:74:70:ea:29:09:22:e3:61:d8:cc:
         15:1e:5e:62:f8:46:68:38:36:77:80:36:cd:72:40:52:0a:ab:
         2f:1c:d9:42:41:b1:81:8f:ee:f7:c7:5a:d5:95:43:00:de:1e:
         fb:b2:e2:32:cb:89:6b:57:94:d0:71:36:fc:56:a5:46:77:a6:
         75:fd:8c:9c:89:bd:51:b8:bd:27:e9:1f:fc:84:c3:d3:73:05:
         35:22:5d:e2:35:b6:44:c1:03:5c:ad:a8:fe:a7:65:14:4c:1a:
         cd:ce:db:81:cb:b1:fb:26:1f:f8:00:16:4c:37:ff:c6:e7:97:
         51:6f:3c:38:46:91:99:61:23:2f:b3:ec:0f:0d:28:f4:78:9e:
         ca:31:40:d2:f2:e3:0d:39:ce:e1:c3:4b:cb:ef:83:61:52:2e:
         ed:4d:ef:1b:2e:3a:91:fd:35:ce:ee:57:94:d8:36:59:48:c0:
         24:43:82:8e:30:c0:e1:2f:4a:e1:da:48:5a:92:47:60:2b:b3:
         9b:aa:85:7f:7f:fa:51:36:de:e7:b4:4b:2a:e7:0f:51:cd:39:
         71:eb:32:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsTSaD85NRiO65i1oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDkwMzIwMTYyNVoXDTI1MTIwMjIxMTYyNVowLzEtMCsGA1UEAxMk
YjNiYTlhYmUtMmRlNy00OTg0LTg2NmItMmU4ZGJjMmE5ZWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI0kltwU3pxRogR0MGPIM/J6v6AzcQluCNPJ
2l3TpCXKrdKe1lPgzr47Gz7uv+yLY9ptj4I9gzFLMtDklEp00ER2BlIxFrOlkHDK
v9XfOLrm/hP+FduLjxu6JlBIMSbMkg96xOcMqIwpHDHalrFTlEvXldLYHBynfikl
qmSU6uLhxbwVLyaiHiRJGdQnmh1PhJlxDnHSXG2PCtbSxIUFdEFaD37CgQ9E4gdm
XCYj4IrL7h96QexKectx/iodln9yf17oKAnoGwqQzj5dAAjpfAVyfN8vP4u4wyvU
bZqoEcH57NOA1NKmX/d3bOOE6UrJmcYcoHWsBhOnCAiOUiSFgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLcG1vbyGPEjeRZTsOSAaKu7vtGcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMWVkZGE4M2QtZjRkOS0z
MGZmLTkxZTUtN2M5ZTlmZTVkOTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABfBWug0zSQmQpkS23MnqozgAj48Gf8/CpnGOVKau1d9cwazPWSIHY03
hstpdHDqKQki42HYzBUeXmL4Rmg4NneANs1yQFIKqy8c2UJBsYGP7vfHWtWVQwDe
Hvuy4jLLiWtXlNBxNvxWpUZ3pnX9jJyJvVG4vSfpH/yEw9NzBTUiXeI1tkTBA1yt
qP6nZRRMGs3O24HLsfsmH/gAFkw3/8bnl1FvPDhGkZlhIy+z7A8NKPR4nsoxQNLy
4w05zuHDS8vvg2FSLu1N7xsuOpH9Nc7uV5TYNllIwCRDgo4wwOEvSuHaSFqSR2Ar
s5uqhX9/+lE23ue0SyrnD1HNOXHrMuo=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:33 2025 by rpki-client