Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/249e7c7e-c61c-3905-bf93-a45f99a7398c.roa
File:                     249e7c7e-c61c-3905-bf93-a45f99a7398c.roa (raw, json)
Hash identifier:          FfOEuCUrq+atziPZOCnyoH0eM8h+c5jYXof30cSQR+8=
Subject key identifier:   B0:1A:C1:A4:F3:CE:46:F3:F3:C9:04:0C:0E:A3:14:22:DA:D7:5C:B9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849B30B20D4D0A5624C06E1A520
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/249e7c7e-c61c-3905-bf93-a45f99a7398c.roa
Signing time:             Wed 30 Apr 2025 16:05:56 +0000
ROA not before:           Wed 30 Apr 2025 16:05:56 +0000
ROA not after:            Tue 29 Jul 2025 16:05:56 +0000
asID:                     263812
IP address blocks:        108.165.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b3:0b:20:d4:d0:a5:62:4c:06:e1:a5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 30 16:05:56 2025 GMT
            Not After : Jul 29 16:05:56 2025 GMT
        Subject: CN=8b0bd7b4-8f0c-4307-99af-aaef51c373b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ce:b1:fa:e1:96:10:a9:fd:09:7f:24:5b:5a:
                    3f:b2:24:dd:59:18:6b:d2:33:db:0f:a9:ee:89:b4:
                    c9:21:2b:8d:be:2a:f5:5e:7a:9b:cb:4f:36:2b:9b:
                    0c:15:26:0a:3e:8f:3d:44:a1:58:f4:f2:42:8b:94:
                    b1:c7:24:dd:06:a6:49:01:27:ab:d6:72:06:5e:fb:
                    f5:ba:6a:92:9f:7a:6c:d9:39:37:f7:9b:f0:ad:2e:
                    47:05:f4:d7:80:e0:c8:ff:92:08:4f:cb:e5:80:5f:
                    df:ff:d2:d5:1d:55:92:a5:7f:5f:53:23:63:4e:41:
                    48:23:dd:34:3b:fb:0a:98:33:04:4c:83:c1:7b:9b:
                    ef:8e:ec:a2:55:ee:82:3a:81:84:8e:b1:4e:29:86:
                    00:67:7a:c1:5d:c4:6b:1c:56:ca:80:fe:39:38:a4:
                    3d:6f:b0:a5:a0:65:01:63:30:8a:d7:f7:2d:2f:67:
                    dc:f7:78:64:c1:f1:db:0d:89:ff:b6:14:59:42:a3:
                    bd:0f:34:98:fc:1d:9c:8a:12:e8:f5:eb:fd:75:b2:
                    77:dc:18:e7:27:3c:bd:20:46:3a:12:cb:cc:8c:78:
                    3f:47:e5:d6:12:e6:72:1f:dd:8f:02:c9:b7:ef:5d:
                    90:33:f8:47:be:46:31:8e:be:05:76:e9:50:2c:a1:
                    e2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1A:C1:A4:F3:CE:46:F3:F3:C9:04:0C:0E:A3:14:22:DA:D7:5C:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/249e7c7e-c61c-3905-bf93-a45f99a7398c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:6c:ff:e4:70:bf:fc:d4:0f:d1:72:f2:17:7c:bd:25:72:06:
         39:9a:0f:9d:dc:84:11:5b:60:77:39:1e:07:8b:67:ba:b2:45:
         cd:13:80:c0:5d:14:af:f5:d6:e6:e4:92:39:a7:5c:b6:9a:5f:
         80:b7:24:02:97:f8:08:06:ee:c7:92:81:fe:7c:0c:70:a6:57:
         cd:c9:c3:0f:01:84:03:71:a9:6e:8d:86:a9:a2:dc:d9:aa:b1:
         b6:90:69:80:3e:96:b1:0b:4b:35:f0:50:d5:93:1e:1d:42:56:
         00:99:e7:07:b9:34:c6:29:f1:ed:d3:bf:53:2e:2f:1e:a4:fa:
         7a:8a:61:54:ee:cc:78:e2:cd:55:c5:f5:0c:62:e7:f8:2d:80:
         eb:99:35:22:4b:6c:fa:ec:4e:d6:d9:78:5b:9a:ee:42:65:44:
         79:ab:5b:11:c9:52:76:ce:e8:33:06:13:4e:40:4d:58:f2:b6:
         02:6f:2c:a6:7e:88:f7:35:8d:f8:a5:d8:cc:98:f9:1e:0e:cd:
         01:6b:0c:78:6b:59:65:81:f3:09:dd:f9:e5:1d:3e:a8:0b:ed:
         5f:52:7c:4d:38:e7:22:d9:a4:fd:44:db:d0:2e:06:37:4d:f2:
         24:d4:69:9b:dc:8e:f9:20:d4:54:a8:a2:ec:a2:61:4b:77:07:
         27:55:d4:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmzCyDU0KViTAbhpSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDQzMDE2MDU1NloXDTI1MDcyOTE2MDU1NlowLzEtMCsGA1UEAxMk
OGIwYmQ3YjQtOGYwYy00MzA3LTk5YWYtYWFlZjUxYzM3M2I5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs6x+uGWEKn9CX8kW1o/siTdWRhr0jPbD6nu
ibTJISuNvir1Xnqby082K5sMFSYKPo89RKFY9PJCi5SxxyTdBqZJASer1nIGXvv1
umqSn3ps2Tk395vwrS5HBfTXgODI/5IIT8vlgF/f/9LVHVWSpX9fUyNjTkFII900
O/sKmDMETIPBe5vvjuyiVe6COoGEjrFOKYYAZ3rBXcRrHFbKgP45OKQ9b7CloGUB
YzCK1/ctL2fc93hkwfHbDYn/thRZQqO9DzSY/B2cihLo9ev9dbJ33BjnJzy9IEY6
EsvMjHg/R+XWEuZyH92PAsm3712QM/hHvkYxjr4FdulQLKHieQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLAawaTzzkbz88kEDA6jFCLa11y5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjQ5ZTdjN2UtYzYxYy0z
OTA1LWJmOTMtYTQ1Zjk5YTczOThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGBs/+Rwv/zUD9Fy8hd8vSVyBjmaD53chBFbYHc5HgeLZ7qyRc0TgMBd
FK/11ubkkjmnXLaaX4C3JAKX+AgG7seSgf58DHCmV83Jww8BhANxqW6Nhqmi3Nmq
sbaQaYA+lrELSzXwUNWTHh1CVgCZ5we5NMYp8e3Tv1MuLx6k+nqKYVTuzHjizVXF
9Qxi5/gtgOuZNSJLbPrsTtbZeFua7kJlRHmrWxHJUnbO6DMGE05ATVjytgJvLKZ+
iPc1jfil2MyY+R4OzQFrDHhrWWWB8wnd+eUdPqgL7V9SfE045yLZpP1E29AuBjdN
8iTUaZvcjvkg1FSoouyiYUt3BydV1Lg=
-----END CERTIFICATE-----
Generated at Sat May 10 20:04:38 2025 by rpki-client