Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b8a4042-c319-3435-b89a-34993d3c48a6.roa
File:                     3b8a4042-c319-3435-b89a-34993d3c48a6.roa (raw, json)
Hash identifier:          xXcnVtkLckq09U5ghaGyCIozEuL/+S8e9g1vGEeQmvY=
Subject key identifier:   AC:CA:3E:F5:09:1F:FB:8B:9E:0C:2A:05:5E:8A:4D:44:06:5F:76:07
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849B94C5986A4A7EC25D51487C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b8a4042-c319-3435-b89a-34993d3c48a6.roa
Signing time:             Fri 02 May 2025 21:52:12 +0000
ROA not before:           Fri 02 May 2025 21:52:12 +0000
ROA not after:            Thu 31 Jul 2025 21:52:12 +0000
asID:                     401152
IP address blocks:        108.165.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:4c:59:86:a4:a7:ec:25:d5:14:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  2 21:52:12 2025 GMT
            Not After : Jul 31 21:52:12 2025 GMT
        Subject: CN=b993c0b8-6038-472e-8165-433b2fd8d9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a1:e1:01:8d:28:72:ca:df:26:ca:fe:53:4b:
                    ef:73:df:43:43:61:60:00:01:90:0c:ed:6a:92:e0:
                    73:70:72:13:c3:e9:1f:27:44:38:2b:25:3f:2e:0d:
                    0d:1b:6e:09:09:f3:a0:c4:24:c0:b1:6e:de:ad:cc:
                    b9:9d:23:db:7d:10:f0:c9:20:85:c5:f7:69:d2:57:
                    8a:c5:fe:b7:5c:d5:04:d6:07:86:c3:ad:88:53:2f:
                    d0:2c:51:8f:bd:e9:9a:4a:53:86:fd:ba:df:dc:8d:
                    38:cd:0a:d7:f0:f4:a7:94:45:29:09:f2:ce:0a:10:
                    85:09:09:31:ed:1e:a7:20:fa:58:58:ee:5d:ae:86:
                    6d:1c:0b:31:31:6b:b0:12:c5:79:1a:ed:85:67:47:
                    95:4e:60:19:5c:d4:2b:f7:ff:00:31:b6:dd:5d:bf:
                    97:bb:a0:45:ca:1b:ea:45:75:a5:b5:68:25:7a:b2:
                    67:04:95:0a:82:e4:09:42:8f:86:99:05:32:b0:3d:
                    ae:a1:b4:00:2d:6f:57:12:45:f1:5a:fb:3f:25:c9:
                    ff:e6:ed:2b:e5:db:f3:fe:80:c8:d0:39:00:5b:49:
                    80:ad:af:ea:ab:2c:04:70:84:f9:6d:9b:e9:7f:4e:
                    40:7f:8c:ad:4a:ee:c0:f7:92:d1:ba:d3:7a:93:79:
                    66:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CA:3E:F5:09:1F:FB:8B:9E:0C:2A:05:5E:8A:4D:44:06:5F:76:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b8a4042-c319-3435-b89a-34993d3c48a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:fd:53:22:4f:f6:c4:78:b5:7f:51:4d:20:43:3b:3c:31:ce:
         a2:4c:0f:d9:6c:cc:98:31:48:26:dd:d3:4f:6f:cc:94:ee:31:
         35:64:2e:fb:34:d7:4a:b9:f0:99:dd:83:9f:e5:ae:96:a7:be:
         bd:92:92:31:b5:78:ad:4e:c3:ae:76:c2:51:0a:60:46:bb:50:
         c5:a9:93:45:c6:7d:b1:db:db:ac:7d:9f:6b:36:1b:54:92:83:
         f0:da:77:3c:ee:c1:8a:f9:95:be:55:76:9a:c1:3d:3e:3a:bf:
         4a:76:34:ce:e9:dc:79:d1:a6:76:d3:8d:05:07:77:68:fd:2a:
         5e:52:e3:d4:ad:f4:9e:37:ad:60:ea:90:e4:6e:ec:f5:43:ed:
         a1:96:67:e0:6b:33:22:b1:62:57:e6:d1:85:76:bc:15:49:d3:
         03:b8:93:7e:ab:ce:9d:64:8e:33:9b:74:9e:c7:9d:f6:20:1c:
         a3:2c:ca:ec:63:58:1d:43:bf:52:23:eb:15:66:d3:e6:a9:5e:
         23:a7:98:1e:87:a7:c9:71:86:a2:af:14:f8:14:29:42:0d:d5:
         a1:d5:a9:6c:3f:35:43:2e:13:c7:57:ac:02:44:2f:17:16:e6:
         58:a4:5c:7d:9b:b5:be:65:73:e6:1f:87:a7:6a:78:34:de:43:
         f4:27:74:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:46:34 2025 by rpki-client