Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8c609dde-e51a-360e-b9c3-25977ac54f37.roa
File:                     8c609dde-e51a-360e-b9c3-25977ac54f37.roa (raw, json)
Hash identifier:          hHD7SiINSXcyvvP1mVid6dHPDO3kRNZcWlzNAjWFe/M=
Subject key identifier:   42:8B:0C:45:C2:5F:62:07:15:AA:10:B4:93:9D:F0:86:CB:8F:93:86
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849B30B210E4D79CAD52B034B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8c609dde-e51a-360e-b9c3-25977ac54f37.roa
Signing time:             Wed 30 Apr 2025 16:05:57 +0000
ROA not before:           Wed 30 Apr 2025 16:05:57 +0000
ROA not after:            Tue 29 Jul 2025 16:05:57 +0000
asID:                     263812
IP address blocks:        108.165.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b3:0b:21:0e:4d:79:ca:d5:2b:03:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 30 16:05:57 2025 GMT
            Not After : Jul 29 16:05:57 2025 GMT
        Subject: CN=65ea9b74-054d-425e-ad32-513f6328b7e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1a:37:2c:97:22:68:b3:53:20:4c:df:fc:9f:
                    ba:72:7c:07:6c:c8:9b:2e:0e:8a:c1:2c:b6:d1:a1:
                    75:47:a7:e2:8c:0c:c2:0d:b2:0f:e3:31:5a:75:e3:
                    e1:b2:44:8b:c7:cb:0b:47:a2:ad:53:fe:6e:e7:cc:
                    03:93:07:a4:97:35:36:7f:82:3e:7f:96:ac:c6:a3:
                    f1:5b:78:e4:e5:80:af:d3:cc:ea:70:b2:9b:a6:d9:
                    36:b8:a8:7e:9b:63:af:55:fb:2a:5a:fc:43:4d:fb:
                    9e:9e:e5:60:89:81:3a:83:5b:d8:87:87:40:7b:c3:
                    ea:d1:5f:88:8a:96:27:35:be:e6:b0:16:17:af:91:
                    e9:a8:5b:66:38:0b:e5:ca:b0:8f:b4:52:69:6b:da:
                    cf:81:38:ad:dd:ff:c8:e8:c0:65:f6:c2:b2:bf:dd:
                    ee:b3:ca:14:7b:f2:73:6a:50:d6:89:ed:29:84:d5:
                    ef:97:12:d8:c4:fa:4e:1a:d7:4e:23:c0:02:95:77:
                    74:9a:35:d3:63:78:65:3a:f7:1f:cf:57:84:1e:07:
                    88:62:29:7d:a6:30:d0:93:13:6a:84:9c:d4:21:83:
                    23:4e:2c:cc:8f:7a:a0:0c:e3:0d:73:8b:ee:54:af:
                    f5:fc:f3:b9:40:71:de:24:5e:e3:e9:6a:b2:91:86:
                    77:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8B:0C:45:C2:5F:62:07:15:AA:10:B4:93:9D:F0:86:CB:8F:93:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8c609dde-e51a-360e-b9c3-25977ac54f37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:46:ec:e9:ca:b6:cc:e4:65:c8:aa:9c:dd:3b:6e:4b:8b:eb:
         6a:dd:3d:96:88:84:e6:5e:de:29:69:22:9a:c9:f8:b7:6a:05:
         2a:7d:86:9c:6a:da:84:ab:9a:87:23:b6:46:d3:d2:b6:a3:24:
         89:ef:23:bb:bc:75:6b:26:c2:fd:c2:b4:52:af:03:3f:a4:2c:
         36:3c:ca:54:8e:18:ed:e6:72:e1:1c:d2:5c:df:6c:12:a2:b0:
         81:4e:2b:33:10:8f:c5:9a:23:07:43:ed:f9:dc:6a:d5:4b:e5:
         ef:5c:3d:d4:b8:9a:3c:57:93:80:df:46:96:29:78:a1:67:b4:
         7b:e8:a2:8b:7b:bc:9c:b9:0e:57:be:0b:0a:16:d4:03:49:63:
         b4:9f:56:81:c2:ee:b7:8a:7d:87:29:e7:8a:6c:b2:aa:f7:ac:
         dc:ff:42:8a:56:09:82:24:20:92:51:f3:2d:f5:b5:c4:3e:fd:
         91:49:07:cc:f0:0d:49:25:e6:29:17:77:12:75:e1:c9:27:e2:
         63:26:53:3d:ec:99:e4:0d:04:42:f5:85:3d:f0:25:e5:33:5d:
         ac:2a:d0:a4:48:34:7d:27:2d:5b:36:f9:f2:f4:ee:ea:5f:dd:
         b2:55:b2:f0:bd:ca:a5:c3:c5:15:61:46:69:e9:04:6d:08:de:
         a2:40:66:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:51:17 2025 by rpki-client