Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b527f057-f5e6-3ce8-9b3b-e307e487be94.roa
File:                     b527f057-f5e6-3ce8-9b3b-e307e487be94.roa (raw, json)
Hash identifier:          wWYv62NMtGFh8TGhPropxopLf/1MqKByz/hTor99JDk=
Subject key identifier:   74:E8:8C:08:9A:81:04:E3:16:E2:5A:2A:4A:CB:0C:F2:0E:54:89:42
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A480AEE116718B1B97F0083C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b527f057-f5e6-3ce8-9b3b-e307e487be94.roa
Signing time:             Mon 23 Jun 2025 01:00:49 +0000
ROA not before:           Mon 23 Jun 2025 01:00:49 +0000
ROA not after:            Sun 21 Sep 2025 01:00:49 +0000
asID:                     149440
IP address blocks:        108.165.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:48:0a:ee:11:67:18:b1:b9:7f:00:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 23 01:00:49 2025 GMT
            Not After : Sep 21 01:00:49 2025 GMT
        Subject: CN=8814759e-af84-41a4-b2b4-23437c55f942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:e0:c3:c5:dc:74:a9:dd:87:02:9b:85:c1:14:
                    e6:36:23:92:c4:fb:d8:37:04:6b:be:58:18:ba:f5:
                    a3:1e:75:07:37:01:20:65:ab:01:38:fe:b9:90:12:
                    c8:94:19:23:93:fe:51:0f:b5:f2:3d:08:10:d2:39:
                    74:af:b8:60:13:16:53:50:be:76:43:83:cd:d7:61:
                    09:38:23:f9:74:bb:b9:7d:65:b8:48:6e:9a:43:f1:
                    e5:ed:66:00:c1:92:0e:e2:1b:2a:29:71:ff:65:fb:
                    d9:9c:67:4a:2b:ae:11:d1:ae:29:32:10:ce:eb:ab:
                    9b:e9:c8:d2:85:cd:d2:b0:dc:61:60:7e:97:b9:24:
                    28:cd:09:7d:11:4e:d4:47:28:ce:98:28:d7:63:dc:
                    c4:ae:11:7e:07:c4:fc:45:c2:84:08:69:61:63:7b:
                    0d:68:1c:fb:98:64:ae:b3:df:be:47:08:88:b3:69:
                    f9:d2:1a:6c:7d:05:f2:de:eb:22:c6:22:86:5d:56:
                    0d:4e:6e:67:9a:44:98:e2:23:9c:df:d9:2d:c9:35:
                    c2:d5:6d:4c:5c:94:2b:e8:fd:87:e9:b1:9b:a2:a6:
                    ae:16:a7:5c:74:eb:23:10:ad:65:eb:8c:14:df:bc:
                    37:b0:89:82:92:62:0b:c9:4c:d0:72:4f:91:35:cd:
                    1f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E8:8C:08:9A:81:04:E3:16:E2:5A:2A:4A:CB:0C:F2:0E:54:89:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b527f057-f5e6-3ce8-9b3b-e307e487be94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:76:dd:e0:cb:5b:82:55:f2:ff:c6:2e:5f:57:bc:b5:e1:b6:
         dc:fe:5d:df:93:f2:d2:81:60:e3:4a:ac:ab:0a:48:d0:5a:e7:
         46:3c:ff:23:5b:29:74:87:25:1c:45:4b:ac:3d:24:12:96:a5:
         23:d2:cb:3c:29:d0:f9:dc:a3:0d:b2:7c:8d:6a:f6:a2:2f:10:
         85:67:50:dc:b2:8f:7f:0d:1f:19:11:8c:f0:32:2f:a3:20:db:
         ea:de:47:cd:19:65:37:de:f9:6c:6b:b7:75:4b:e7:bd:10:b5:
         c7:ad:00:48:f8:8b:00:cd:9f:b6:0e:5c:99:55:8b:05:c6:4d:
         2d:4e:20:55:b6:9d:af:ce:39:28:d6:22:78:56:cb:2c:10:37:
         94:61:11:38:4a:00:bb:74:54:ad:f2:f8:ab:ce:f0:f6:6a:af:
         d1:d8:eb:06:42:61:fb:01:4d:26:55:06:1e:b3:7e:fb:6b:25:
         f3:61:dd:81:c0:a5:95:96:69:e5:ac:64:1c:cd:7b:4b:13:ab:
         c4:38:02:3d:82:0d:60:ee:9d:f4:b4:11:c3:ba:3c:50:0e:df:
         58:49:45:19:f9:86:ce:76:99:58:ac:95:b2:39:77:52:72:c2:
         81:38:d7:0c:f6:59:92:5c:7d:e9:f3:d8:7d:35:87:9d:ef:1f:
         5f:25:88:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:58:29 2025 by rpki-client