Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d660e4d3-dfdf-311e-9507-3b53fb9eb457.roa
File:                     d660e4d3-dfdf-311e-9507-3b53fb9eb457.roa (raw, json)
Hash identifier:          wpJ/dpYfoOVaYozOW4bT+qhBYnXwfv3/QxnoKRZpsBI=
Subject key identifier:   26:7B:86:1E:90:52:99:6A:9D:B5:B0:FF:B7:EB:AD:5A:A5:9D:8B:C5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849ABB4957AC301EC4C0F1C5280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d660e4d3-dfdf-311e-9507-3b53fb9eb457.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     401152
IP address blocks:        108.165.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:95:7a:c3:01:ec:4c:0f:1c:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=62aab94d-94dc-4d9d-9eba-b3047fe8e8f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7d:e6:0d:c3:4d:ed:f1:c1:b1:13:00:e2:86:
                    41:0d:8b:a7:53:59:0f:e6:c5:4d:8b:32:75:bf:4e:
                    b6:63:d3:fa:e7:0e:35:62:0a:82:45:4e:3b:9a:6c:
                    70:2a:92:9c:8e:91:ca:e3:48:b3:d6:a7:56:a6:ed:
                    47:2b:7e:8b:cf:46:90:dc:16:1e:f6:c2:37:8f:fa:
                    77:e5:19:2d:62:48:5d:83:27:bf:91:61:e0:03:16:
                    68:48:5e:a5:f7:0d:5c:58:99:1f:f5:2a:24:1e:0a:
                    3f:51:86:c1:ef:8e:a2:a4:0a:28:d6:4c:7b:ef:b5:
                    b2:b1:f5:50:86:b2:70:f2:ca:0b:d0:e8:f8:17:04:
                    4a:37:cc:5e:b1:be:d1:cb:8a:55:7b:a5:bb:2f:e4:
                    4a:5d:96:c8:03:54:33:96:25:ed:85:02:57:2b:97:
                    01:60:e9:d6:ff:b7:7f:3b:22:ff:3b:97:8e:1e:57:
                    ba:a1:d0:42:99:c4:f0:c3:fd:71:f8:b7:4d:3d:b8:
                    31:48:b7:d3:9b:56:3b:b7:0d:33:6b:ec:2d:f0:73:
                    67:8a:c9:1f:fe:d5:06:f8:c3:a5:15:6a:61:04:dd:
                    ac:a4:43:9a:82:f1:b3:59:93:91:46:0c:7a:7c:4c:
                    c3:ae:5d:0d:38:15:42:cd:aa:04:47:ef:04:9b:28:
                    dd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7B:86:1E:90:52:99:6A:9D:B5:B0:FF:B7:EB:AD:5A:A5:9D:8B:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d660e4d3-dfdf-311e-9507-3b53fb9eb457.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:70:44:25:f3:10:0c:07:6e:98:81:1b:d7:84:f5:fe:64:4e:
         eb:96:a3:39:ef:10:65:57:5d:57:f3:84:14:21:a8:37:42:c3:
         41:d5:be:16:6c:5b:0d:ab:c1:6e:ef:0d:1b:9d:e9:62:b2:f0:
         e7:11:1b:82:7e:2f:62:0b:bc:c2:6c:3f:e6:2f:c7:23:08:9c:
         db:12:8d:d1:ed:93:2b:77:db:93:d2:01:32:ae:9c:9d:ba:11:
         03:10:ca:c7:b1:fb:49:e4:d7:08:ed:c2:cd:8c:37:fd:6a:dd:
         3c:6e:a0:6c:fa:2e:a8:3b:f2:2b:98:28:de:05:64:a5:43:01:
         b5:08:df:08:1a:5a:f9:37:08:fc:63:d1:47:b6:3f:01:fb:95:
         d0:bb:2c:c8:85:5b:e7:89:50:b5:69:bd:af:54:9b:88:65:25:
         67:50:92:07:6d:09:85:c4:d9:23:8a:51:45:58:01:ee:45:6a:
         9e:a7:f2:66:57:61:cc:57:8d:e6:4b:56:8c:0c:2f:6c:6e:38:
         1e:d7:cf:86:69:be:f7:e5:1f:ab:63:6c:41:db:69:5d:21:1a:
         e4:a4:12:20:fd:88:b1:f1:6e:0a:4e:8c:0f:72:32:8b:2c:dd:
         a4:4d:04:34:f8:82:86:29:72:3d:7b:5a:b7:cb:46:6b:7c:1f:
         81:fd:e5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:29:32 2025 by rpki-client