Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e1f9857a-b4f5-3be6-b1bd-7ee6bb677c56.roa
File:                     e1f9857a-b4f5-3be6-b1bd-7ee6bb677c56.roa (raw, json)
Hash identifier:          sq/mtIni36QMvZgKIiCNMBpqWA+g1PxhtBCOPjT9Mtk=
Subject key identifier:   8A:D5:35:A6:0F:FC:C0:B4:11:49:F1:68:FD:10:E8:57:98:AB:B3:BF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849B57A0B9B96B931448813ED00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e1f9857a-b4f5-3be6-b1bd-7ee6bb677c56.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     63023
IP address blocks:        108.165.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:0b:9b:96:b9:31:44:88:13:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=7915e413-d39b-4e6f-9da6-22e64bdb34b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:40:ee:6c:b9:e1:c6:7f:73:65:41:36:90:e1:
                    0b:a0:0f:e7:ee:7c:24:0f:97:6a:02:1a:39:b4:12:
                    98:01:e1:02:f4:a7:9b:6e:33:a9:e6:ee:8b:14:fa:
                    86:8b:48:90:d0:a5:9c:3d:a9:ed:00:9a:0e:ef:49:
                    1e:e9:36:44:cf:94:64:69:01:71:ef:76:76:22:e8:
                    93:39:82:03:16:f8:0c:e6:8f:4d:4e:32:b7:69:e7:
                    54:d6:21:f0:24:8e:4a:5c:99:3f:be:90:fa:86:99:
                    25:33:5a:f8:e7:05:fe:0e:87:e7:f4:4d:2e:65:16:
                    75:dc:8b:c1:ae:52:bc:ea:bd:de:6e:06:0e:82:62:
                    23:b0:b3:31:63:c3:33:c9:bb:2f:64:12:3c:8c:c4:
                    fd:73:24:80:01:84:bf:32:11:b3:5b:2a:3e:fb:de:
                    fb:3a:52:26:72:aa:45:6f:75:e0:c5:68:45:98:60:
                    34:02:f5:04:4b:4a:01:ed:56:03:09:29:f6:d1:43:
                    54:86:ce:98:79:43:b5:4c:74:2d:7d:a0:83:9b:56:
                    83:12:af:b7:97:d9:10:0d:be:74:72:cf:48:c5:0c:
                    0a:f0:ac:dc:4c:c8:2d:c0:1c:c4:15:b2:ac:76:ff:
                    66:35:d3:1e:6f:f9:7c:38:db:90:81:db:48:f4:1f:
                    8f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D5:35:A6:0F:FC:C0:B4:11:49:F1:68:FD:10:E8:57:98:AB:B3:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e1f9857a-b4f5-3be6-b1bd-7ee6bb677c56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:dd:f0:e6:3f:69:e5:94:8e:0d:f3:1d:c3:ed:34:58:7a:1c:
         7d:67:90:de:3c:87:45:f7:4a:fe:d6:30:b0:fc:c1:cd:90:5b:
         ba:4c:65:ce:61:2a:aa:ea:e1:6a:a9:ed:37:c0:45:b2:e1:3a:
         16:10:3b:4f:4f:d3:7c:a4:77:e2:ea:95:f8:93:48:49:ef:76:
         9f:cd:cc:6c:22:eb:e7:75:94:f1:4b:3d:77:f4:67:73:5c:9d:
         15:ec:73:25:03:20:37:59:bd:a3:f1:6b:c2:89:fc:85:e5:fa:
         6d:79:ba:00:82:d6:b9:08:d0:cb:fc:39:ac:20:c6:fe:e4:3a:
         0c:b5:f6:96:dc:e5:0f:da:e4:aa:03:fd:72:b7:61:98:4b:e9:
         b7:a7:d4:1f:7f:94:d2:61:a1:f2:32:60:fa:56:ea:96:2f:73:
         30:e5:3d:05:15:fe:58:0b:d2:0b:06:eb:61:2a:25:18:23:98:
         d0:b2:1c:41:91:a6:68:00:c3:84:95:10:06:d3:19:08:48:b5:
         ba:b9:8a:42:99:69:82:46:d0:8c:32:c2:d4:f3:12:44:e2:d5:
         45:4e:67:c8:f4:5e:e5:36:0d:98:26:16:c8:d1:74:a7:65:6a:
         bc:cb:39:7d:b6:e1:13:fa:b1:e2:7d:05:3f:16:95:76:70:bf:
         5a:55:c3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:38:30 2025 by rpki-client