Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e77b672b-3304-317d-941e-8220590d4ff3.roa
File:                     e77b672b-3304-317d-941e-8220590d4ff3.roa (raw, json)
Hash identifier:          bnwHZmTOAURSGjYS82fk6ibDFEcJQmi+nKX/6HNIHpk=
Subject key identifier:   EA:DF:71:AD:83:48:20:82:A8:63:31:34:08:87:73:A5:A9:74:6D:AE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B8AEFEADDFB6DDF7C2F137910
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e77b672b-3304-317d-941e-8220590d4ff3.roa
Signing time:             Thu 16 Oct 2025 16:52:39 +0000
ROA not before:           Thu 16 Oct 2025 16:52:39 +0000
ROA not after:            Wed 14 Jan 2026 17:52:39 +0000
asID:                     16509
IP address blocks:        108.165.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:ef:ea:dd:fb:6d:df:7c:2f:13:79:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 16 16:52:39 2025 GMT
            Not After : Jan 14 17:52:39 2026 GMT
        Subject: CN=ce126abc-3abb-43dc-9551-4fad94b7f1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:ae:eb:78:7d:f3:b7:00:65:36:99:27:54:
                    83:b0:ee:62:73:24:82:c7:6c:dd:15:c0:46:03:fa:
                    7f:54:8e:f2:0c:9a:e2:be:c2:92:96:b2:e5:8d:3b:
                    a3:32:6f:ee:e2:26:4b:b4:b4:55:01:03:16:1c:65:
                    b4:7e:8c:9d:32:f2:c2:04:df:79:e7:22:a9:2c:c7:
                    30:48:80:55:d5:f0:74:ee:5f:a3:7b:89:b7:76:a9:
                    c5:7b:f8:a7:74:10:b3:11:d7:23:f0:a0:ea:1b:78:
                    88:98:db:6d:f1:aa:4e:cd:bd:1e:ba:37:a8:81:6f:
                    c6:d7:ff:22:e9:f5:2d:9e:9e:7b:91:54:58:c7:a1:
                    df:95:4c:72:7a:d6:6a:2a:26:a1:de:1c:59:48:85:
                    fe:4a:6f:02:86:de:c1:5e:7a:fe:14:bc:8b:6f:82:
                    39:64:86:e2:2f:25:46:b4:97:e7:e0:5d:05:42:5c:
                    b9:82:f5:47:a3:e1:1f:8e:19:26:c2:1a:df:0a:87:
                    57:64:7c:3d:f0:fc:f3:a0:7d:f5:ee:22:73:3e:e4:
                    be:32:23:6b:bb:34:37:de:c9:3b:21:42:48:0b:96:
                    5b:6f:1c:fd:6d:05:1b:b2:e6:a2:56:89:11:69:71:
                    88:b7:3b:a6:32:45:36:32:fe:07:1c:0c:cb:4f:d9:
                    bf:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DF:71:AD:83:48:20:82:A8:63:31:34:08:87:73:A5:A9:74:6D:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e77b672b-3304-317d-941e-8220590d4ff3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:dc:25:cc:11:7f:6d:c2:87:50:72:51:92:36:46:05:44:92:
         4e:6a:c3:88:af:68:19:94:33:b8:4f:49:f9:92:d6:e1:8c:4c:
         f0:15:dc:66:a6:68:d1:3a:b6:07:60:06:ad:bc:04:8b:72:15:
         f1:61:e1:96:07:b4:78:d8:e7:7b:a5:c6:95:cc:de:26:a7:05:
         3b:f5:75:a1:25:c2:4b:27:c0:86:bf:04:c5:10:91:f1:3f:7a:
         55:fb:77:f7:f6:c6:43:59:ed:dd:1b:b1:e8:99:2e:13:52:f7:
         4d:d8:60:7b:e2:a6:8e:23:1c:c2:6b:72:11:f7:e2:32:19:41:
         fb:13:65:62:46:76:9f:c7:15:6c:dc:c9:33:96:0b:52:9f:5a:
         7b:b7:6f:12:e8:4a:cf:6b:ea:70:e9:bc:2c:de:77:3a:7a:22:
         6a:7c:bb:c8:a6:eb:2d:49:a8:3b:26:9c:ea:31:ae:39:32:ce:
         0d:19:9a:d0:12:51:ae:61:3a:01:25:d7:17:3a:58:58:99:ac:
         df:02:11:8f:0b:4c:c8:8f:4a:00:a8:ba:19:4a:26:3c:5b:38:
         69:08:7c:02:98:d1:96:dc:1f:c8:7f:04:68:40:33:d7:51:4a:
         35:27:7f:88:5d:c9:1a:5a:2c:d6:15:c7:1a:12:41:d2:8b:3d:
         3a:14:2b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:14:50 2025 by rpki-client