Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f0aedf13-17b4-371f-9079-0a5eb87a251a.roa
File:                     f0aedf13-17b4-371f-9079-0a5eb87a251a.roa (raw, json)
Hash identifier:          xGJHJWprf68Wf9tIJGt3GnMwwhlB5p/MLZMNpq8Pi8o=
Subject key identifier:   F0:B8:52:3B:E9:F9:D0:93:8A:5B:94:61:80:8C:A2:C1:B9:B1:85:FD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A3480165647598459C6982D80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f0aedf13-17b4-371f-9079-0a5eb87a251a.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     9009
IP address blocks:        108.165.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:16:56:47:59:84:59:c6:98:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=12b0533b-5097-4a23-9458-0b714c6a5295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a4:49:1a:3b:17:e5:fa:f6:95:67:f1:b3:3a:
                    cf:f3:47:1f:0e:31:75:2b:42:13:f6:85:2d:a1:24:
                    b4:97:5e:44:36:93:91:e1:27:1c:48:31:66:a0:ff:
                    ed:a7:ea:83:d9:e4:a1:1c:23:2d:8c:3b:67:3e:36:
                    6d:34:c9:c2:ca:ec:7c:da:5d:67:45:f0:41:bd:d4:
                    bf:86:77:74:82:f3:38:ba:0b:e3:1c:88:06:b6:9a:
                    a0:ec:b6:ad:24:13:34:04:c5:bb:3f:c1:90:a9:5d:
                    f7:91:12:b4:3f:54:e6:79:01:ac:f9:81:bf:53:4a:
                    ed:a6:fd:6e:4a:24:e2:99:cf:ae:2b:7e:61:8a:41:
                    be:22:05:01:27:3e:76:2b:55:31:d3:cd:c1:c4:3b:
                    19:cf:9a:16:ae:46:df:d5:dc:94:4a:83:43:5a:0f:
                    45:05:a7:6c:22:3c:4d:9c:cd:a2:03:08:4c:00:ee:
                    9c:3c:4d:71:47:a3:67:df:0d:15:17:0b:92:19:51:
                    9d:21:02:2f:fb:44:ac:e0:84:80:54:df:75:9d:7a:
                    9e:73:6a:e2:3c:e3:dc:83:6f:28:4c:3c:f0:39:90:
                    e1:31:5f:e8:8c:a1:17:71:c9:e6:7b:d0:e4:d5:86:
                    07:dc:fd:d0:4c:98:dc:3a:6d:e8:99:a5:54:a9:f7:
                    79:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B8:52:3B:E9:F9:D0:93:8A:5B:94:61:80:8C:A2:C1:B9:B1:85:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f0aedf13-17b4-371f-9079-0a5eb87a251a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:c0:2e:e4:9f:3f:87:9c:f8:0e:81:ac:86:5d:17:48:6b:13:
         ca:b0:75:68:1a:e4:ec:7e:e4:c1:3e:aa:b0:ef:dd:76:30:7f:
         c8:5f:a0:9b:18:67:ed:f3:81:66:48:ff:94:85:7b:4d:70:cd:
         b7:55:f3:54:73:62:73:a3:09:48:d5:26:fa:e4:0f:0c:1e:b9:
         97:33:4a:39:2f:91:c9:f4:d4:e9:2b:4f:8c:29:5a:76:cf:2f:
         bb:1f:fa:2a:a2:6f:b0:63:0c:bf:62:4c:60:be:dc:31:51:af:
         e2:1f:be:b2:c5:81:f9:3d:2e:99:a5:a1:4b:d5:1d:7d:89:78:
         da:98:cf:a2:e3:39:40:94:e7:f9:8a:8d:c6:c3:be:89:32:72:
         17:93:9e:7d:c2:24:74:73:ed:24:a1:d5:61:98:35:2e:bd:ab:
         d9:9f:42:af:44:70:d7:ca:37:cb:97:54:ed:bd:c0:0a:ba:19:
         89:28:38:79:47:9e:54:45:ce:82:26:4d:df:be:35:ee:4b:00:
         65:2b:a5:33:90:52:8f:9c:ec:08:27:03:96:5e:f4:e2:8e:4a:
         bd:e0:0d:c8:78:8b:4d:09:66:a9:22:e0:73:df:95:12:f0:a3:
         0d:c4:86:8a:ee:74:b6:55:1d:60:48:50:fc:43:3c:2a:03:52:
         06:4b:9e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:59:12 2025 by rpki-client