Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f0be3c13-0542-389c-8826-980eaf9212d9.roa
File:                     f0be3c13-0542-389c-8826-980eaf9212d9.roa (raw, json)
Hash identifier:          rk/72p6ErPhYFbaGToRorZ3jgHlZzxpecbjD0ufalaw=
Subject key identifier:   A9:C7:AB:41:3C:09:00:48:34:D4:A4:AC:1E:55:FB:30:1D:03:C4:D6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AF0F14EF4BFDF2592CCB90094
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f0be3c13-0542-389c-8826-980eaf9212d9.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     148996
IP address blocks:        108.165.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:4e:f4:bf:df:25:92:cc:b9:00:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=c97fb4f8-cfd2-4357-925b-cebfdb9db15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c1:20:2e:24:65:59:9a:43:6c:f0:29:47:83:
                    2d:f3:2e:7f:b5:0b:22:b4:e7:2c:7d:58:09:ea:5e:
                    03:0b:22:e4:28:04:98:b5:0c:3b:be:cc:8a:62:93:
                    30:da:ba:5c:af:bf:17:db:b3:61:b8:76:01:2a:52:
                    7e:76:8d:f0:40:f4:79:96:10:03:af:09:c1:fc:19:
                    a2:7e:23:5b:77:75:55:b1:a4:e5:84:bf:f3:82:3b:
                    a9:f9:47:2d:5e:33:f0:5b:59:b9:cf:70:2f:18:fa:
                    65:65:7e:52:ec:3b:e0:d1:3f:b4:90:75:df:6c:e7:
                    fa:d9:c9:1c:12:79:38:a2:3f:9a:8c:31:e1:b9:07:
                    57:4c:f5:92:69:f4:a1:5b:87:24:69:b3:96:a9:a3:
                    47:ee:b5:56:db:79:0c:7a:34:19:52:07:ac:f5:7c:
                    14:8a:cb:c3:29:ab:22:41:3b:97:c2:fc:6b:f0:8e:
                    37:7e:99:64:0d:0e:e1:d1:63:f7:b3:be:66:5f:41:
                    c3:a8:fa:c2:b3:36:a9:5d:fb:02:0c:c5:29:ef:ed:
                    b0:be:db:56:61:45:ad:23:c4:76:60:03:1e:61:a0:
                    ce:04:60:84:a3:da:c3:2f:c9:d3:bf:d2:7f:1d:49:
                    c8:8f:4c:2c:e2:23:b0:d7:f1:1f:f6:cf:a7:c7:5f:
                    f1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C7:AB:41:3C:09:00:48:34:D4:A4:AC:1E:55:FB:30:1D:03:C4:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f0be3c13-0542-389c-8826-980eaf9212d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:30:ec:52:35:98:bc:fa:30:96:e8:a1:6d:41:ac:d5:3a:60:
         b5:2d:cf:39:54:de:e1:cf:80:71:62:dd:17:92:08:62:a1:39:
         d1:5d:d1:58:5f:26:47:64:98:9a:0e:4e:b7:df:69:34:19:0a:
         6a:f9:b6:a8:1a:5c:76:8f:a2:fa:1c:7d:c7:af:08:36:bb:35:
         ec:75:c0:ce:0c:2f:43:51:7a:2b:3e:0c:5a:66:6d:d3:83:73:
         83:df:ab:47:20:ff:6e:39:f5:39:dc:4c:e0:3a:26:ed:ae:67:
         fb:c4:bc:c8:ff:42:ec:f0:00:5c:17:3b:43:6d:3d:ef:2a:71:
         5e:80:ba:dd:18:67:93:64:6c:0a:43:6d:0f:89:4d:7f:d7:b9:
         3f:c6:0f:ce:9c:d9:e3:c8:a4:3a:a3:b5:10:80:48:f1:06:0a:
         1d:f5:cd:73:9d:97:de:38:5b:1f:59:04:38:49:8d:91:4e:7b:
         4c:46:7f:3a:a3:3b:70:ae:ff:be:52:2c:dc:9b:92:be:b9:7d:
         b5:f4:b6:78:30:fa:c4:50:2c:fa:50:c3:c4:a2:7f:ad:b6:8d:
         27:02:12:ab:38:60:c7:9d:2a:c0:fc:f6:da:bf:ee:00:c2:57:
         6d:c0:77:4a:51:7f:c8:5e:46:07:e5:99:91:d1:f3:e6:eb:56:
         00:7c:59:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:44 2025 by rpki-client