Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/3db1756e-b083-3647-8d44-e89753a2ba41.roa
File:                     3db1756e-b083-3647-8d44-e89753a2ba41.roa (raw, json)
Hash identifier:          d8vYkxBKjkrzdlzA7dgOpsII6yfUYDtsDGW3rDkn0vI=
Subject key identifier:   BE:08:F9:E0:8B:3C:D3:3A:E2:A7:90:A1:42:8C:11:16:A6:E5:74:46
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F4328584A5E60655CA5D1B9B4D4320600
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/3db1756e-b083-3647-8d44-e89753a2ba41.roa
Signing time:             Tue 01 Jul 2025 01:00:50 +0000
ROA not before:           Tue 01 Jul 2025 01:00:50 +0000
ROA not after:            Mon 29 Sep 2025 01:00:50 +0000
asID:                     23470
IP address blocks:        173.249.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5e:60:65:5c:a5:d1:b9:b4:d4:32:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Jul  1 01:00:50 2025 GMT
            Not After : Sep 29 01:00:50 2025 GMT
        Subject: CN=719c531c-68b6-48e1-bb1a-420ca3c4d08f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:02:1b:88:89:d1:92:cd:00:b4:e7:ba:31:a4:
                    c7:16:09:b1:1d:9b:73:26:14:39:39:df:8a:73:88:
                    2a:29:de:c5:d9:0c:fa:89:88:9e:0f:20:8f:3a:bd:
                    ba:63:09:19:da:3d:34:f3:71:6c:e7:84:20:c8:fe:
                    f2:b4:e9:83:5b:bd:74:47:28:c4:36:2f:60:76:1a:
                    eb:22:fe:06:23:de:e2:ae:9e:1a:d0:d6:5f:e4:04:
                    f8:00:d1:ef:0f:83:b0:cc:75:77:2d:2d:bd:18:7e:
                    fe:ca:e0:5c:a1:10:1a:e3:a0:7b:84:b3:dc:3f:1e:
                    35:70:5e:5c:de:de:4b:1e:a3:89:9a:af:e0:9d:69:
                    05:ec:9b:9e:ff:5a:74:8c:55:aa:5d:83:c5:d0:3a:
                    32:4d:a3:9e:6a:7f:0b:ea:84:b8:fd:a8:16:f8:ab:
                    53:24:75:f6:40:e4:0a:3a:51:30:72:78:2f:af:61:
                    9c:cf:e6:22:55:e6:c9:de:eb:8e:01:de:27:2c:99:
                    15:a4:e9:7c:45:74:8c:84:02:e3:4c:38:2d:9a:ed:
                    75:7f:d9:71:d3:c3:d0:d8:45:0a:3e:10:3b:69:a2:
                    cf:07:55:b9:9f:6c:59:0d:26:65:8b:39:6e:30:38:
                    df:9a:b0:9f:6c:ab:ef:b0:64:a8:c6:53:c2:50:50:
                    2a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:08:F9:E0:8B:3C:D3:3A:E2:A7:90:A1:42:8C:11:16:A6:E5:74:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/3db1756e-b083-3647-8d44-e89753a2ba41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:5d:c5:3d:39:a3:16:0b:77:37:0d:64:16:cd:2b:a3:b1:87:
         46:b1:90:a2:21:5a:f9:fd:35:4b:18:f3:60:d3:b1:69:66:12:
         0c:2e:e1:5f:07:42:6f:0c:58:0c:e8:b0:99:c3:ff:69:2b:c0:
         ad:3e:b3:a1:61:21:23:59:cc:c7:ac:6f:87:f7:a7:23:4b:8c:
         f0:70:7c:0a:28:e3:b9:fc:06:52:55:e1:32:1b:00:ff:43:32:
         a3:3f:f1:a8:a9:0a:b5:99:87:d5:cb:e4:0e:c1:c9:d2:9c:8c:
         fa:38:80:81:c9:de:4a:0b:fb:3e:f3:ab:1e:00:bb:4b:0c:d7:
         df:82:a1:60:9b:c6:a4:83:68:ef:cd:70:b0:d9:5f:c9:c7:60:
         38:e4:c6:5f:e4:a3:52:12:9d:b3:56:72:a6:b5:9a:0a:97:b3:
         64:f5:49:fa:6f:f7:4e:29:26:b9:97:f3:56:30:c2:f7:c1:2e:
         22:82:0c:4e:ae:f6:23:40:3d:cd:95:01:b2:d5:74:2a:01:02:
         d0:b2:df:d1:9f:a4:d3:b1:69:c6:5c:e7:8e:21:e4:83:7c:2d:
         24:40:d5:12:5e:98:ae:f3:77:cd:af:20:86:5e:db:7d:32:b0:
         c0:0a:8e:8f:29:e1:52:a4:34:ee:ae:8c:dc:6d:9c:33:03:ff:
         77:84:6f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:28:22 2025 by rpki-client