Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/03d0101c-5fa4-3c68-98be-02bd908ec670.roa
File:                     03d0101c-5fa4-3c68-98be-02bd908ec670.roa (raw, json)
Hash identifier:          BqG0K1m7DogVmQt6q/iCbItwJ+W1BPDMruF71xCxo8w=
Subject key identifier:   46:23:3B:34:6E:D1:DD:1C:65:36:86:1B:CB:37:DA:5E:24:AD:8B:1A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858483F802DFC84F065476A249080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/03d0101c-5fa4-3c68-98be-02bd908ec670.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     62240
IP address blocks:        166.1.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:2d:fc:84:f0:65:47:6a:24:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=936f3b0b-8f83-4cc6-b292-d7cc83686bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e7:b4:52:2b:73:f3:4f:19:85:b4:7b:43:bf:
                    2f:bd:e2:35:36:e0:76:12:0b:24:bb:9b:19:43:f0:
                    04:32:c5:53:ef:7e:0c:34:24:82:ce:2a:27:88:21:
                    94:4f:d1:6b:be:1f:45:df:ee:c8:d0:ae:15:dd:a8:
                    09:1e:b2:a3:4c:ec:42:5d:0a:a8:80:e3:26:10:e5:
                    c3:31:48:e3:94:bb:4f:d5:71:b0:c9:18:ce:09:f9:
                    81:57:af:b3:28:9c:1d:14:8a:70:59:c2:49:a1:6d:
                    6e:80:32:bc:f6:4c:2a:63:f3:b7:89:ed:e1:fd:51:
                    1d:04:d7:10:30:75:4a:7c:0b:a7:49:96:97:ee:86:
                    27:ba:a8:da:31:23:3a:75:d2:20:ac:da:23:16:36:
                    32:dc:7c:c9:d5:8d:28:64:ba:de:11:e4:43:ff:c2:
                    ee:be:de:7b:ac:07:9f:6f:70:17:e4:b9:e2:1a:c3:
                    bf:3a:67:be:5e:a0:95:cc:81:bf:b3:c5:9f:99:8d:
                    1b:83:a9:0b:e3:95:50:87:94:3d:5c:8d:e5:90:d3:
                    ca:e1:92:16:19:a1:fb:9f:68:e8:62:1d:c0:8a:57:
                    d9:7c:1a:9e:4d:70:10:40:5d:3f:c1:f0:74:08:bb:
                    fd:af:36:4a:02:22:94:ea:dc:2c:b5:8b:55:c4:c4:
                    99:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:23:3B:34:6E:D1:DD:1C:65:36:86:1B:CB:37:DA:5E:24:AD:8B:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/03d0101c-5fa4-3c68-98be-02bd908ec670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:9c:a7:fe:d0:4e:6f:b1:80:03:8a:89:2e:75:40:72:8e:f7:
         60:3f:ea:85:6f:6c:43:72:cb:ca:02:f6:25:e5:fd:24:b7:80:
         18:7f:77:d1:d8:b0:44:a5:59:22:0b:95:25:0b:e9:02:e0:f2:
         95:36:ad:f8:67:48:75:26:68:74:a7:af:67:f2:35:7e:54:c5:
         ca:40:7f:f1:08:fe:44:ab:82:18:1b:d9:77:9f:b9:56:b8:bb:
         05:10:d2:48:e8:50:58:c9:12:5b:fe:dc:53:b8:e3:27:1d:3d:
         8e:02:4a:2b:b2:11:42:cb:58:00:46:9e:81:2f:2f:11:e5:3b:
         65:c1:a6:7e:f9:1b:3e:9c:0d:11:4a:53:1c:cc:c5:24:f9:49:
         4f:a3:05:25:3c:d9:ea:c2:1b:96:3a:69:b8:85:25:34:11:e4:
         0e:e7:58:9f:c7:de:ae:94:d8:38:69:9d:00:c7:7e:77:8c:a3:
         9c:26:13:87:ce:3c:de:31:23:b9:0e:0b:7d:28:a6:93:75:07:
         8d:c0:a6:dc:ee:b7:8a:41:81:50:af:ff:90:e0:9a:68:62:77:
         bb:89:24:06:de:da:f9:56:43:cf:25:e0:36:86:0a:ba:17:38:
         ec:4d:7f:8f:a3:e5:8d:1a:b5:f5:7d:89:17:0e:9a:96:2c:b8:
         bc:89:5a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:47 2025 by rpki-client