Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05a752e7-59c4-3d88-9120-8f9e7b17e80a.roa
File:                     05a752e7-59c4-3d88-9120-8f9e7b17e80a.roa (raw, json)
Hash identifier:          tpORTgx4tLUXfj/TvdRO2664fYbETB+LDbh98IpjLEg=
Subject key identifier:   46:AB:68:87:8E:44:CC:EC:3E:CD:AA:9A:EB:72:FA:06:3C:B3:5D:46
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584960541752D6BC25CEC073C500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05a752e7-59c4-3d88-9120-8f9e7b17e80a.roa
Signing time:             Tue 01 Apr 2025 01:00:47 +0000
ROA not before:           Tue 01 Apr 2025 01:00:47 +0000
ROA not after:            Mon 30 Jun 2025 01:00:47 +0000
asID:                     269070
IP address blocks:        166.0.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:60:54:17:52:d6:bc:25:ce:c0:73:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  1 01:00:47 2025 GMT
            Not After : Jun 30 01:00:47 2025 GMT
        Subject: CN=2d9eaf14-5253-4f80-a332-5e2508376737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c4:c2:19:5a:fc:e1:2a:2d:2b:13:90:fb:0e:
                    06:79:ec:a3:7c:b3:11:06:b0:4f:34:7b:e9:54:f6:
                    f5:47:f3:93:ea:f6:de:4d:70:f7:d5:3b:81:6f:50:
                    41:f3:9a:f8:21:94:1c:f0:20:6a:db:8b:75:09:b2:
                    1f:12:ce:7c:d4:c7:70:ce:60:35:16:e5:e6:e4:fe:
                    24:7d:a4:9e:1c:e0:84:2d:76:20:56:83:9f:b2:6a:
                    15:cb:62:c6:71:08:12:26:be:e6:d3:5f:bb:05:c1:
                    5d:ae:bf:91:e1:d4:4d:ef:72:28:7a:1b:fd:fb:1a:
                    c5:d0:ba:f8:c1:0c:91:22:a6:63:28:9c:cb:2f:66:
                    cb:b9:61:c2:e9:3a:c7:4e:53:12:8a:23:13:91:59:
                    a7:dc:55:09:ba:57:a2:0d:60:df:c2:21:44:5c:78:
                    ef:ad:b2:b7:4b:33:11:00:da:6c:19:70:de:2c:a0:
                    b6:03:a8:bf:11:09:b7:aa:30:4f:f7:6f:37:a4:fd:
                    04:0a:2f:d7:71:eb:61:ef:8a:13:aa:c2:6f:b5:1a:
                    8f:e1:99:1f:a7:e1:e6:09:d8:a1:0b:8e:08:5b:aa:
                    d2:27:4c:2c:10:26:1f:06:b2:02:1b:56:75:53:ef:
                    03:d1:10:d9:c6:11:91:6b:cb:cb:36:3c:b1:3e:52:
                    d9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AB:68:87:8E:44:CC:EC:3E:CD:AA:9A:EB:72:FA:06:3C:B3:5D:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05a752e7-59c4-3d88-9120-8f9e7b17e80a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:d5:3b:35:82:39:23:11:49:51:80:3c:00:e7:82:e5:78:b1:
         de:39:b4:3e:33:bf:32:30:b5:e7:90:db:c7:e0:30:ce:ea:22:
         58:5a:50:e6:c3:18:a7:62:3d:31:70:1d:fe:44:7d:9b:20:c8:
         e4:6d:75:94:00:e2:79:4f:46:c5:4e:d9:ce:c0:56:be:ba:26:
         c4:59:7c:0b:b4:03:00:1e:63:e0:db:d5:7f:7a:2b:8b:f9:f7:
         a9:d5:8f:b7:b9:37:2c:5e:d1:63:e1:3d:0d:27:30:62:88:42:
         5a:9c:21:f7:1d:35:45:8f:e1:be:14:29:ae:37:6e:de:18:62:
         85:ad:54:2f:a2:29:98:4c:53:54:3b:ae:3c:52:44:ba:4e:62:
         3b:91:a6:c9:22:5f:d4:9d:c6:d7:96:24:64:12:1c:ff:4b:90:
         02:c1:79:77:18:1a:f9:13:d7:9d:52:c2:c8:47:94:42:83:c9:
         a1:83:10:ac:12:ee:e3:87:a9:72:af:a3:0d:51:80:8b:82:e5:
         d9:e8:5f:01:f2:8e:83:18:39:10:7d:b4:62:1c:87:24:8a:8e:
         04:9e:f8:74:83:b2:45:2a:db:3c:9e:02:4e:29:56:2b:a5:a1:
         1b:7e:2e:df:f9:01:07:c9:03:17:eb:63:ed:b9:cb:52:e1:5d:
         fd:67:52:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElgVBdS1rwlzsBzxQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk
MmQ5ZWFmMTQtNTI1My00ZjgwLWEzMzItNWUyNTA4Mzc2NzM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysTCGVr84SotKxOQ+w4GeeyjfLMRBrBPNHvp
VPb1R/OT6vbeTXD31TuBb1BB85r4IZQc8CBq24t1CbIfEs581MdwzmA1FuXm5P4k
faSeHOCELXYgVoOfsmoVy2LGcQgSJr7m01+7BcFdrr+R4dRN73Ioehv9+xrF0Lr4
wQyRIqZjKJzLL2bLuWHC6TrHTlMSiiMTkVmn3FUJuleiDWDfwiFEXHjvrbK3SzMR
ANpsGXDeLKC2A6i/EQm3qjBP9283pP0ECi/Xceth74oTqsJvtRqP4Zkfp+HmCdih
C44IW6rSJ0wsECYfBrICG1Z1U+8D0RDZxhGRa8vLNjyxPlLZYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEaraIeORMzsPs2qmuty+gY8s11GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDVhNzUyZTctNTljNC0z
ZDg4LTkxMjAtOGY5ZTdiMTdlODBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAfVOzWCOSMRSVGAPADnguV4sd45tD4zvzIwteeQ28fgMM7qIlhaUObD
GKdiPTFwHf5EfZsgyORtdZQA4nlPRsVO2c7AVr66JsRZfAu0AwAeY+Db1X96K4v5
96nVj7e5Nyxe0WPhPQ0nMGKIQlqcIfcdNUWP4b4UKa43bt4YYoWtVC+iKZhMU1Q7
rjxSRLpOYjuRpskiX9SdxteWJGQSHP9LkALBeXcYGvkT151SwshHlEKDyaGDEKwS
7uOHqXKvow1RgIuC5dnoXwHyjoMYORB9tGIchySKjgSe+HSDskUq2zyeAk4pViul
oRt+Lt/5AQfJAxfrY+25y1LhXf1nUno=
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:52:56 2025 by rpki-client