Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0abea741-0641-3bee-a5fb-0d2c5da9c851.roa
File:                     0abea741-0641-3bee-a5fb-0d2c5da9c851.roa (raw, json)
Hash identifier:          F42HLNZISmeXt3/y21czXUnzNOeb74BaSdCka/v4eg0=
Subject key identifier:   31:34:70:60:54:71:EA:0E:E7:D6:29:DB:8A:95:A8:0C:35:58:F2:12
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584965204842FA8292445B123580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0abea741-0641-3bee-a5fb-0d2c5da9c851.roa
Signing time:             Wed 02 Apr 2025 18:15:31 +0000
ROA not before:           Wed 02 Apr 2025 18:15:31 +0000
ROA not after:            Tue 01 Jul 2025 18:15:31 +0000
asID:                     58061
IP address blocks:        166.0.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:20:48:42:fa:82:92:44:5b:12:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  2 18:15:31 2025 GMT
            Not After : Jul  1 18:15:31 2025 GMT
        Subject: CN=dd10e43a-cc38-4dc7-8a30-995c9445fbf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:32:cd:7e:72:76:df:54:12:b7:ff:e4:48:17:
                    40:10:29:de:53:80:fc:f1:6d:d0:bd:c9:37:a4:5b:
                    50:fc:8c:a6:af:01:1c:5b:ac:6d:2c:40:97:82:68:
                    f6:5c:a7:7e:48:73:92:44:1e:b5:51:bb:5f:9e:4b:
                    bf:30:e5:74:4e:aa:42:b2:23:e3:5c:b7:0e:af:ac:
                    3c:08:79:03:d0:cd:eb:8f:c7:74:1c:79:bb:63:5a:
                    05:06:67:da:ef:a0:8b:5c:95:8e:b6:15:bc:b9:7b:
                    e2:ed:fa:ee:6e:55:b1:ca:82:46:e8:ee:7c:dd:96:
                    0a:22:f3:ff:34:4c:4c:a0:83:ad:6f:27:e9:d9:e3:
                    0b:49:f4:04:3c:72:ff:97:f9:b5:7c:8e:01:79:2f:
                    aa:83:05:d9:fb:de:5b:e2:84:8f:df:b4:0d:17:07:
                    f7:2b:39:d4:5b:bd:5b:f8:0e:b3:06:05:b9:d2:d2:
                    45:0d:ab:62:07:64:cd:c2:52:5f:9c:eb:02:90:60:
                    23:a0:ec:f5:57:e5:1e:0e:b4:17:61:9d:34:5b:02:
                    21:f9:58:c5:79:55:43:45:5c:12:ca:a5:9c:11:9c:
                    24:31:6f:6c:f6:b8:05:bb:1c:31:97:2e:e5:ce:6a:
                    aa:7d:59:32:b2:3d:d9:ce:e8:71:fc:ab:9a:67:99:
                    25:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:34:70:60:54:71:EA:0E:E7:D6:29:DB:8A:95:A8:0C:35:58:F2:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0abea741-0641-3bee-a5fb-0d2c5da9c851.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:b6:ce:93:24:43:de:fe:9b:34:22:00:6f:e1:11:2e:89:d5:
         35:f8:38:12:6f:88:b2:15:43:37:2b:e9:a6:fb:55:71:bc:41:
         99:fe:41:2b:cc:6e:ce:e9:da:f6:9e:fa:61:b0:1b:28:f9:ab:
         84:1b:a3:ce:ee:df:76:a7:18:d0:c7:9a:7a:4d:6e:6f:b8:fe:
         e5:74:86:a0:d6:cd:75:bf:22:d8:4a:a2:dc:d3:09:e7:fd:e2:
         d8:77:22:84:8f:dc:31:b3:5c:0b:22:d5:11:fb:3f:87:e9:ea:
         b1:91:a7:05:9c:bc:85:70:56:9c:38:60:a1:d4:f1:a9:2a:95:
         65:9e:a2:8a:13:4b:30:0e:2b:7b:c2:1a:f8:fe:8e:cd:b9:56:
         ce:84:51:a2:9c:9f:8a:a1:9b:2b:35:c5:2c:5d:9a:e0:ab:36:
         1c:c6:8b:61:f6:19:8a:9e:40:f3:f2:0a:06:32:4c:8a:9f:5a:
         20:58:02:d8:af:5e:6f:85:73:8b:37:7f:48:f2:dc:2e:8f:09:
         aa:b7:b2:81:8c:dc:ba:6f:67:7a:b7:bf:89:c8:ec:58:16:f8:
         0e:04:7f:9e:68:50:9a:fd:73:da:b2:05:0c:64:07:f4:a9:84:
         33:e1:68:7e:8b:11:c0:9f:41:84:e1:a1:b7:97:dd:74:10:74:
         50:13:fa:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:07:08 2025 by rpki-client