Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0c4440e1-e66f-3132-a2fd-1e682fbd7dc0.roa
File:                     0c4440e1-e66f-3132-a2fd-1e682fbd7dc0.roa (raw, json)
Hash identifier:          5kaM3LR8bgYWsNRUSSjgwQ+8y/RukabuGzO5JQcgKro=
Subject key identifier:   74:69:C9:C7:50:44:17:12:24:22:B2:52:2C:7C:06:BB:E2:3F:51:43
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848D64113E8BEB22D3FC7608B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0c4440e1-e66f-3132-a2fd-1e682fbd7dc0.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     58061
IP address blocks:        166.1.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:13:e8:be:b2:2d:3f:c7:60:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=b1f9800a-f05f-4114-86eb-00fac3f1eaa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0d:67:31:93:cb:2c:03:02:66:ae:b9:ba:57:
                    34:8e:82:fb:5e:fd:da:ca:88:9a:f8:90:1f:14:80:
                    b8:04:4e:71:8a:5c:90:9a:5f:cc:1c:30:29:bf:08:
                    cd:2c:ab:68:51:78:fd:ef:ee:84:13:33:b2:be:81:
                    bc:88:69:c9:61:b4:0e:db:e1:2d:fb:3c:05:75:dd:
                    41:3a:36:e1:b9:d0:54:4e:1f:3c:6f:48:b5:f6:f2:
                    3c:87:a8:47:5d:59:ea:e7:5e:6c:63:1d:4b:5e:9d:
                    79:f5:e0:6a:10:45:1e:96:e7:55:4a:1c:fd:48:6b:
                    19:85:9e:d1:e1:b6:76:7f:11:2d:1e:6f:40:50:ff:
                    6e:3c:76:3c:ec:ce:04:4d:c7:5d:54:b2:b9:d8:df:
                    97:00:74:b2:7e:f9:37:90:00:4e:0e:85:2e:04:61:
                    59:eb:08:38:2d:ca:7e:38:b8:95:a3:29:1c:bb:d0:
                    62:08:b8:69:ea:01:af:6a:3d:3f:c7:7b:f0:54:e1:
                    95:f9:62:25:64:bb:6b:46:cd:34:0f:64:1e:81:ab:
                    3d:4a:75:61:a4:03:37:9b:3b:0b:55:9e:8a:d6:31:
                    91:7d:99:c3:fc:aa:a8:a3:51:1b:c5:f3:17:bb:a3:
                    86:d8:59:fb:32:fc:72:c1:7c:c7:b9:95:2c:04:fd:
                    a4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:69:C9:C7:50:44:17:12:24:22:B2:52:2C:7C:06:BB:E2:3F:51:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0c4440e1-e66f-3132-a2fd-1e682fbd7dc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:c2:7e:28:d3:9c:71:75:08:bd:78:98:1e:c1:32:52:84:72:
         fd:c4:13:40:7d:d8:60:a4:89:94:3c:88:77:1e:9a:6f:b6:c1:
         20:4f:b8:8b:52:a8:0f:9c:7a:a3:dd:3b:99:80:46:78:96:79:
         9c:98:27:04:1b:55:b4:bf:3f:4a:cb:55:f5:98:9a:a3:18:c1:
         7b:73:86:30:bb:39:36:86:fb:c3:db:8c:84:d2:09:d9:99:06:
         93:3a:38:4b:53:62:04:20:f6:85:f9:d6:4a:2a:d3:1f:82:c9:
         49:ab:cf:e8:a4:cc:0c:ab:00:31:e6:cd:69:9f:2f:da:08:4e:
         6f:e1:0e:10:4e:f2:c5:2a:c5:a2:06:b6:6f:00:3d:29:37:e3:
         9a:4c:07:4a:6c:23:4e:b5:03:5f:4c:5f:d1:fd:c7:5d:ae:62:
         5e:53:a2:c1:4b:1e:b0:d9:24:3e:3a:13:cf:cc:f8:bd:e0:ed:
         45:8a:ef:90:dc:54:75:d3:92:62:6d:82:8e:d7:c2:4d:7b:31:
         c9:4d:51:7e:25:22:21:64:82:a0:f9:87:ed:54:f9:9b:a7:71:
         de:9e:17:d0:38:18:09:23:b1:b5:ff:63:ad:14:30:3b:d5:b5:
         45:a4:98:b2:58:1a:a8:fa:7e:6c:d7:8c:a4:4e:f5:09:4d:a9:
         b9:67:c3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 23:03:56 2025 by rpki-client