Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18d6dd84-c46a-395e-b79d-7bc2e9aa045b.roa
File:                     18d6dd84-c46a-395e-b79d-7bc2e9aa045b.roa (raw, json)
Hash identifier:          8cYeOO/GrObzUqUPWX96WUkszyVccDExAN3qxiPsWBg=
Subject key identifier:   1A:AD:92:37:17:70:AD:45:4F:34:D9:88:32:42:0F:AC:1A:01:E0:94
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849CFFF7EBA61F5876C04C4BE00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18d6dd84-c46a-395e-b79d-7bc2e9aa045b.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     62240
IP address blocks:        166.1.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:7e:ba:61:f5:87:6c:04:c4:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=0df95299-b76b-4cbe-abf2-e9adc602905f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8b:20:a9:2d:f0:08:df:64:e8:6f:4e:a1:47:
                    3a:7b:2f:8e:64:a3:2d:6e:e0:31:9b:17:8e:71:df:
                    fa:2a:df:fc:7b:be:1a:c9:4b:e0:9b:c4:0a:aa:92:
                    0d:23:57:af:8a:78:c3:cc:4d:be:48:29:cd:82:5a:
                    01:fd:ce:b5:56:18:b4:77:a6:82:7d:61:3e:bc:6b:
                    cf:a7:5b:01:95:75:eb:9f:0a:f7:d9:51:d8:79:b5:
                    d8:7f:0c:55:bc:13:65:28:45:d4:dd:ab:81:b0:9f:
                    83:ff:e3:d8:b0:23:d9:22:74:eb:ce:ce:fa:85:13:
                    5e:35:ab:89:38:f2:b6:7d:86:d7:20:12:b2:1b:c8:
                    0e:ae:52:b2:6f:40:b7:df:43:a6:4c:8b:a1:ee:47:
                    2b:77:f6:be:7b:a2:2a:f8:cb:03:ad:dc:dc:99:0a:
                    9f:dc:90:61:dc:a1:72:f5:1f:62:be:c3:1a:e6:6d:
                    c7:42:0c:88:ff:9b:b8:b9:e9:0f:f3:99:c9:3c:30:
                    b7:e6:b9:bf:a4:cb:1d:cf:eb:a9:83:7b:0f:8a:e5:
                    6e:56:7c:07:cc:e5:51:09:31:87:1c:a3:64:51:08:
                    dd:2c:6f:f5:ee:94:ee:bf:38:a2:ec:49:dd:52:b8:
                    a4:ab:e9:39:fc:81:54:a2:b3:17:e9:5b:1d:3d:08:
                    17:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AD:92:37:17:70:AD:45:4F:34:D9:88:32:42:0F:AC:1A:01:E0:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18d6dd84-c46a-395e-b79d-7bc2e9aa045b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:9b:81:6c:7a:d9:76:e9:27:77:28:48:00:a3:59:80:df:d2:
         92:01:38:b2:8a:08:8f:1e:f7:70:38:19:79:6f:8d:81:fc:10:
         bc:7e:a0:4d:4c:f5:34:0c:0d:d9:23:67:2d:1e:e5:b3:a7:24:
         f9:06:3a:f4:e5:5d:65:31:56:98:9d:ae:89:6f:bf:80:ea:5c:
         4e:df:c6:31:a9:5e:11:83:b6:ee:b3:63:7f:77:ac:57:69:98:
         24:02:39:2c:67:4b:73:67:8e:07:b9:4a:ca:d5:91:4e:fb:ac:
         b7:f5:5e:10:76:57:ab:6d:f7:aa:c2:eb:b6:0b:20:be:51:40:
         d5:2d:1a:9d:52:11:90:b1:5b:85:3b:d3:0d:bc:6a:e4:a2:86:
         5b:2b:66:58:28:9c:bf:2d:79:eb:12:34:bd:47:ab:18:5f:1c:
         f3:36:ad:13:c6:68:c7:91:92:3f:11:bf:f9:cd:60:fa:4e:0f:
         b3:1b:47:31:e9:f3:fb:c7:61:c8:60:cd:ed:dd:43:61:f0:b3:
         56:5e:95:12:7d:8c:b4:3d:2e:f8:6a:08:c4:76:81:ee:0c:8b:
         84:c1:7c:c9:e7:34:7e:19:d7:93:f8:72:8d:56:eb:e5:c5:ca:
         a7:93:de:52:ff:76:a3:c1:72:1a:b5:d7:1c:3b:96:d1:c6:05:
         60:38:5e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:42:02 2025 by rpki-client