Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20536365-fe52-3492-a5e3-fd9405f63a0b.roa
File:                     20536365-fe52-3492-a5e3-fd9405f63a0b.roa (raw, json)
Hash identifier:          8C+IsVrKG6m8VU8eJ9rIDqEb1cu7/wQz0xeqGIxsqUI=
Subject key identifier:   B8:2A:14:39:77:28:EF:4E:ED:46:51:5D:65:89:52:37:A3:CB:F5:08
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848F22C24596D6B7626FDDA19E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20536365-fe52-3492-a5e3-fd9405f63a0b.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     58061
IP address blocks:        166.1.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:24:59:6d:6b:76:26:fd:da:19:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=2ff54cd6-6e0b-4a53-b278-53f742f8e71a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8f:25:97:70:e3:01:62:71:12:2a:33:98:a0:
                    04:cb:b0:b5:d0:5c:17:84:bb:9f:24:49:1f:48:a4:
                    6d:df:3e:4c:85:84:38:5d:95:33:f4:fc:47:66:b0:
                    9d:22:8d:5a:44:49:d2:d0:20:ca:45:e5:27:ad:4f:
                    97:f8:27:f0:85:e4:17:e1:c9:c7:30:0f:53:77:79:
                    e8:4c:45:27:ba:40:88:e1:2b:54:31:ff:25:7d:93:
                    13:ed:03:9e:88:ac:a0:7a:23:02:a0:43:65:48:87:
                    bf:77:df:c7:94:1e:d4:45:d9:e9:fa:52:71:99:89:
                    07:83:d1:45:6e:75:43:62:e6:42:a8:e2:73:38:32:
                    d1:39:9c:99:fc:e1:84:42:53:c9:32:c9:ed:40:35:
                    36:93:c2:f9:cd:e3:75:2f:52:8b:29:46:55:9f:5e:
                    8d:28:7b:24:67:b5:e3:9e:a3:0b:cf:7b:50:27:91:
                    62:84:8e:78:1e:74:54:e4:21:0d:1a:48:7d:ec:77:
                    d9:c2:05:43:39:16:e9:57:0d:1e:ac:78:20:5e:e3:
                    0c:a6:03:75:21:ed:c7:ed:2e:d8:2e:cf:95:e0:f9:
                    9c:4c:cf:41:42:7a:b1:c8:be:3d:b7:76:0e:e9:57:
                    37:a5:44:78:91:a6:5d:31:6a:9f:40:82:bf:89:f5:
                    9c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2A:14:39:77:28:EF:4E:ED:46:51:5D:65:89:52:37:A3:CB:F5:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20536365-fe52-3492-a5e3-fd9405f63a0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:f5:fb:9d:ba:3b:50:1c:54:fb:19:91:96:5e:c6:15:43:aa:
         a0:de:89:da:22:93:4e:d7:38:54:31:55:0b:21:96:25:5f:54:
         f2:9e:c7:68:0a:fa:1e:d8:8b:7c:cc:75:89:37:69:7a:9b:82:
         ad:f6:81:5c:3c:f1:7a:8e:be:3c:9c:52:95:13:ad:b5:9f:64:
         83:e4:a8:c4:04:2c:c8:40:39:66:04:db:96:f5:bd:e1:db:97:
         0f:f9:17:39:b5:34:a3:5e:8c:db:9b:d8:52:78:ac:8f:0d:49:
         3b:91:fd:7b:41:a7:8b:d1:ea:50:19:95:fa:2c:5c:ae:56:76:
         9b:5b:f2:db:23:13:db:57:f7:24:0e:dc:21:57:1f:c4:3e:f2:
         54:61:fc:d3:b8:78:09:67:25:e2:1a:8b:ff:2d:95:48:d3:4a:
         40:59:44:3d:94:32:8b:7b:06:2d:6f:27:27:b4:18:f0:7e:34:
         58:90:b7:01:a5:e8:09:60:6f:50:7d:58:f5:97:2a:0e:23:cc:
         e6:b5:b8:db:e4:3b:50:fd:4d:30:d2:65:ab:f5:45:db:d5:2a:
         7f:70:b8:a3:26:9d:a4:a3:91:0d:dc:1e:d1:2a:8b:13:8a:f8:
         63:ae:07:0f:fe:62:e2:01:f2:bd:c2:d6:45:e0:f9:20:26:71:
         3b:07:83:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:01 2025 by rpki-client