Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20e35170-5b10-3644-98f3-4690c336a970.roa
File:                     20e35170-5b10-3644-98f3-4690c336a970.roa (raw, json)
Hash identifier:          8+eK3+Fe4ikWjXEAIET4H++XwAhY/wq5DvVEtDUTy68=
Subject key identifier:   BE:9F:07:6A:FA:2F:64:C4:B2:93:10:55:B9:2A:E9:98:BC:C4:85:D9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A03A551B23F521BDA89898880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20e35170-5b10-3644-98f3-4690c336a970.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     48614
IP address blocks:        166.1.70.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:51:b2:3f:52:1b:da:89:89:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=cdd3f619-1aad-44c5-8233-b348afd066d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:68:4f:82:13:e7:31:53:af:a4:fc:88:10:fe:
                    3a:8d:bf:8a:dc:48:05:24:4e:38:f1:42:c3:5e:e5:
                    17:35:7a:9d:4e:39:a2:18:cf:d9:e4:07:bf:e6:ea:
                    94:b4:30:91:19:5f:50:e4:52:a2:40:cd:07:82:8b:
                    9a:04:33:fd:67:6b:36:ce:eb:7f:2f:10:99:aa:52:
                    33:8d:76:97:1b:ef:25:bc:0a:ae:b7:0c:f5:3f:f2:
                    c9:c3:c8:00:eb:04:5b:4a:c4:93:7b:88:29:67:14:
                    d6:42:59:cd:83:9b:03:d2:b4:5a:c9:28:81:03:f4:
                    7f:72:b2:91:35:a0:b4:7d:a4:d4:9b:4f:7b:ce:44:
                    f2:e9:5d:7a:01:ed:8f:26:a1:e7:6c:41:09:10:a7:
                    0c:28:5f:3d:b5:96:73:92:6b:e1:00:fe:6a:a5:49:
                    89:30:fe:7f:82:3d:b8:15:0d:f6:24:39:dd:b6:76:
                    17:1a:45:4a:f8:ee:23:be:24:f4:95:0f:49:22:07:
                    cf:a6:90:b1:b0:ba:86:e4:15:32:eb:16:2f:a5:94:
                    be:2d:83:f8:09:fb:a5:f5:e4:61:48:0b:a6:60:71:
                    6a:33:58:c5:25:f3:9e:6a:8f:9f:9d:33:97:d7:26:
                    26:c1:b7:44:f0:fe:ff:c6:12:b6:7f:30:79:74:6a:
                    f5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9F:07:6A:FA:2F:64:C4:B2:93:10:55:B9:2A:E9:98:BC:C4:85:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20e35170-5b10-3644-98f3-4690c336a970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ea:44:37:b4:96:61:f2:c3:c7:af:91:3e:58:fd:ad:9a:b1:
         77:5b:01:a2:3a:b1:92:b5:7f:bd:a2:77:dd:51:e1:86:63:bb:
         06:83:f5:53:7c:e7:e9:eb:16:96:c4:73:6d:e9:2f:2d:91:93:
         80:66:03:d0:f2:69:51:9c:9b:6a:84:16:fb:11:97:6f:b4:59:
         f1:c2:34:8d:19:5b:7a:60:37:23:61:3d:fa:99:bb:65:75:c2:
         8e:a4:9f:f3:b7:67:5f:ff:46:9d:01:e5:52:7e:12:70:60:7e:
         36:6d:75:69:62:f5:14:5a:27:15:cf:e1:0d:3b:85:2e:f6:5a:
         6d:c5:b4:a0:48:18:0e:45:ff:3b:de:aa:f6:cc:a3:f1:b6:34:
         ba:67:48:8f:a0:ec:a0:66:aa:07:a5:f4:c2:84:32:a5:fe:a8:
         fb:c9:66:e4:96:ed:d2:0c:56:7d:b1:10:a8:6e:05:76:e4:7c:
         96:5e:83:1a:ce:28:c1:2f:6d:de:b8:95:27:2b:e3:b8:ec:4a:
         d7:99:51:22:17:3d:c5:85:26:92:83:be:2a:9f:0f:6f:7a:0d:
         84:fd:ca:87:a0:33:bf:b9:7e:1b:e8:5c:62:c0:b5:09:95:d5:
         4a:6b:20:b7:51:8a:8b:d9:06:bf:2f:26:db:cf:aa:59:c0:94:
         96:fc:a4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:52:10 2025 by rpki-client