Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21156f75-a089-3245-8b93-1b786f7ad453.roa
File:                     21156f75-a089-3245-8b93-1b786f7ad453.roa (raw, json)
Hash identifier:          YTidVv6Lg2ts395txB++awaWUPx+U55aZWyZSchkvmo=
Subject key identifier:   84:CD:FC:69:DF:95:69:A3:90:FD:F2:44:01:FA:DD:C3:09:39:DA:6F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848705AF9521BD779F8E4046900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21156f75-a089-3245-8b93-1b786f7ad453.roa
Signing time:             Sun 05 Jan 2025 02:00:39 +0000
ROA not before:           Sun 05 Jan 2025 02:00:39 +0000
ROA not after:            Sat 05 Apr 2025 01:00:39 +0000
asID:                     8881
IP address blocks:        166.0.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:70:5a:f9:52:1b:d7:79:f8:e4:04:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan  5 02:00:39 2025 GMT
            Not After : Apr  5 01:00:39 2025 GMT
        Subject: CN=ed354682-8532-4ad1-847e-6dca32f76612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a1:13:ae:7e:7e:53:17:3b:20:b7:66:f7:d5:
                    d5:d0:e9:bf:79:af:25:69:00:25:74:ae:e6:26:d9:
                    a6:48:cf:86:d5:62:15:5f:a1:a3:6c:2d:5d:55:aa:
                    ee:78:fa:27:8e:27:9c:b2:5a:7d:f5:cb:ce:58:c6:
                    52:fc:69:0f:f8:3e:90:5b:a4:e4:b6:9f:01:03:ef:
                    38:5f:bd:a8:25:5e:79:62:2f:45:bc:88:79:ef:3c:
                    4a:9d:9c:6d:76:1d:1b:64:7c:62:93:15:99:ed:0c:
                    05:e6:cb:0f:c7:4f:77:68:b1:cd:14:15:c7:36:d9:
                    b7:d0:58:c8:58:f3:2a:c7:d4:a4:ef:9b:b0:61:8c:
                    f4:0c:7b:5a:3a:11:a4:3c:28:bc:ff:67:c2:9b:f8:
                    bc:43:a9:d8:17:3f:5b:2c:c9:da:8c:2e:61:29:8a:
                    45:2b:b6:ea:db:1e:49:6b:21:93:ac:2c:7d:79:b2:
                    7d:45:d6:98:95:3d:ea:25:e8:79:47:16:cd:8e:3b:
                    37:09:8b:30:67:62:3b:81:4f:02:da:43:3d:81:16:
                    57:51:c5:5e:7e:ea:44:3d:fb:5c:44:0d:9b:f0:ec:
                    2b:f6:47:8f:ce:e9:fb:83:70:60:f9:f1:c1:a2:80:
                    ca:ab:c9:8e:3f:38:17:5a:3d:74:7a:75:fa:bf:10:
                    89:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CD:FC:69:DF:95:69:A3:90:FD:F2:44:01:FA:DD:C3:09:39:DA:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21156f75-a089-3245-8b93-1b786f7ad453.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:17:a6:52:3f:df:99:a7:a4:0d:ff:b4:e1:75:83:e3:79:22:
         37:f5:a7:2a:15:19:07:0b:ae:0e:fa:26:c0:18:dc:47:13:57:
         08:89:f9:1a:f0:e9:8d:d5:f0:73:48:71:79:4c:15:26:82:2c:
         33:6d:5d:cc:16:c9:f2:d7:ca:12:75:6a:21:4f:7e:00:a3:72:
         94:2d:a5:73:5e:ac:b2:f6:20:48:54:d3:26:e1:5d:0a:f4:d3:
         39:57:52:2f:89:40:29:59:f6:f2:df:50:0d:3d:58:c8:16:d2:
         f9:f5:2e:32:3d:0f:b0:a1:ad:05:7c:9f:d4:1d:03:6a:2c:80:
         23:d1:ca:7e:9a:22:30:3c:4f:08:da:31:5d:52:c0:01:5f:44:
         66:23:09:c8:1e:9f:72:36:1c:8a:b6:aa:42:3d:42:1c:c6:73:
         9b:aa:e6:21:a2:4e:f6:5e:fe:75:a0:95:54:0a:59:ff:86:1c:
         a2:62:32:bd:51:91:bc:78:c1:bb:d8:0f:21:44:97:15:bc:33:
         2b:b1:7c:0c:6f:c3:15:12:88:31:77:f8:9d:0c:d4:ec:e6:dd:
         f4:3d:8e:20:1c:7e:4f:f3:30:0d:1a:cf:3b:95:d8:6c:43:90:
         c5:5c:cc:66:7a:88:c8:ba:4e:dd:af:f1:ad:2e:e5:b8:0e:b4:
         f5:e2:82:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 23:02:36 2025 by rpki-client