Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/27ca0dea-835f-3c46-9bc2-8a9fd57618ce.roa
File:                     27ca0dea-835f-3c46-9bc2-8a9fd57618ce.roa (raw, json)
Hash identifier:          v4rXTBf185CU/9VaHB60gAGz7k36WZ8jddsdvFoNs8A=
Subject key identifier:   CE:7F:E2:82:03:8F:F6:9F:83:0D:45:BB:03:78:E7:91:01:C0:45:35
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849E68A19342F46D2D40CAEC900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/27ca0dea-835f-3c46-9bc2-8a9fd57618ce.roa
Signing time:             Mon 19 May 2025 02:48:00 +0000
ROA not before:           Mon 19 May 2025 02:48:00 +0000
ROA not after:            Sun 17 Aug 2025 02:48:00 +0000
asID:                     395839
IP address blocks:        166.0.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:8a:19:34:2f:46:d2:d4:0c:ae:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 19 02:48:00 2025 GMT
            Not After : Aug 17 02:48:00 2025 GMT
        Subject: CN=54a66b94-64da-4195-af95-6f20784769ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:eb:0e:75:e5:94:cc:20:94:37:e7:ea:08:37:
                    f6:c0:e8:c9:fc:3d:1b:bb:08:bd:4b:4e:be:2d:c8:
                    7d:c3:99:78:7e:4e:34:33:de:ad:2f:84:bc:c7:38:
                    d9:96:65:58:13:e5:88:ea:d8:9c:b7:f7:cb:5a:e0:
                    87:9f:1a:2f:78:6f:39:5d:a5:4b:9b:c7:33:2a:92:
                    0c:20:78:6e:a1:97:0f:d9:0f:1b:63:25:7f:8e:5e:
                    e4:fd:55:59:00:bf:c9:3e:e8:2f:0b:a1:d2:b6:8b:
                    45:a6:7e:21:07:ec:23:2e:80:e8:10:1a:e5:70:0b:
                    1b:dd:e9:c5:a4:27:8f:14:23:3a:44:48:81:08:13:
                    ef:e4:60:66:b7:e1:1a:c7:cc:8a:cd:7a:49:25:c5:
                    d7:8c:76:b1:94:fc:aa:27:03:8c:49:6e:ae:9d:39:
                    c6:8a:12:ef:be:28:3d:fe:f8:b3:d7:26:78:7d:ba:
                    66:28:5b:76:2a:f3:07:e9:b5:43:be:3a:4c:79:63:
                    ac:2e:91:05:d7:ec:b5:e8:c3:88:3d:10:8b:7e:a7:
                    7e:81:b4:55:4e:2d:29:ca:fb:c4:e0:69:9e:ba:43:
                    1c:8e:df:6b:1c:7b:28:05:96:e0:3a:d1:68:69:6d:
                    b7:c4:83:0c:2f:35:5a:10:58:90:e7:e6:10:d4:a4:
                    16:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7F:E2:82:03:8F:F6:9F:83:0D:45:BB:03:78:E7:91:01:C0:45:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/27ca0dea-835f-3c46-9bc2-8a9fd57618ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:1d:6f:97:6c:86:80:9a:b5:0a:00:6b:ee:bd:7a:cf:94:7a:
         87:93:ae:12:b1:e4:1a:85:da:ea:a8:a1:b1:41:e5:c1:13:5c:
         ca:a7:1a:ed:ae:ee:b6:65:95:99:39:39:8e:d0:54:4f:64:bc:
         d4:bf:db:3f:86:9e:32:3b:2f:f2:c6:11:46:69:36:3e:03:f4:
         ee:14:35:a1:c0:f0:a3:73:5c:85:24:3e:b7:5c:6d:c7:88:15:
         8c:8a:49:24:92:95:00:e1:71:9b:29:0d:49:b4:09:dc:27:bc:
         83:bd:77:d2:22:25:5b:da:54:14:b6:9d:7f:b7:e4:fe:ce:50:
         7a:17:d7:a4:f5:66:3c:d8:0e:70:0c:c5:fe:c1:4d:ea:0f:7f:
         00:98:4f:fb:30:90:b8:17:d8:35:8b:7c:1e:8d:80:9a:86:01:
         dc:5a:c3:33:9e:f6:19:0b:9b:8d:e8:59:ef:25:5c:85:78:a3:
         4c:20:81:e6:68:1b:79:1e:08:be:e7:5a:16:d3:e8:e2:5f:80:
         47:2e:0b:c4:6e:3e:af:7d:22:6b:d1:72:e8:fa:fa:c0:90:20:
         07:94:a9:97:e8:91:1e:18:c4:3f:66:6e:65:4e:cf:bb:df:d5:
         cb:04:04:3e:79:12:ef:18:97:cf:f2:67:cd:95:e7:83:91:34:
         13:ff:67:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:46:05 2025 by rpki-client