Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3417fc8b-b28d-3ee1-93b6-952ece55a01d.roa
File:                     3417fc8b-b28d-3ee1-93b6-952ece55a01d.roa (raw, json)
Hash identifier:          r/WR/yqKn4lbJ5I7VSmVu2NW0SwokeExNjwzooyuNvc=
Subject key identifier:   94:DA:A6:9D:11:60:78:61:92:61:6D:A2:6C:08:3C:83:AC:49:83:AB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858483F80304A4BA82D9AF79C6DC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3417fc8b-b28d-3ee1-93b6-952ece55a01d.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     62240
IP address blocks:        166.1.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:30:4a:4b:a8:2d:9a:f7:9c:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=d25ae832-4ad7-4714-b528-0290302da524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:f2:d0:55:8b:3d:2f:ba:86:bb:f4:c9:bb:
                    46:bb:4c:25:a5:42:c6:8e:db:fb:04:11:01:8d:ec:
                    08:d2:56:f1:ac:89:6b:e6:ef:73:64:94:a7:33:86:
                    19:03:eb:4e:9d:76:48:30:c1:6d:e4:d7:32:17:8d:
                    cb:82:a9:2d:d3:55:0a:9c:f1:d4:6e:a9:8a:09:79:
                    b2:c8:97:92:f4:85:f7:bc:bd:b3:1a:a5:f2:e6:69:
                    c1:65:4d:05:74:2d:b2:c3:83:f1:57:be:3c:f9:12:
                    b9:96:d5:50:ef:ef:78:16:3e:28:bc:e5:c7:d9:30:
                    d8:e6:87:25:84:f0:fa:00:f0:fe:9f:d0:cc:ac:b8:
                    b6:f6:8d:9e:96:70:11:63:10:01:14:3d:d2:65:d3:
                    89:81:41:7c:c7:f1:07:47:27:20:c3:c9:ec:5c:22:
                    15:b6:61:99:57:c9:8a:cb:85:5a:29:f9:b1:b9:ec:
                    57:12:26:b1:6a:28:f8:d5:d9:11:40:88:c8:55:44:
                    6e:1e:28:64:2e:4d:99:ee:76:cf:5c:65:23:ba:85:
                    62:c5:5c:43:bf:b3:8a:c6:be:43:44:07:ec:dc:b6:
                    92:4a:dd:a0:82:4b:16:64:b6:8f:9f:65:c1:b9:3c:
                    6f:48:73:1c:04:e7:0c:0f:af:23:78:b1:61:0c:15:
                    19:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DA:A6:9D:11:60:78:61:92:61:6D:A2:6C:08:3C:83:AC:49:83:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3417fc8b-b28d-3ee1-93b6-952ece55a01d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:80:09:ad:a3:2a:35:91:4d:51:b9:23:20:72:72:73:d1:ac:
         e7:36:66:33:b1:1e:9d:55:4c:8f:b0:87:fa:6c:01:1c:74:66:
         77:57:17:cc:48:ac:b9:48:00:0c:3b:d6:32:c6:fc:15:a9:38:
         6f:d4:a8:9a:b5:84:8f:74:83:0f:1c:09:1b:de:2b:35:51:a4:
         77:c3:9b:5a:29:b8:a5:36:68:b7:5f:6f:ec:fc:fb:9e:de:bb:
         6a:0c:d2:29:41:8b:66:6d:16:c7:5d:c9:e3:85:f6:4f:07:59:
         9f:cd:5c:28:30:f9:8c:b4:33:57:1c:33:05:3c:c3:69:35:b6:
         1d:21:e0:97:17:49:09:17:3e:c4:60:20:16:b6:a5:62:23:c3:
         d0:de:58:b1:7c:5b:25:6c:82:a8:b9:5c:de:56:5d:53:8f:23:
         10:ab:0e:11:cd:e6:c1:b2:db:0b:13:66:41:77:b2:c5:50:2e:
         b5:ce:26:75:48:fe:00:8f:9e:a0:2d:9b:43:17:fa:3a:cb:75:
         33:d3:b9:1b:9a:05:4c:0f:d5:c1:33:ab:4d:60:52:ad:8c:b8:
         61:e5:46:41:c9:9d:61:4d:47:8b:93:e3:b6:97:09:28:7c:21:
         77:fa:bf:8e:fe:26:16:d1:56:ef:83:10:6f:b5:45:14:a9:5f:
         24:01:4f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 04:50:45 2025 by rpki-client