Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/356d8e59-a654-3414-b6f9-3568bfccf513.roa
File:                     356d8e59-a654-3414-b6f9-3568bfccf513.roa (raw, json)
Hash identifier:          pUqYFMWHGkpGgYqe6UKbAtYdpgyy4Op6CUHGCepNHtI=
Subject key identifier:   20:3D:17:FF:30:3E:56:AA:22:07:2C:FC:98:6D:00:E9:C1:A1:B0:C1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A65CDCCBA097DF7393D3A0700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/356d8e59-a654-3414-b6f9-3568bfccf513.roa
Signing time:             Thu 03 Jul 2025 16:52:04 +0000
ROA not before:           Thu 03 Jul 2025 16:52:04 +0000
ROA not after:            Wed 01 Oct 2025 16:52:04 +0000
asID:                     28917
IP address blocks:        166.0.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:65:cd:cc:ba:09:7d:f7:39:3d:3a:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  3 16:52:04 2025 GMT
            Not After : Oct  1 16:52:04 2025 GMT
        Subject: CN=f979df66-cf84-4f7d-ba8e-0d1a9f1642d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ee:f1:6e:75:b3:cf:1a:7d:61:fe:64:8c:dc:
                    b0:e7:f7:31:3c:1e:d2:2e:62:09:3d:26:26:58:63:
                    5e:f8:ec:ed:98:a6:1a:2f:b4:21:4f:3a:ce:7e:57:
                    53:f6:19:37:04:50:68:fa:61:3b:5d:8b:6e:69:f3:
                    49:fc:7b:ec:cf:a1:8c:77:f6:90:73:33:22:de:21:
                    40:56:3b:8d:1f:cd:18:20:45:a8:51:db:eb:36:a5:
                    67:bf:77:da:91:f0:41:fa:ea:90:e0:ed:91:21:5f:
                    5d:73:8b:ca:3e:42:59:06:07:9a:19:ea:9c:96:05:
                    bc:11:d9:04:64:93:16:38:8e:be:19:da:a1:46:ff:
                    67:72:24:e4:28:de:4a:f5:4d:9a:d0:bd:b4:ed:24:
                    1d:d4:d7:f0:7c:91:12:f8:1a:11:29:ba:7b:29:77:
                    a1:4c:ff:cb:78:8d:59:5f:59:52:80:58:29:f3:2e:
                    bb:b9:d1:bb:05:ba:01:ab:eb:82:19:13:c7:ce:6d:
                    9c:69:40:64:d4:fa:cb:50:70:8e:cb:f4:c1:6c:3f:
                    af:38:de:eb:92:85:d0:4b:4b:bf:7b:2b:2e:5d:4c:
                    59:23:d3:e3:6d:25:8e:4b:ce:77:d8:18:09:59:d0:
                    1a:aa:4a:27:e3:e6:67:0a:f5:2d:60:31:2f:c8:5b:
                    06:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3D:17:FF:30:3E:56:AA:22:07:2C:FC:98:6D:00:E9:C1:A1:B0:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/356d8e59-a654-3414-b6f9-3568bfccf513.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:75:a2:49:0c:8f:a4:78:aa:62:8c:b6:93:14:65:65:58:45:
         5d:97:93:9b:4e:12:f1:67:4d:11:73:b0:88:f9:7c:33:24:d0:
         7a:45:1b:87:79:73:fa:7e:5d:1c:54:76:d0:23:cf:d2:69:2a:
         50:fa:ee:a1:60:7a:64:16:c0:cf:d6:95:74:1d:a6:5d:8b:81:
         ab:2a:27:f7:f2:eb:4d:ce:f1:b2:33:12:e8:47:53:20:42:06:
         f8:10:d4:21:eb:43:4c:40:1a:9c:d7:d2:96:45:f7:f1:24:1e:
         e1:1c:21:3e:7e:5c:22:36:91:91:fc:d2:f2:1a:de:eb:ca:40:
         43:bf:cf:62:59:ab:4c:90:15:64:65:60:88:d9:a4:dc:03:05:
         88:a4:b1:5e:89:c5:a6:ba:6b:18:95:a2:fc:bf:ee:e1:82:2a:
         7a:75:7d:72:dc:63:cb:65:45:28:fe:95:ab:d6:c2:84:ce:26:
         a7:cc:71:24:6d:5a:50:a0:61:48:8b:4a:7b:47:8c:84:25:bd:
         58:a5:6f:1c:5d:11:3d:68:a8:9a:e8:06:f6:4f:79:c8:5e:75:
         f6:26:69:c3:9a:e3:9e:fb:4a:2e:69:d9:ae:7a:d4:01:42:15:
         aa:60:f0:7c:b7:f1:69:d1:c3:eb:ee:ff:e5:bd:00:05:10:e2:
         58:a6:70:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 02:35:37 2025 by rpki-client