Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/37fbaa82-e014-3250-b289-7d0f92614775.roa
File:                     37fbaa82-e014-3250-b289-7d0f92614775.roa (raw, json)
Hash identifier:          RQE96rWkOtWNJ1zEqdtmuxfUnzTkiul18SR5mHWZxKw=
Subject key identifier:   0F:82:26:4E:03:BC:C9:BE:44:10:8B:7B:D5:DA:A3:B9:C2:61:00:A3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848F22C242D040EFE34C6DEDE00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/37fbaa82-e014-3250-b289-7d0f92614775.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     58061
IP address blocks:        166.0.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:24:2d:04:0e:fe:34:c6:de:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=cdcd962a-0993-43a7-989f-4f41ca553cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:07:e0:b2:1d:67:68:75:10:3d:e5:6c:61:e5:
                    a0:7e:e0:9b:cc:af:2d:81:9b:6b:81:d2:a3:9c:92:
                    67:9d:ae:a1:4c:15:ca:39:a8:66:ec:71:34:6d:d5:
                    24:46:be:fb:ea:37:b8:c2:4e:52:2d:22:69:f9:bf:
                    e7:75:ed:c9:d3:1c:8a:69:75:16:aa:ca:70:25:be:
                    7b:09:22:85:ff:3a:c3:15:7e:68:eb:a1:79:24:8f:
                    d0:94:50:6e:76:c9:87:dd:79:11:4b:38:e7:8f:33:
                    53:9b:35:ea:aa:5d:24:6e:fc:0d:2f:7e:e2:38:6b:
                    1c:2f:b3:cb:54:84:bf:f7:0f:eb:4f:53:07:cc:b6:
                    ea:8b:94:2d:27:1d:88:d4:dc:bc:6b:e1:4b:0d:17:
                    c6:db:73:1d:3e:23:61:a3:61:58:a3:9d:81:f7:05:
                    db:6e:ed:7f:c7:11:68:97:6f:da:80:64:9f:f0:2b:
                    f8:53:ea:c6:c3:95:60:3e:e4:65:ff:a8:c5:37:00:
                    6a:5b:5c:ce:60:0c:1f:44:f6:85:3f:db:f4:a6:ca:
                    a3:fd:67:52:1f:78:7a:79:b6:e7:79:11:97:26:b5:
                    40:bc:32:c0:df:8c:2e:86:ae:a9:e0:18:c5:08:19:
                    75:79:be:5d:c0:2f:1d:18:86:95:89:0a:c9:e3:5e:
                    c9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:82:26:4E:03:BC:C9:BE:44:10:8B:7B:D5:DA:A3:B9:C2:61:00:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/37fbaa82-e014-3250-b289-7d0f92614775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e7:29:92:5f:6e:fa:30:54:f4:fa:12:89:17:46:48:88:ee:
         23:9c:45:3a:f2:e7:d6:b3:db:20:df:53:8e:cc:88:76:57:99:
         75:ef:8c:8c:b4:dc:e1:7b:a1:96:63:9d:dc:51:e4:a0:61:d4:
         8f:fd:60:7c:40:c4:6d:86:76:78:cb:af:41:5a:21:b0:b9:3a:
         5d:91:a5:24:0e:4e:40:be:87:d4:cd:10:d2:a3:41:7a:82:ff:
         22:77:45:78:06:e7:1f:9d:60:25:84:07:3d:f3:6d:d5:27:cf:
         8a:03:ee:4c:92:b4:a4:44:1f:d2:ec:d6:db:c9:c1:ca:66:9c:
         01:11:23:99:51:82:2e:08:f3:e3:e5:14:e2:bc:fe:9e:59:f3:
         79:b5:41:02:c7:da:16:0d:81:70:66:ab:92:17:12:ee:39:98:
         3a:ef:a3:68:ac:11:e3:94:94:01:e5:7e:91:d2:ce:2c:42:2b:
         40:5a:28:a2:5c:e5:b4:29:9b:d2:65:b5:66:ca:7a:60:72:7a:
         6d:b7:2f:46:c6:54:59:94:be:08:fd:ff:fa:6b:8d:17:83:e8:
         db:19:08:82:3d:c8:cc:7b:ff:a2:cc:af:e5:ab:ec:b6:73:dc:
         56:ac:60:b3:41:87:51:ac:e2:50:ee:d5:31:22:3f:03:23:e2:
         03:6f:8e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:27:20 2025 by rpki-client