Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b753f9b-d784-34fc-8970-b25c93401af5.roa
File:                     4b753f9b-d784-34fc-8970-b25c93401af5.roa (raw, json)
Hash identifier:          b+uJHdDxiEnGePHeA6JbdyqMj2/hdp8wblV68Y3uT3o=
Subject key identifier:   A1:E9:00:23:FF:3E:A7:A2:8F:48:2C:15:02:FF:4C:CA:75:40:F5:AF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A1DC4154B097052CC548A3DC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b753f9b-d784-34fc-8970-b25c93401af5.roa
Signing time:             Sat 07 Jun 2025 21:34:17 +0000
ROA not before:           Sat 07 Jun 2025 21:34:17 +0000
ROA not after:            Fri 05 Sep 2025 21:34:17 +0000
asID:                     401152
IP address blocks:        166.0.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1d:c4:15:4b:09:70:52:cc:54:8a:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  7 21:34:17 2025 GMT
            Not After : Sep  5 21:34:17 2025 GMT
        Subject: CN=a13ad8ba-e5ae-44f9-bdf3-19db61654e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:49:c2:4e:63:1b:34:43:f3:b6:61:46:f4:99:
                    04:e2:63:93:80:16:2d:5f:21:a0:9c:44:08:75:cc:
                    2a:1f:38:14:70:fd:b1:04:2f:60:6b:7d:8e:8b:85:
                    38:84:94:d2:8d:12:15:4e:a3:4f:f0:da:33:cb:87:
                    eb:c8:59:df:a8:62:27:a8:87:d6:ae:ef:06:60:a1:
                    1e:3a:07:bc:54:53:fc:36:14:3e:bc:48:49:f1:54:
                    73:f7:bd:e2:4b:be:9f:1e:b7:e1:fc:f7:9b:1e:34:
                    6f:76:90:c6:29:96:7a:d3:f7:a5:79:29:da:8b:99:
                    6a:be:a8:82:dc:d0:cb:b2:19:ab:50:ce:3a:b5:f1:
                    47:9a:c1:8f:ca:05:fa:b1:51:dc:40:89:7f:5e:57:
                    2b:ed:90:c8:9b:70:34:42:5d:6e:ce:c4:61:cc:31:
                    b1:6f:19:12:15:91:87:df:62:d0:9a:0d:19:da:d9:
                    03:7d:17:5f:04:79:e4:c7:b2:d9:d6:a7:af:35:2b:
                    0f:08:e2:7a:af:22:3e:24:49:9b:6c:2c:fa:93:1a:
                    01:f3:28:71:13:27:03:c9:34:e8:8c:5b:25:01:4e:
                    6b:9d:5e:ce:f8:52:47:e3:5e:b3:ff:28:f5:16:25:
                    28:32:e1:62:99:e6:63:4c:33:8b:ba:a4:ce:35:44:
                    a3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E9:00:23:FF:3E:A7:A2:8F:48:2C:15:02:FF:4C:CA:75:40:F5:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b753f9b-d784-34fc-8970-b25c93401af5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:71:4b:ea:28:1a:3d:33:66:97:ba:6d:30:97:9d:82:52:30:
         ce:cf:55:d4:42:d3:31:f1:26:a9:ff:0c:62:eb:80:56:b1:3a:
         39:ac:2d:47:12:3a:ff:8f:c2:26:83:e2:8a:20:47:c2:02:97:
         65:77:94:8a:70:fe:b4:1e:b1:6c:68:dc:8b:08:e8:49:ce:15:
         5b:c6:40:12:f5:e2:71:4a:d1:71:63:cd:83:56:49:9f:71:f2:
         04:8e:07:65:4b:47:1b:c6:6e:79:1d:8a:8d:ea:c1:58:68:63:
         f7:a3:3c:58:a4:93:e5:66:a6:53:36:1c:c3:f4:07:a0:09:c2:
         a7:d6:5f:f1:21:4d:b6:93:99:7f:a5:50:b4:97:77:62:75:a0:
         48:0b:7a:ad:62:1c:c5:43:84:8f:9d:59:7e:58:a6:9d:10:a6:
         7f:6d:94:b1:dc:91:05:5b:ac:f7:f1:bb:c8:be:4d:2c:96:86:
         f9:4e:7c:2d:c4:bc:1f:fd:11:7e:05:04:dc:71:81:e4:79:8f:
         22:ac:fa:40:73:72:01:e8:93:81:28:5c:92:91:ea:d2:a7:9f:
         ba:c8:c5:12:a9:b0:ca:a5:0b:b4:65:65:41:18:99:64:8f:7a:
         c0:8f:21:7a:31:71:e2:e3:84:4c:d4:0f:05:1b:d9:04:dd:50:
         1e:97:ce:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:23:10 2025 by rpki-client