Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5568d380-88ad-3c3a-9988-83e0763779ba.roa
File:                     5568d380-88ad-3c3a-9988-83e0763779ba.roa (raw, json)
Hash identifier:          0lSn+fPDy1mk4b7trLpdU+k/ggUYiepK/UQe4GLQKQE=
Subject key identifier:   C8:38:74:B0:4D:7D:76:78:E7:D3:7A:5A:FE:4F:91:40:B2:5F:B2:81
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848F22C253FD2C31A968FE70FC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5568d380-88ad-3c3a-9988-83e0763779ba.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     58061
IP address blocks:        166.1.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:25:3f:d2:c3:1a:96:8f:e7:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=5aff3a35-926d-4af1-a5ff-a9ff692df640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:31:61:4d:5a:0c:19:3e:2f:b9:6e:cc:30:68:
                    71:8a:0b:a2:88:09:5f:b4:cf:64:0e:5c:c2:ce:d5:
                    e2:26:24:77:c6:35:f2:45:0a:f3:ef:60:2a:ce:37:
                    b2:90:d0:f9:29:cd:54:45:7f:52:62:59:66:b1:fc:
                    da:00:c2:a9:fe:8b:7b:e9:10:47:bf:ba:be:0c:58:
                    dd:58:3b:25:ec:11:98:cc:b7:78:9f:ba:7d:9e:e4:
                    6d:38:7a:bd:37:9c:69:ee:96:0f:03:94:d3:1e:8b:
                    ee:c1:f3:e8:70:9a:a3:ea:63:47:94:ad:95:64:ad:
                    a6:ea:3f:9f:5e:95:f1:e3:fa:ef:17:5b:e5:39:14:
                    ff:51:ef:77:9e:07:a7:0c:45:65:0c:71:5f:37:87:
                    0a:57:c8:84:78:2b:71:44:d3:8f:a1:f2:9b:a9:2a:
                    78:02:68:d4:1b:b4:72:5f:60:b3:ab:09:8d:62:52:
                    c6:67:b4:c7:a1:6c:98:03:4e:a2:5a:7f:1b:b1:3a:
                    f0:4e:e9:72:c9:00:8c:45:ac:01:03:ca:b3:ae:63:
                    41:33:8d:9a:42:06:68:8b:61:c9:27:ed:c7:a2:b9:
                    98:0d:65:6a:32:1a:2e:31:e3:15:eb:a3:31:32:e6:
                    d3:1a:c0:d0:ac:4b:08:20:f0:32:93:df:30:b3:be:
                    ea:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:38:74:B0:4D:7D:76:78:E7:D3:7A:5A:FE:4F:91:40:B2:5F:B2:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5568d380-88ad-3c3a-9988-83e0763779ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ba:53:e2:3d:2c:78:d6:a0:17:a7:7b:5c:2e:05:25:fb:08:
         48:9a:57:5b:f4:ca:20:39:00:d1:2f:db:1a:e7:18:5d:08:91:
         c1:e0:06:be:39:15:ee:d3:30:5e:e8:fa:88:9c:d3:8d:27:85:
         95:92:5e:73:51:89:ea:6a:56:7a:ff:12:30:dc:c4:61:a2:ac:
         da:39:89:ab:b7:ff:14:fb:1b:15:13:d5:60:a2:c7:90:21:4e:
         6f:48:41:65:57:61:d0:eb:18:85:c5:81:ab:44:6a:02:11:7c:
         56:27:a7:31:51:e7:45:01:bf:ef:0c:8d:66:1d:9c:29:b7:62:
         84:4d:c2:2b:94:af:2f:86:16:44:a9:74:08:48:a8:29:c5:a8:
         07:ef:d6:29:eb:a6:43:43:0d:26:ba:4a:f0:d5:18:39:6d:a4:
         26:c7:85:c2:f2:71:80:20:5f:77:88:4c:b8:69:fd:15:71:a2:
         3f:f6:f2:ec:3c:ce:c1:18:3c:be:18:f6:6a:22:85:5a:54:21:
         27:9a:f4:86:a4:39:a5:49:13:dc:ae:2f:c6:18:66:91:9e:94:
         f2:5c:a3:73:50:cb:07:93:eb:55:17:54:66:c6:3f:2d:bc:8f:
         53:08:ba:95:85:51:ab:cc:60:6b:cf:c8:bd:86:cc:e4:7b:a2:
         83:b7:96:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:27:57 2025 by rpki-client