Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55d4a070-057f-3ce4-aa26-33d908b4be57.roa
File:                     55d4a070-057f-3ce4-aa26-33d908b4be57.roa (raw, json)
Hash identifier:          dGl0fIxZ11Vj/94sC8tl5HbwNrP/H0cCBTBKOyU13E8=
Subject key identifier:   69:92:58:27:5B:E2:F0:EF:AF:7F:FC:D3:D7:19:36:D0:1B:59:4F:52
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849CFFF82A549F079AC4A49D1C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55d4a070-057f-3ce4-aa26-33d908b4be57.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     62240
IP address blocks:        166.1.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:82:a5:49:f0:79:ac:4a:49:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=7212b0f9-c032-4318-b70e-9fd61d371faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5f:54:16:de:44:73:a7:a5:22:be:82:89:a1:
                    d6:24:05:5d:a5:77:a3:c4:6e:52:7e:1e:cd:d1:a9:
                    71:6d:06:8c:79:b5:0e:86:18:53:d9:84:bf:46:41:
                    a2:a6:78:87:b1:b9:13:60:ff:4c:4a:b5:9d:fa:96:
                    75:0b:9d:d5:54:cf:6a:a4:7c:09:6f:13:b7:fb:82:
                    36:b5:61:b3:9f:1d:2b:57:be:cd:cd:2f:e3:15:5b:
                    c8:a6:3d:20:d4:26:13:51:26:29:43:13:6b:cc:64:
                    1d:c2:35:6c:2e:2b:24:68:92:13:36:9a:16:aa:bb:
                    2d:22:1c:8d:c2:87:ca:62:01:3a:fc:06:ea:4c:3f:
                    38:22:17:ac:ad:fe:ce:62:a6:16:73:6e:f8:b9:6f:
                    20:ae:cc:94:1e:63:1e:6c:00:c0:cc:ef:2a:b0:2b:
                    1a:ae:29:86:6b:68:8b:69:21:25:a9:e9:34:7b:6f:
                    42:09:3e:7c:5d:ce:e9:c1:7e:1a:2a:31:cc:78:64:
                    2c:8a:9b:bc:4c:9d:02:7f:2c:24:a2:ed:60:02:ea:
                    7f:1a:e4:ed:2d:37:7a:63:5d:3c:d1:94:89:91:87:
                    3e:24:e8:2f:ea:cd:9a:3d:6e:78:ea:7f:36:f5:be:
                    a1:a5:32:af:b1:16:d6:55:46:21:4f:44:8d:9d:83:
                    91:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:92:58:27:5B:E2:F0:EF:AF:7F:FC:D3:D7:19:36:D0:1B:59:4F:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55d4a070-057f-3ce4-aa26-33d908b4be57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:ba:4a:dc:73:50:39:04:04:9c:1d:9b:c9:ce:d9:9d:f2:36:
         94:9a:a4:91:24:78:cb:17:e3:7d:24:fc:ac:8f:6f:49:e0:66:
         89:7d:24:46:e2:2b:29:29:7f:b1:d6:0f:7a:18:1c:a7:57:5f:
         1d:4a:e7:fb:24:da:0a:17:17:b6:2c:2b:8c:1a:2e:c6:29:ab:
         5a:20:7f:7a:b8:9d:2c:73:75:09:f6:fc:5d:f6:3c:67:d8:d5:
         ae:5b:11:4c:82:80:fa:da:a6:31:f4:61:29:af:b6:92:6a:7d:
         64:dc:da:ee:d7:e6:92:0e:b8:fb:eb:10:a3:ef:ec:7e:a2:03:
         9c:b9:66:45:ce:5c:e2:cc:1c:ca:31:48:06:77:1b:84:3f:f5:
         e4:fb:36:de:57:3b:fe:e8:2c:9f:5e:0b:ce:87:8c:2f:33:bb:
         ff:00:17:14:08:cf:0a:43:38:59:06:d1:fe:77:c9:9b:8a:fe:
         0a:41:6e:d9:e6:30:0b:07:ed:f8:40:cf:1d:aa:46:82:f5:42:
         7e:31:7b:14:96:15:f9:d8:45:6d:82:d9:b8:6e:27:30:6e:07:
         ab:61:6d:c3:dc:75:1b:45:32:41:17:38:0a:1b:25:e7:12:1f:
         74:e8:c8:ff:d0:a0:b6:15:79:87:66:b0:cd:44:71:c8:97:14:
         eb:34:3b:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnP/4KlSfB5rEpJ0cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDUxMTAxMDA0N1oXDTI1MDgwOTAxMDA0N1owLzEtMCsGA1UEAxMk
NzIxMmIwZjktYzAzMi00MzE4LWI3MGUtOWZkNjFkMzcxZmFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF9UFt5Ec6elIr6CiaHWJAVdpXejxG5Sfh7N
0alxbQaMebUOhhhT2YS/RkGipniHsbkTYP9MSrWd+pZ1C53VVM9qpHwJbxO3+4I2
tWGznx0rV77NzS/jFVvIpj0g1CYTUSYpQxNrzGQdwjVsLiskaJITNpoWqrstIhyN
wofKYgE6/AbqTD84Ihesrf7OYqYWc274uW8grsyUHmMebADAzO8qsCsarimGa2iL
aSElqek0e29CCT58Xc7pwX4aKjHMeGQsipu8TJ0Cfywkou1gAup/GuTtLTd6Y108
0ZSJkYc+JOgv6s2aPW546n829b6hpTKvsRbWVUYhT0SNnYOR1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGmSWCdb4vDvr3/809cZNtAbWU9SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTVkNGEwNzAtMDU3Zi0z
Y2U0LWFhMjYtMzNkOTA4YjRiZTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJm6StxzUDkEBJwdm8nO2Z3yNpSapJEkeMsX430k/KyPb0ngZol9JEbi
Kykpf7HWD3oYHKdXXx1K5/sk2goXF7YsK4waLsYpq1ogf3q4nSxzdQn2/F32PGfY
1a5bEUyCgPrapjH0YSmvtpJqfWTc2u7X5pIOuPvrEKPv7H6iA5y5ZkXOXOLMHMox
SAZ3G4Q/9eT7Nt5XO/7oLJ9eC86HjC8zu/8AFxQIzwpDOFkG0f53yZuK/gpBbtnm
MAsH7fhAzx2qRoL1Qn4xexSWFfnYRW2C2bhuJzBuB6thbcPcdRtFMkEXOAobJecS
H3ToyP/QoLYVeYdmsM1EcciXFOs0Oz8=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:39:25 2025 by rpki-client