Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5846f7fa-c31b-3157-83ba-b174acac7fac.roa
File:                     5846f7fa-c31b-3157-83ba-b174acac7fac.roa (raw, json)
Hash identifier:          X3cATCj5s58RWbYuQBIGuGD3wtH67z/fuDRWdkLQ2tU=
Subject key identifier:   CA:33:E4:BD:2F:AA:44:D9:AA:E7:9C:CA:AA:AC:FE:32:8F:00:38:71
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849393E6BFE4318F643A2A80C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5846f7fa-c31b-3157-83ba-b174acac7fac.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     6939
IP address blocks:        166.0.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:6b:fe:43:18:f6:43:a2:a8:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=da98ef97-503e-4630-83e0-b72b270939ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4c:58:34:81:8b:b9:6f:02:fc:30:bc:a4:53:
                    6b:72:c0:28:83:c3:b4:7c:55:77:30:2a:31:ab:01:
                    68:b1:fb:5c:b2:ef:11:00:c2:04:25:4f:6c:e3:61:
                    94:7a:f7:df:3e:d3:2b:f8:51:a8:a8:e4:19:ec:5a:
                    9f:79:41:2c:ea:71:d6:98:f6:51:35:ed:50:1c:fc:
                    ae:58:a2:4c:b0:60:7b:be:08:7c:0f:02:ac:9f:69:
                    0e:9d:ee:06:61:fb:0d:00:d0:61:38:fb:1b:3e:12:
                    20:08:3d:50:b3:b9:f6:22:50:0e:42:3f:bb:da:d1:
                    6a:a6:f0:5f:50:75:c9:a8:ea:65:96:28:8f:cb:32:
                    1c:6c:ce:d3:bc:08:51:bb:d3:cf:ca:aa:56:a3:f1:
                    9f:f8:3f:10:82:2d:ea:ff:d7:2d:5a:2a:52:7b:c9:
                    c4:d1:bc:b8:2a:23:b2:51:11:fc:0b:2b:69:c9:cc:
                    c1:a8:0b:5c:3e:80:58:52:90:32:ca:36:65:02:49:
                    31:af:5b:c1:24:8e:b5:7d:2a:16:d4:01:f5:bf:b8:
                    4e:80:3d:1e:71:13:41:10:db:4f:ce:f5:01:b7:66:
                    44:45:b9:21:33:58:2e:d9:34:e8:d9:95:be:5d:44:
                    4a:29:f5:37:01:a3:94:5b:e9:8f:ae:43:d1:ac:78:
                    61:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:33:E4:BD:2F:AA:44:D9:AA:E7:9C:CA:AA:AC:FE:32:8F:00:38:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5846f7fa-c31b-3157-83ba-b174acac7fac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:55:17:16:c6:bb:c1:21:15:8c:e3:f0:3b:a6:e5:ee:3d:86:
         ed:19:ce:ad:ca:32:c3:f6:af:48:43:dc:d8:78:e3:a4:bf:77:
         87:21:ea:c3:31:ad:e4:79:b7:c3:05:ba:06:92:b1:b6:e7:ec:
         0d:21:76:12:98:6a:e2:c3:88:ad:b1:66:85:61:8a:68:af:f3:
         b4:1f:c5:31:3b:df:85:98:40:ae:62:52:d0:29:48:3c:ed:6f:
         65:eb:14:35:33:dd:f4:44:c0:df:b1:18:61:9a:ad:a0:16:4e:
         e4:e0:e7:88:61:03:99:03:8a:eb:20:13:0d:5a:91:f7:9e:7f:
         2f:b5:b7:c4:06:d5:02:9b:f6:93:b4:9a:52:13:4c:71:f7:1d:
         d4:fe:da:15:b1:3e:bc:e6:5c:27:b0:f6:28:bf:e1:ec:20:ac:
         11:c2:2b:9d:d7:47:00:bd:2d:f5:fa:5a:66:67:4b:ee:49:0d:
         8c:e4:02:12:86:1a:ab:f4:0a:6c:ba:3b:d7:a4:f9:fd:42:42:
         85:6a:1f:c8:a6:fd:3a:17:ca:37:64:ae:d2:ce:c3:2c:6c:10:
         f8:23:fe:45:e5:5b:29:22:35:d0:21:9b:c0:f5:76:c9:fd:61:
         09:52:32:dc:73:23:4d:db:79:8d:8e:bf:cf:6f:f5:fd:e7:bb:
         d7:2b:45:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:20:22 2025 by rpki-client