Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6f458e09-3327-3b31-84a7-833db56ec10b.roa
File:                     6f458e09-3327-3b31-84a7-833db56ec10b.roa (raw, json)
Hash identifier:          Dte20P61A4grhUcKb46dstlWG+XfcamuEnc+wF76mAs=
Subject key identifier:   FF:96:06:40:72:BB:1C:14:C7:F5:33:15:58:21:E5:40:92:A9:99:0D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849ABB4970B59CFB4DC290FF840
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6f458e09-3327-3b31-84a7-833db56ec10b.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     401152
IP address blocks:        166.0.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:97:0b:59:cf:b4:dc:29:0f:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=c4e6694a-0dfc-4819-9151-98795dc17ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a4:cb:e3:f1:df:a5:f0:d0:b4:a3:50:c8:6a:
                    5c:e7:64:2b:0e:ca:82:e6:27:ac:12:12:5c:c5:72:
                    f0:92:c4:03:19:09:3f:59:cf:9b:57:ca:e2:42:8b:
                    58:40:8a:13:ea:af:b1:8d:ad:c9:7a:53:c9:a2:33:
                    b0:1a:a8:03:54:02:3b:fd:f0:07:0b:33:c3:9b:ff:
                    16:87:b1:6a:1c:96:c3:f0:78:af:ee:76:92:f2:2f:
                    94:96:44:3f:a7:04:6e:fa:37:3b:af:26:e8:97:97:
                    8e:91:d1:19:48:e3:1c:a3:50:55:28:47:73:82:10:
                    2f:72:cf:6a:c8:84:a1:17:e5:7b:37:92:2a:11:56:
                    dd:f4:0d:45:ce:08:41:82:ae:4b:1b:fc:65:17:06:
                    2f:ca:99:47:9f:c3:9d:ea:ca:ad:1e:21:fd:d4:1b:
                    cb:d5:d4:fe:1a:2c:74:c9:e2:ca:0f:7e:d8:90:66:
                    97:94:2b:e1:3c:a1:59:f8:d1:6c:0c:34:f3:00:bd:
                    38:0f:81:99:7f:8a:e1:ff:52:31:04:59:bb:77:b9:
                    6d:ef:93:e7:af:27:0d:b3:20:d4:dd:09:10:4f:ed:
                    ea:d5:49:6f:5f:46:f4:cb:6b:9b:11:9d:7f:f6:cd:
                    14:a8:58:66:12:94:3b:33:82:d9:92:bf:c0:ae:45:
                    ec:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:96:06:40:72:BB:1C:14:C7:F5:33:15:58:21:E5:40:92:A9:99:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6f458e09-3327-3b31-84a7-833db56ec10b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:85:96:33:27:74:85:b1:44:24:1f:fb:ed:28:a6:4f:49:e6:
         5a:00:da:16:1b:23:35:fd:6f:f7:8e:0e:b8:76:7f:ce:3d:f6:
         4a:8d:b0:99:15:64:d9:06:7b:aa:fe:22:74:ac:70:5a:d6:96:
         5a:79:a9:52:26:20:1d:4c:c4:d1:ce:0d:65:95:61:f6:c0:f2:
         a9:d1:f5:9c:9e:87:13:60:81:6a:51:cc:e1:ae:51:3e:5d:80:
         28:63:d1:18:d4:43:f9:56:99:31:80:44:9f:37:68:6f:aa:68:
         ab:5b:83:5f:e1:d6:05:7e:d8:a2:52:33:62:90:94:3c:29:de:
         48:ad:bc:63:a8:63:da:2f:59:57:14:5d:89:e4:9d:d6:d2:8a:
         dd:7e:da:46:e5:c9:45:ff:4b:8d:f2:5c:d9:f2:20:23:0a:d0:
         94:1a:e2:65:12:32:bb:9a:bc:e5:91:59:64:42:87:66:50:ec:
         53:00:46:fe:8f:24:83:1e:79:77:bb:71:3d:74:5e:3e:8c:94:
         f9:bd:1e:38:92:61:80:00:0b:9e:3c:e2:43:05:a0:b2:e3:68:
         92:ce:98:54:b6:96:dd:cb:b8:9a:34:97:ac:7f:7d:8d:56:e4:
         30:fe:7c:76:d2:82:51:41:8d:5b:ff:f9:14:00:5e:09:0d:16:
         c3:2b:87:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:09:28 2025 by rpki-client