Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7056c44c-183e-3662-9ded-b0e8e9562612.roa
File:                     7056c44c-183e-3662-9ded-b0e8e9562612.roa (raw, json)
Hash identifier:          m7htPQ1jbVALoFtK4ZIeRNj6p+OwL02pkr+VjD5bm6o=
Subject key identifier:   F5:30:AC:E6:D3:8F:35:16:A1:E9:AB:EB:DB:98:CF:65:CC:FD:87:F9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849393E6B748DB727388CF2E400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7056c44c-183e-3662-9ded-b0e8e9562612.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     395111
IP address blocks:        166.0.182.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:6b:74:8d:b7:27:38:8c:f2:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=5a4fa620-fd6d-4ff7-a8f7-8362171445c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4a:88:b3:e1:99:ee:ca:5c:5f:aa:4d:7d:22:
                    2b:3e:df:7d:19:20:a6:f6:91:83:16:0f:e9:51:f7:
                    7f:9d:5f:07:4a:3c:66:4a:62:d8:e4:4f:1d:4e:02:
                    3c:91:66:0f:d4:00:8a:ec:3a:4b:a5:5b:12:c9:e0:
                    6d:45:c7:f0:e3:cc:2e:7d:59:4a:fe:c5:bf:8f:22:
                    e9:54:d2:a7:af:f8:3f:03:ea:99:b8:a7:f8:bf:2f:
                    b6:bb:9b:ee:33:4a:06:64:41:e8:a9:da:c4:44:cb:
                    a7:a2:fd:35:00:a8:26:14:e5:4b:72:0d:fe:2a:cd:
                    ad:2a:e7:3a:89:d3:d4:1b:46:80:53:60:94:1f:3b:
                    4a:f6:37:ae:65:c7:77:67:e7:c6:cc:63:7a:60:a2:
                    0b:47:f0:1a:5e:98:e0:7f:86:19:66:fa:00:35:81:
                    da:29:24:bc:f2:d0:e3:3c:d7:e4:58:1f:e9:0f:5d:
                    a9:9b:61:1a:a7:85:5e:3a:3f:8a:c9:c5:2f:6d:15:
                    98:ec:92:24:3a:15:49:68:eb:6c:c8:15:3a:8e:f5:
                    23:e6:78:8e:a8:19:ed:bc:99:71:12:d2:5a:8e:29:
                    ec:3f:94:b7:1b:08:c5:6b:3b:ed:76:35:98:f5:e0:
                    fd:f5:bb:9a:52:95:36:7e:62:f8:11:95:0b:83:93:
                    92:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:30:AC:E6:D3:8F:35:16:A1:E9:AB:EB:DB:98:CF:65:CC:FD:87:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7056c44c-183e-3662-9ded-b0e8e9562612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:e2:fe:05:44:fc:a2:2f:39:e2:96:cd:33:0a:bd:79:dc:8c:
         a6:e4:6c:ad:c7:93:bd:32:cd:0c:c3:b7:03:5b:fc:12:14:41:
         07:15:18:a9:79:a2:90:fd:15:44:22:0d:00:e2:fd:4e:41:3b:
         32:bb:5b:1c:46:4c:13:1a:4d:00:ae:15:40:5c:0f:c7:ff:b5:
         4e:e0:a6:8f:b1:50:e8:4c:68:da:6e:5f:d5:de:5d:4e:56:60:
         54:27:b8:b1:ef:fc:8c:03:ff:c7:20:4b:58:ea:b4:e2:dd:70:
         60:c7:81:cf:c7:d5:8e:19:ae:16:11:be:4b:27:5c:78:bb:4f:
         87:1c:25:8a:df:36:e6:3f:a5:2f:df:5f:52:ea:1d:ef:e0:b9:
         79:03:30:06:69:f2:c4:85:16:fd:0b:6c:e7:a9:14:b3:ba:dd:
         f7:d8:ee:71:ff:6c:ed:77:88:a5:97:f7:a7:26:a8:82:de:9b:
         f7:63:c1:bd:2a:fa:da:a7:86:ff:c9:f0:3b:f9:e6:10:9b:a9:
         f9:40:76:35:6a:4a:79:51:47:19:cf:87:c7:05:dd:4b:da:24:
         bd:96:2a:be:14:c2:25:d5:20:df:fd:d2:37:d3:85:6a:9c:f0:
         3c:2f:b8:ef:03:3a:a5:7f:95:df:ba:47:ba:1a:00:fe:eb:77:
         95:67:f1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:37 2025 by rpki-client