Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/75294ed1-8051-39d3-a528-faa4cde12bf4.roa
File:                     75294ed1-8051-39d3-a528-faa4cde12bf4.roa (raw, json)
Hash identifier:          bztLX2mtZcSEYjfdzh2qNoUfsqopedxWKV2HXIVu5G0=
Subject key identifier:   96:0A:85:51:D4:2D:8D:00:D3:1C:8A:6E:02:D9:D9:7C:21:4C:B0:FF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858491C9263A59598F86B2A68CCD0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/75294ed1-8051-39d3-a528-faa4cde12bf4.roa
Signing time:             Fri 07 Mar 2025 18:31:25 +0000
ROA not before:           Fri 07 Mar 2025 18:31:25 +0000
ROA not after:            Thu 05 Jun 2025 17:31:25 +0000
asID:                     401152
IP address blocks:        166.0.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1c:92:63:a5:95:98:f8:6b:2a:68:cc:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  7 18:31:25 2025 GMT
            Not After : Jun  5 17:31:25 2025 GMT
        Subject: CN=c57551d6-f363-44f9-9a18-5522f01dce81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:26:e7:4d:e5:fa:fb:7d:4f:0b:9e:4e:8f:6b:
                    79:49:fa:ae:a7:3f:4c:ba:05:fc:00:40:87:7e:35:
                    26:b3:4c:74:bf:9c:b6:17:6d:bf:76:67:6a:04:ff:
                    bb:71:91:be:0c:8c:5b:e7:05:38:54:98:6e:0a:36:
                    81:20:30:50:4b:98:b5:3e:e4:fd:44:ed:ec:86:7a:
                    1a:ec:55:f3:49:b8:67:50:58:75:08:a3:51:9d:49:
                    17:c1:ec:09:df:9c:e7:79:17:7a:6c:66:8d:bf:45:
                    4a:e2:2a:cc:fc:9a:cc:58:76:48:ea:d0:0a:72:f4:
                    b3:35:4a:61:29:eb:56:71:f8:32:43:14:9b:5f:1e:
                    ae:2d:e0:71:b3:f0:79:50:0d:11:a4:ec:49:49:72:
                    83:a6:58:87:57:ec:35:b9:e2:06:93:15:d3:7a:4a:
                    2c:c2:13:9f:f7:9e:1c:eb:10:d2:cf:6f:e1:dc:7d:
                    7c:ce:60:c7:1e:d3:4e:1d:23:a3:48:ff:6c:18:5e:
                    eb:f4:31:35:42:d4:d4:ab:e5:43:40:e3:a3:d0:01:
                    79:af:6b:9f:91:84:14:73:d2:f7:54:52:60:7f:02:
                    60:c6:1b:3d:48:f9:27:cd:91:9a:2c:75:a5:f9:0b:
                    f4:c5:1f:a1:71:02:66:39:bb:4d:73:e7:0d:97:6c:
                    0b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0A:85:51:D4:2D:8D:00:D3:1C:8A:6E:02:D9:D9:7C:21:4C:B0:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/75294ed1-8051-39d3-a528-faa4cde12bf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:27:af:1d:00:70:33:84:98:62:23:b3:bb:ed:36:5f:14:7b:
         22:37:8c:c6:f5:9d:ae:83:aa:58:e2:d5:ea:d9:6c:cb:ee:ce:
         56:16:af:5e:c0:2e:78:5b:e6:76:2b:00:74:e7:76:5a:56:0f:
         54:f3:01:7c:16:c7:51:f5:6b:98:eb:c0:53:8c:0e:52:42:4c:
         36:16:65:53:78:7e:12:d4:cc:70:29:80:07:25:3f:ed:1f:c7:
         29:a5:16:c1:e0:cc:aa:69:e1:46:72:1c:84:60:e6:01:56:65:
         0f:92:1f:74:d9:12:3c:01:c4:ae:48:eb:9e:ad:4b:c3:5f:ce:
         d1:1c:98:81:b8:36:e4:1b:98:7f:7f:75:cb:90:32:74:b5:50:
         a0:74:9f:79:73:90:9f:43:c0:b2:ea:0d:e9:88:15:6b:d2:48:
         bc:98:35:0e:42:2e:67:9b:80:fb:87:99:e1:eb:ae:e2:20:54:
         d2:fa:3c:83:ff:00:ae:35:b0:9a:15:83:e6:a8:a0:f0:ff:c8:
         1b:db:a4:64:16:4c:b1:6c:eb:b9:0e:76:60:93:91:00:1c:a1:
         d2:af:15:b4:46:a8:c1:97:82:8e:b9:06:0f:cc:60:36:ad:da:
         de:98:93:88:b0:0b:fd:e5:88:8a:d8:e7:25:af:8d:15:55:e0:
         41:21:fe:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:52:40 2025 by rpki-client