Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7abad975-d20d-33c5-ac3b-950e751f0b47.roa
File:                     7abad975-d20d-33c5-ac3b-950e751f0b47.roa (raw, json)
Hash identifier:          GuCzrn4ZuFHm5lPiSGRRRyUgqe/vIYNzgX5FRT1yuZI=
Subject key identifier:   62:1D:B2:D8:76:38:26:30:7B:94:54:39:E4:9E:43:43:0A:EE:59:A9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848C58236C65414BF64C100CB40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7abad975-d20d-33c5-ac3b-950e751f0b47.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     58061
IP address blocks:        166.1.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:36:c6:54:14:bf:64:c1:00:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=ac96b373-9b5c-4421-a32b-f07e221051ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1e:24:f8:76:bd:d4:c0:32:9d:39:4f:c1:bc:
                    34:8c:96:d6:91:67:e1:af:d4:11:9e:4b:78:b3:fa:
                    f9:f7:a9:e0:a9:06:ec:91:95:5b:28:20:3b:bc:83:
                    51:ef:a3:12:61:71:c7:b2:59:f4:cb:70:5d:6f:1c:
                    e8:ad:aa:40:c0:61:22:86:f1:ab:a7:03:85:f9:ef:
                    da:a8:f8:bf:aa:3a:60:c7:da:45:79:a9:c1:49:bc:
                    20:dd:d7:80:ad:c4:15:b2:48:23:6d:62:fe:f0:ac:
                    14:61:8e:49:00:a7:68:b0:73:36:d5:d0:e9:71:37:
                    33:59:88:a7:40:52:da:24:bd:37:0e:80:9b:b4:73:
                    23:ae:a3:fe:c4:b1:31:d3:d1:1b:4e:3e:70:46:2b:
                    5f:42:68:b3:20:a9:dc:5f:e6:b4:e6:57:dd:ed:73:
                    89:81:24:2b:fb:bd:ce:c8:2b:e7:cc:5f:7e:9b:1f:
                    d7:4f:ed:d9:87:7f:8a:d7:ac:7e:5c:2e:f7:0c:af:
                    52:7c:59:2f:1a:5b:bb:a8:31:e2:b0:f8:89:91:c3:
                    6b:d4:59:c1:6b:6a:49:83:4f:de:e0:6d:0a:be:70:
                    2a:79:5d:95:7e:6a:2e:ae:6e:6d:2a:b7:7e:c3:e5:
                    c3:86:a9:64:ba:42:f9:86:dd:cd:26:9c:63:3c:1e:
                    ef:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:1D:B2:D8:76:38:26:30:7B:94:54:39:E4:9E:43:43:0A:EE:59:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7abad975-d20d-33c5-ac3b-950e751f0b47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:07:10:46:b7:d4:65:8f:2c:5f:4e:3d:08:72:75:8d:84:b4:
         3e:d9:a2:ee:b8:63:ea:7b:17:33:46:6d:c3:fa:59:5b:3d:50:
         d0:6c:48:8b:e2:e1:c9:b4:ed:6e:a7:66:12:f7:c8:b4:ad:e0:
         29:d4:4e:2f:6c:2d:e9:e7:f4:c1:1b:83:ee:c0:23:38:bd:6d:
         b8:15:e2:c6:6b:35:3d:1e:7c:d4:7a:f8:ca:0e:1d:22:16:21:
         07:40:d3:10:f0:37:83:da:4a:11:7f:2d:85:28:9f:bd:26:ed:
         56:66:43:75:4e:02:78:d0:e0:18:29:e2:85:ab:49:0e:e7:1f:
         43:60:4a:bf:41:e4:37:6d:8f:42:57:c9:8a:56:f1:28:f7:88:
         72:14:0a:d5:3a:a9:66:4f:cb:81:38:a7:55:69:d3:27:a9:a4:
         5e:b1:c5:a8:06:3d:41:ee:a1:74:02:36:d9:57:07:a8:f7:d5:
         b8:ec:cd:e1:b8:e3:bb:93:17:a7:bc:90:12:52:91:a4:eb:d8:
         9e:9e:4d:50:09:0e:45:68:6c:a9:47:60:c1:73:33:13:5f:17:
         bc:cf:8a:63:98:f3:7d:c8:ac:59:46:fb:00:43:14:bd:5b:6a:
         83:08:dc:91:33:e7:6a:f7:2b:de:e2:ae:08:b3:1d:e9:92:5f:
         59:6d:bf:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:06:00 2025 by rpki-client