Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7b1cc074-b2a6-3009-89ff-89d17d71ef04.roa
File:                     7b1cc074-b2a6-3009-89ff-89d17d71ef04.roa (raw, json)
Hash identifier:          rG+ncRImjz33333brZNlTb98JsZ9Eu0zxQt2Iuf9Rk4=
Subject key identifier:   A4:4A:16:9D:E7:B2:86:8B:08:A2:3A:6A:93:4E:95:93:72:04:AA:26
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858494F93F0451C53553925E86E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7b1cc074-b2a6-3009-89ff-89d17d71ef04.roa
Signing time:             Wed 26 Mar 2025 01:00:40 +0000
ROA not before:           Wed 26 Mar 2025 01:00:40 +0000
ROA not after:            Tue 24 Jun 2025 01:00:40 +0000
asID:                     8881
IP address blocks:        166.0.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4f:93:f0:45:1c:53:55:39:25:e8:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 26 01:00:40 2025 GMT
            Not After : Jun 24 01:00:40 2025 GMT
        Subject: CN=5f03ebf6-2d2a-4b27-b5e7-2c76a3d02722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:11:9f:92:8f:59:53:e8:9f:51:c0:53:db:f0:
                    be:d2:6c:3b:40:07:ef:6c:f5:32:f2:61:42:26:48:
                    b1:93:08:a2:a5:b1:39:51:eb:83:a9:a7:e1:62:ab:
                    ae:7a:44:b8:00:b7:b7:29:1f:9c:8a:bc:29:65:03:
                    ec:4d:e9:13:aa:99:54:73:ab:ad:aa:93:24:10:6f:
                    78:60:cc:5a:e5:92:31:d7:51:90:a2:6a:b2:42:69:
                    e6:2c:6e:66:71:59:12:fc:4a:c2:3b:ae:3b:4b:fe:
                    1c:3f:73:4d:1e:df:b8:2d:1c:43:af:57:df:2a:22:
                    91:a7:8d:ea:14:96:3b:e2:3c:b7:f5:b2:a4:b6:03:
                    cf:a5:96:e8:3e:f6:e3:69:17:ff:94:02:2f:0b:16:
                    b8:18:52:19:de:e0:89:07:21:83:d3:37:fc:3d:ac:
                    36:42:65:91:83:a8:77:77:26:dc:03:e6:f3:4a:49:
                    d9:44:5a:c3:0d:a1:cb:cc:9b:97:a4:f6:1d:4b:33:
                    69:40:95:bb:33:e6:8f:58:c8:3c:37:73:6f:c8:6c:
                    f6:73:a2:64:f1:2a:a6:7b:76:ca:b5:c3:1c:7b:2d:
                    93:08:87:a7:4b:76:38:1a:17:50:18:0d:36:27:07:
                    db:d2:db:ad:d7:00:c0:cd:a4:b4:ec:21:12:c0:c3:
                    24:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4A:16:9D:E7:B2:86:8B:08:A2:3A:6A:93:4E:95:93:72:04:AA:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7b1cc074-b2a6-3009-89ff-89d17d71ef04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:c2:23:be:15:cc:34:5f:b7:e6:77:db:50:33:16:5b:94:3d:
         0b:b1:44:34:0d:85:2f:dd:78:c3:fb:73:f7:f6:5b:07:c7:81:
         0c:26:ce:4b:24:4e:fc:c8:7d:5d:0b:94:80:ac:c4:80:54:8b:
         fe:78:d4:55:82:d6:6f:cf:89:23:55:3d:1d:d4:5d:80:05:93:
         29:62:7a:48:e9:58:22:bb:dd:3c:fa:08:7a:28:77:10:fc:3c:
         78:a5:e6:4c:18:22:24:f1:bf:b8:40:a1:86:88:6d:a9:3c:be:
         70:37:71:75:22:3e:9c:a0:f7:f4:f9:ab:3f:26:40:ca:1d:97:
         71:72:cc:da:ff:c4:ea:40:37:03:34:8e:d7:03:6b:60:dd:b5:
         35:9f:0f:fd:3b:15:99:b3:49:75:eb:36:1f:20:78:ab:c1:33:
         82:e6:a2:6a:ce:05:f3:de:2d:0e:90:d2:0d:77:da:37:97:7c:
         c2:98:41:3a:0d:27:f1:8b:07:2f:31:88:dc:06:ef:20:3e:0c:
         8c:a9:e4:40:81:df:77:44:9e:a3:6e:1e:14:17:6f:50:e3:06:
         5b:97:bb:d8:d5:53:fd:06:41:05:a5:70:71:08:b3:9f:70:9b:
         42:15:99:ba:d2:fc:0d:89:9d:9a:5b:83:a2:e1:32:7f:93:dd:
         4b:76:da:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:46:51 2025 by rpki-client