Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7c06209a-9bb1-35bd-a962-94d8b47105ae.roa
File:                     7c06209a-9bb1-35bd-a962-94d8b47105ae.roa (raw, json)
Hash identifier:          ilL7s9+83mSJRctsns53CemEttMuNiPqerJJsPUySSg=
Subject key identifier:   C4:43:AE:F7:B2:58:57:64:92:56:4D:AA:EF:69:61:B7:49:16:A4:39
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849D1654EA6E736934D0C79A700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7c06209a-9bb1-35bd-a962-94d8b47105ae.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     58061
IP address blocks:        166.1.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:4e:a6:e7:36:93:4d:0c:79:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=4fe65380-4499-4f53-bb68-0a7148978097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:be:7b:be:00:cb:9d:af:5f:b8:a8:a6:1c:b9:
                    a7:59:2a:40:13:7e:cb:fa:19:09:e8:20:0f:8f:ae:
                    0b:a9:d7:0f:a2:62:ab:bb:b6:1b:59:22:24:8d:db:
                    1d:67:9c:1b:6c:96:79:09:9c:18:89:30:2b:37:ef:
                    2c:7a:11:2d:d0:e1:38:04:6b:2f:74:ff:91:0e:cc:
                    21:c7:23:dc:bf:3a:de:0a:a4:69:22:cc:12:69:ff:
                    9a:a5:0e:bc:f6:ac:98:c2:1e:24:6c:90:b7:75:34:
                    09:8d:1d:da:85:d4:a3:7e:9f:64:33:9e:66:e4:88:
                    b1:d1:ce:06:68:63:1c:02:44:f0:79:3a:ef:63:99:
                    24:9d:9b:65:dc:e6:9f:7b:a8:e4:f9:0a:e0:e7:5f:
                    1e:b5:2e:f6:d0:f4:c1:98:d2:ac:19:e9:7c:0a:5e:
                    c8:77:57:78:f1:0f:cd:bf:30:1a:e8:3f:1a:e2:aa:
                    fc:65:29:56:ff:0e:0d:70:23:e2:92:ab:4b:9c:cf:
                    eb:97:1c:41:79:0a:4a:1a:c3:10:9e:d4:86:07:22:
                    ff:a7:22:10:8f:5e:be:41:0c:e3:58:eb:d4:c8:0c:
                    c2:93:97:55:1c:69:a8:3a:77:7a:bb:6e:23:a6:db:
                    30:ba:c6:c6:b2:e7:85:f8:41:3d:8a:e3:b8:fe:2c:
                    5f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:43:AE:F7:B2:58:57:64:92:56:4D:AA:EF:69:61:B7:49:16:A4:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7c06209a-9bb1-35bd-a962-94d8b47105ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:03:64:ca:f1:26:b2:d6:d4:32:7c:b4:7c:f3:e8:93:be:4e:
         5c:a0:2e:03:9e:f7:5f:f3:f4:61:e8:73:93:84:2c:d8:50:cb:
         86:34:1f:ef:10:35:9a:c2:6a:bb:cd:57:8e:f7:bd:44:6a:43:
         d2:39:c9:cb:e8:bf:40:13:06:ca:91:4b:83:f2:30:1d:36:37:
         a6:09:7c:a6:4a:cf:8e:6d:74:7e:2d:e3:8e:59:7b:18:67:b1:
         ae:69:73:86:62:3c:b3:8a:32:e8:fd:1b:67:dd:e5:02:da:19:
         72:56:91:39:10:26:52:9b:bc:14:94:91:a0:9c:38:92:1b:04:
         3b:2f:d7:8e:e5:09:1a:89:bf:9d:c6:9e:63:c7:e4:bb:d0:cb:
         8e:ac:8c:2c:e1:c5:c2:f3:9e:b3:1e:51:5b:d0:59:f3:08:0f:
         9c:3d:48:a7:cc:de:f1:f4:d9:72:d1:38:5b:97:13:8f:d1:e0:
         f6:09:47:4b:48:f6:67:12:29:cc:db:55:6e:1d:d0:2e:55:56:
         f2:ea:11:11:da:2b:89:26:8e:50:5a:b8:ed:da:5c:21:bd:e8:
         b3:cf:21:c6:8e:ca:3f:a2:74:f8:95:f6:d5:3a:d0:af:8f:da:
         dc:36:b5:45:ae:42:5d:eb:d8:67:d4:44:15:c2:0f:24:ea:4c:
         08:f6:e6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:52:37 2025 by rpki-client