Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7cb2eb48-b676-3f02-8f97-917b06e6c885.roa
File:                     7cb2eb48-b676-3f02-8f97-917b06e6c885.roa (raw, json)
Hash identifier:          It+Wzzfo0p3Khi/A+edN8xi3B4hr3DG6dzRMFWoDYxQ=
Subject key identifier:   25:42:79:5B:22:57:85:17:F6:67:77:B6:20:C1:F3:43:AA:17:80:0C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849D80535FB67A490FAB55C4600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7cb2eb48-b676-3f02-8f97-917b06e6c885.roa
Signing time:             Tue 13 May 2025 21:58:56 +0000
ROA not before:           Tue 13 May 2025 21:58:56 +0000
ROA not after:            Mon 11 Aug 2025 21:58:56 +0000
asID:                     7385
IP address blocks:        166.0.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:05:35:fb:67:a4:90:fa:b5:5c:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 13 21:58:56 2025 GMT
            Not After : Aug 11 21:58:56 2025 GMT
        Subject: CN=7e6e5bce-0fde-4bb5-a196-7c39f165fb01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6e:18:a5:69:c5:70:a1:7d:54:2a:3d:b6:19:
                    05:8e:23:d9:2d:c4:92:55:06:76:46:25:77:39:75:
                    a3:02:3e:cf:b7:86:a2:8e:7c:ab:e0:8c:50:6a:a5:
                    b6:46:63:78:dc:f0:b4:a9:55:95:ff:19:63:7f:a8:
                    20:ca:bf:89:59:9d:65:85:9c:ba:58:f4:86:34:7e:
                    2f:d8:49:cf:e3:44:7f:04:f1:2a:a1:ba:51:59:3a:
                    56:d4:b5:50:04:6f:30:8d:0f:ec:b0:73:6f:39:a7:
                    44:60:48:e9:37:9c:f9:53:69:2f:73:2b:e6:9d:62:
                    fa:ab:b9:40:ae:60:69:15:b0:be:14:9f:06:69:dd:
                    63:39:c2:00:0d:7b:17:38:c8:3c:3f:71:ae:b3:7c:
                    7d:d3:16:63:85:d5:d2:25:20:78:70:3b:9f:af:26:
                    1a:fc:b5:ef:f4:58:e6:43:06:0c:c2:e1:0c:12:ef:
                    4c:7f:e6:83:9b:ac:df:1c:45:e7:a8:98:07:f9:3f:
                    88:c3:ec:ed:6b:3c:c4:be:70:41:49:4c:0e:51:e0:
                    4f:a9:f0:ef:13:a5:4a:8b:0d:27:86:3d:19:11:af:
                    fb:09:ad:f0:7b:67:85:9c:3b:c7:b0:be:86:cb:55:
                    57:7c:e4:df:9f:f7:85:99:a6:be:c4:ba:b5:ca:a7:
                    4d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:42:79:5B:22:57:85:17:F6:67:77:B6:20:C1:F3:43:AA:17:80:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7cb2eb48-b676-3f02-8f97-917b06e6c885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:6e:8b:2f:b5:43:db:63:29:49:71:d2:19:c4:cc:7a:ab:82:
         03:e0:45:0c:e5:f0:f4:8a:97:2d:a1:d3:ce:55:bd:a2:ba:08:
         d3:53:34:3c:dd:b3:aa:f1:fa:e2:1a:cd:76:58:69:1d:d9:f2:
         f5:d2:ee:72:b8:45:ee:f3:fd:fa:c4:19:23:ae:c3:f6:0c:7f:
         a0:75:37:67:bd:14:90:44:dd:2d:f3:5b:cd:3f:3e:e5:5c:4d:
         59:ce:91:47:f5:60:e8:ad:ca:e1:e2:76:fd:b4:15:cc:9b:88:
         a7:e3:10:a8:1b:94:4f:92:8c:23:6f:f8:be:66:1a:c6:e1:eb:
         a8:70:2b:b5:97:27:c2:0e:0a:78:67:ec:86:99:2e:22:d8:58:
         62:ed:91:de:11:61:5d:b4:0d:fd:69:6c:f5:34:fe:7a:ee:f8:
         bf:10:5a:48:c8:69:0b:1b:73:bb:8a:0a:32:13:23:59:d8:08:
         af:6f:dc:e4:61:f6:af:07:0c:f6:85:10:43:39:6b:78:4c:65:
         4c:c6:08:98:f8:09:94:0f:63:24:9e:72:e4:d0:08:bf:b9:e3:
         97:e1:1d:c4:36:08:c4:69:d0:82:8a:6b:ed:a3:40:94:d4:e4:
         fb:6a:44:8c:4d:2f:16:65:62:2a:5c:26:3f:cc:4b:dd:46:35:
         ce:64:8e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:31:52 2025 by rpki-client