Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/80048115-4b78-3b94-8103-7975a046f41e.roa
File:                     80048115-4b78-3b94-8103-7975a046f41e.roa (raw, json)
Hash identifier:          kv0cQvgqabr4OT92jBud42HC2ax+J/fSxeBGo0I4ktY=
Subject key identifier:   3F:D9:00:64:13:4A:E3:B0:14:C1:40:BA:8D:73:AC:EE:69:60:10:64
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849D805367082AE6C1E4300C680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/80048115-4b78-3b94-8103-7975a046f41e.roa
Signing time:             Tue 13 May 2025 21:58:56 +0000
ROA not before:           Tue 13 May 2025 21:58:56 +0000
ROA not after:            Mon 11 Aug 2025 21:58:56 +0000
asID:                     7385
IP address blocks:        166.0.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:05:36:70:82:ae:6c:1e:43:00:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 13 21:58:56 2025 GMT
            Not After : Aug 11 21:58:56 2025 GMT
        Subject: CN=7bce6e3a-456d-4206-b3bb-95e4934e19cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:44:80:b6:67:7d:bc:a2:76:74:3b:3a:0a:5f:
                    83:19:f4:90:a3:bb:78:ec:19:94:ef:02:a5:f9:6a:
                    60:de:bc:4c:e8:18:88:48:91:b8:fb:79:d5:cc:5d:
                    d4:ec:89:06:ab:ad:35:78:ee:9c:0c:e3:40:06:29:
                    5b:26:62:6d:02:dd:d2:3c:c4:5d:80:46:0a:e0:24:
                    3a:ca:1b:e1:ee:b0:6b:54:0c:9a:76:3d:0f:b6:bb:
                    3f:b8:a1:77:ff:98:04:68:31:ad:e4:7f:01:d6:ca:
                    b1:d2:e3:c3:eb:c9:62:23:e5:ba:10:7c:af:0a:56:
                    8b:8b:e5:7c:44:4e:c4:cf:69:37:f7:57:da:89:3b:
                    f4:01:56:8e:c9:c6:b6:59:2a:0c:7d:90:b1:8a:ca:
                    d6:1d:dd:11:ef:f5:e4:5d:f7:e4:84:ab:33:50:db:
                    cc:72:5a:d1:5e:9f:27:6f:31:dc:a2:bf:76:b3:73:
                    fa:ff:93:67:3a:f0:a9:6c:f4:d2:c2:de:7b:46:aa:
                    1d:50:fc:c3:99:5a:0a:73:2f:78:30:27:b7:47:a4:
                    94:fb:f3:7f:0b:ca:9d:6f:6e:0c:46:3e:6e:85:9c:
                    14:61:a4:24:66:bd:fe:a7:13:d9:da:e9:d9:6d:69:
                    d0:4c:96:1c:20:91:bc:52:6d:bc:45:6f:17:a4:ba:
                    2a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D9:00:64:13:4A:E3:B0:14:C1:40:BA:8D:73:AC:EE:69:60:10:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/80048115-4b78-3b94-8103-7975a046f41e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:11:d6:e0:48:10:fd:91:eb:07:53:90:6a:48:5d:ad:cf:8d:
         b0:00:4c:5e:a5:92:dc:1c:a3:f3:52:22:e6:04:97:41:5f:cd:
         19:0e:55:04:0b:5a:7a:2f:68:62:62:d7:5e:45:37:d9:f4:0e:
         bd:27:f1:2b:cf:d6:10:0a:ed:ca:01:1c:19:d0:ac:b0:f9:d0:
         ab:bf:20:fa:71:ea:96:73:4b:f8:ec:bc:f0:53:da:f1:aa:3d:
         7a:67:ed:cc:bf:0c:46:f8:43:87:ea:39:43:f5:73:a6:20:6e:
         bc:fc:4f:f1:a1:4f:f0:b1:ff:f5:cb:02:2e:c8:5c:bc:f5:26:
         5d:4a:20:eb:a2:59:c2:68:46:2d:0f:dc:5c:0a:6c:6e:7b:a5:
         f7:7e:29:0b:4a:de:5d:3d:27:19:f3:ef:e5:df:4d:67:6a:90:
         89:5f:07:4d:30:ab:84:95:bb:84:d1:1c:02:bd:a3:5c:48:eb:
         29:58:bf:e8:4e:c9:01:00:c4:5e:53:93:91:39:bf:56:32:7b:
         d2:ba:46:32:a1:7b:33:59:72:54:0e:7a:32:4a:83:ec:73:63:
         9f:06:09:14:35:b7:dd:82:79:41:0e:d6:61:fb:7c:b9:8c:dd:
         95:28:37:9d:5e:53:f0:ad:f8:ae:3f:ea:2a:a4:6d:6b:90:63:
         1f:eb:af:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:22:39 2025 by rpki-client