Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/81c21dc4-ce2d-3956-9cd5-ad31c00e32e9.roa
File:                     81c21dc4-ce2d-3956-9cd5-ad31c00e32e9.roa (raw, json)
Hash identifier:          hyoBklnT3zkwyQJhRT1wbQ0+sU6URHGwGCMXkDErYOY=
Subject key identifier:   2D:53:3F:A0:38:66:23:89:B9:CB:4B:96:AF:31:98:55:50:76:F0:6B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849F3745DC09037E79574796C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/81c21dc4-ce2d-3956-9cd5-ad31c00e32e9.roa
Signing time:             Fri 23 May 2025 17:49:43 +0000
ROA not before:           Fri 23 May 2025 17:49:43 +0000
ROA not after:            Thu 21 Aug 2025 17:49:43 +0000
asID:                     49770
IP address blocks:        166.0.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f3:74:5d:c0:90:37:e7:95:74:79:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 23 17:49:43 2025 GMT
            Not After : Aug 21 17:49:43 2025 GMT
        Subject: CN=d4b700a1-d0dd-4779-8c21-87aee433a645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c3:03:d3:df:51:3f:1a:14:e8:fe:18:87:60:
                    ce:26:4e:88:62:e3:6c:d3:42:d9:0e:a0:2a:d9:b2:
                    79:5f:d4:4d:0b:6b:9c:32:9a:57:1e:ed:93:76:20:
                    d0:e8:1b:01:7c:10:17:1b:98:1f:3a:54:8e:05:c9:
                    84:92:82:a7:66:b8:db:20:24:01:8e:d7:8c:f4:9e:
                    b2:8f:e0:45:2e:86:81:24:e7:ef:ac:d2:80:e1:ab:
                    d7:91:c5:0e:0b:b7:a3:83:50:35:78:0b:bb:26:19:
                    dd:56:87:c5:c7:85:e5:2f:ab:45:df:78:d8:27:cc:
                    5d:44:39:9b:34:5d:9a:23:62:f5:3c:31:a1:75:df:
                    f8:95:54:42:91:9a:bf:64:7e:fd:95:88:5f:4c:d3:
                    bf:65:66:02:a0:c6:92:13:86:50:89:ed:8f:b7:92:
                    9e:4e:0b:1b:2b:f5:65:76:20:a2:6d:23:c3:b3:f0:
                    4e:7e:19:af:0d:ce:5c:fd:48:3f:a6:07:11:e1:3f:
                    17:19:b6:15:ce:5a:83:0a:fd:3a:6b:80:0a:53:52:
                    01:aa:4b:ad:2d:7c:50:5d:03:f9:81:0f:83:b6:70:
                    a9:6f:84:d9:09:90:82:73:a2:c7:da:75:bd:27:b1:
                    bd:f2:11:eb:a5:89:52:e3:33:26:54:f0:f7:a2:6b:
                    66:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:53:3F:A0:38:66:23:89:B9:CB:4B:96:AF:31:98:55:50:76:F0:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/81c21dc4-ce2d-3956-9cd5-ad31c00e32e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:29:6a:6f:27:df:1c:e2:d9:e5:9a:67:0a:78:be:58:51:e0:
         eb:34:1d:21:26:80:44:0e:8c:62:25:0c:46:ed:f7:4a:89:68:
         2d:31:4a:40:98:a3:2b:d6:e3:3a:b8:c7:bb:14:19:ca:61:08:
         99:31:01:47:0f:0f:33:26:09:97:35:17:bd:55:6c:e3:13:9b:
         f4:76:f6:f4:ea:11:e4:57:0f:7c:f6:e9:2c:dc:8f:28:03:45:
         7b:4c:e9:71:af:a0:e8:0f:e0:ae:4f:fa:22:0f:a7:99:c1:01:
         45:f6:ee:c3:21:1b:75:34:6d:58:f1:e4:6b:5f:cb:61:2a:c6:
         6e:a5:e0:1c:71:5b:df:2b:ba:ab:86:91:78:df:0e:fa:37:b1:
         48:54:8d:f9:99:7b:6e:0f:cf:d4:ec:d4:7c:97:88:c1:de:00:
         7b:a2:e0:09:0f:b1:2c:e2:9d:61:9c:43:45:14:a4:5c:8e:13:
         dd:1f:1a:84:6d:ad:bf:26:03:49:31:c2:b7:e9:b9:6f:47:88:
         7c:0f:21:1c:eb:c4:84:71:d0:e7:fe:ed:c6:29:45:c5:b2:43:
         98:5c:fe:4d:4e:4f:66:0e:67:14:6c:81:05:b9:da:8d:35:67:
         cc:2f:8c:2c:4d:ff:1b:1a:53:98:c5:57:92:0b:f1:7d:2d:23:
         e5:d8:45:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:09 2025 by rpki-client