Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/81f6781b-8918-365f-a838-eb060ea405a2.roa
File:                     81f6781b-8918-365f-a838-eb060ea405a2.roa (raw, json)
Hash identifier:          v5VB/lGe4MAJ8zcriBml7YP3ZRNDYxBlRAtJkf7snOM=
Subject key identifier:   84:DA:6A:D5:48:70:1E:79:F2:DC:53:0A:99:ED:98:23:EF:2C:69:77
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849CFFF810354EC2D528D8D0680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/81f6781b-8918-365f-a838-eb060ea405a2.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     62240
IP address blocks:        166.1.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:81:03:54:ec:2d:52:8d:8d:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=db28e7fd-00c7-41be-8077-0724c8df3a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d2:4a:0b:3f:11:3d:8a:71:82:4a:25:c8:7b:
                    fd:12:8e:94:06:99:11:95:90:90:a7:4d:36:f3:a3:
                    6a:80:00:71:2e:db:71:2f:4d:6e:84:4c:15:68:10:
                    49:89:5d:22:60:ca:fe:3b:93:da:d0:96:1e:c9:d5:
                    12:a5:60:95:7a:d0:f4:4d:34:26:dd:ee:10:fb:c1:
                    d6:dc:44:db:58:16:08:46:ec:d2:20:e1:1a:74:27:
                    c0:6b:eb:a7:4b:1f:3a:d1:35:40:9d:0b:d7:04:30:
                    97:8f:32:d7:11:33:5e:a7:b9:d1:f1:99:9d:0d:36:
                    18:0c:1c:ec:b1:53:c3:dd:ea:6e:61:5f:5f:94:f9:
                    df:45:97:b0:9a:b2:0b:e9:fd:de:47:a1:5f:9f:93:
                    e7:89:aa:4b:d9:6a:a6:98:1d:47:d8:6c:58:c2:f9:
                    74:41:7a:67:83:c0:55:52:1a:32:4a:1d:64:be:60:
                    df:d8:d7:91:6d:68:4a:ce:66:c5:4e:69:e7:52:81:
                    28:59:d0:e4:52:d7:69:b0:d5:2b:f3:2f:0d:9b:96:
                    a3:9a:a6:a2:5e:94:97:75:b5:98:bb:96:c7:d3:4c:
                    84:32:7d:ac:7e:f3:2e:9c:0e:e6:9c:15:38:07:75:
                    a8:f2:61:e2:ab:ea:19:43:74:26:9a:fb:03:d9:36:
                    f0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:DA:6A:D5:48:70:1E:79:F2:DC:53:0A:99:ED:98:23:EF:2C:69:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/81f6781b-8918-365f-a838-eb060ea405a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:41:d0:1f:fe:1f:18:f8:d6:0a:44:da:d7:31:28:0e:13:b1:
         b4:0f:fa:66:24:9b:54:f7:d1:11:0f:7a:f0:d0:04:e7:03:0a:
         5b:12:fa:42:6d:ef:f6:16:27:53:76:fe:94:2d:9a:14:ba:35:
         ac:7e:01:f0:7d:91:25:c4:15:8e:db:b5:65:22:a6:d7:21:61:
         71:9e:f6:41:fd:ad:eb:cd:8a:d7:1c:32:8c:37:c8:44:cd:47:
         c4:d7:54:45:cc:56:b4:8b:a7:fc:eb:ec:ba:a1:80:03:75:9e:
         0e:e1:4a:6d:94:47:52:6a:6e:1b:c6:55:94:7c:c2:af:31:b9:
         9d:4a:ff:29:c8:57:6d:a7:b3:fc:e9:0c:13:07:64:1c:6d:b8:
         ef:55:ab:99:de:26:49:f5:45:b1:a5:67:f4:21:a1:ee:34:9b:
         1a:3b:53:25:a0:f2:79:c3:7f:66:62:27:d8:4e:bc:bc:a6:66:
         6b:77:6a:ee:bf:61:fb:f9:08:7f:0f:c7:29:a4:14:b0:d7:e7:
         70:fa:97:0d:2c:b2:0b:dd:fe:20:76:09:62:a3:e7:cc:16:cb:
         5b:d6:54:ef:9e:19:27:5a:15:5a:ff:4c:5c:b3:3a:b0:45:1f:
         63:89:17:4e:29:7d:33:d3:b8:15:ff:b5:90:c6:16:45:c0:a3:
         c1:83:39:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:44:14 2025 by rpki-client