Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8765476f-13ea-3d3a-be97-f739fa0e75a8.roa
File:                     8765476f-13ea-3d3a-be97-f739fa0e75a8.roa (raw, json)
Hash identifier:          UqOAmMrpz0/XdW8K68pZDr9rS0k51nh3x8tIb8K3yKM=
Subject key identifier:   42:59:DC:1E:12:71:EB:E6:1D:1E:46:2F:F1:8B:F8:69:53:69:52:C5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849393E6BB0B981CDAF66947300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8765476f-13ea-3d3a-be97-f739fa0e75a8.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     1239
IP address blocks:        166.0.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:6b:b0:b9:81:cd:af:66:94:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=0e930808-8e39-4753-8768-878d1ee2ea95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3b:e2:20:68:0f:c4:b5:57:c3:0a:a0:32:68:
                    cf:f1:e8:a6:6c:fb:f3:83:d0:86:a6:1a:87:1b:27:
                    ba:1b:04:56:7a:8d:90:89:b7:c2:53:bd:f3:e9:05:
                    09:35:c5:e6:94:61:0c:5a:34:4a:e3:c3:97:cd:1e:
                    24:98:9e:1f:2f:db:dc:bb:f4:31:55:76:b0:2e:f5:
                    b7:4a:74:03:d1:aa:57:28:5b:d4:be:b8:03:ba:6f:
                    ff:73:bd:c4:d0:26:67:38:12:df:27:01:7f:fa:90:
                    d5:29:66:10:37:26:d8:7e:dc:03:f8:cc:7d:de:88:
                    22:df:ff:85:ab:95:92:66:ae:02:11:76:3a:05:1c:
                    63:b1:98:78:21:ff:5d:38:ff:bd:a6:b0:ba:94:d0:
                    2b:0b:33:34:79:99:18:43:cd:a3:55:9b:89:5c:fc:
                    10:e2:16:13:bb:d7:7b:20:1d:71:13:86:c4:8a:e3:
                    94:24:13:fc:33:39:b9:36:01:ba:89:ce:65:6f:76:
                    c7:52:e4:f9:9d:16:e8:a6:07:27:ce:5d:e8:f0:1f:
                    fd:c1:77:ad:a3:89:b0:bc:43:44:99:5e:35:bc:24:
                    ae:40:1f:1d:a1:a6:f7:0d:88:dd:41:a9:bd:c1:94:
                    1a:6f:09:71:67:85:04:87:38:d1:ef:49:1f:f3:00:
                    aa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:59:DC:1E:12:71:EB:E6:1D:1E:46:2F:F1:8B:F8:69:53:69:52:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8765476f-13ea-3d3a-be97-f739fa0e75a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:87:12:8c:e2:cc:13:c9:ea:00:91:51:e9:45:c4:91:02:c2:
         ed:c2:56:43:b4:d2:0c:f9:5a:7c:a0:18:72:09:84:82:bd:70:
         56:b2:9f:19:cc:7e:8c:c2:c9:6a:de:49:1e:d5:07:8f:c8:6f:
         a1:f5:3d:73:c3:08:2b:d3:39:51:66:7f:cc:05:3c:de:58:f8:
         ad:4c:34:e0:65:8b:e0:7b:fa:bd:f3:67:27:5e:2a:9b:3e:92:
         da:dc:b1:39:e0:46:ae:30:80:d5:1c:22:cf:61:df:a0:31:71:
         fa:19:95:bd:bb:94:3e:0b:b3:c9:a6:04:51:a5:f6:af:2e:d3:
         40:01:2c:16:d8:45:90:ba:fa:67:f5:f8:57:19:47:db:52:32:
         88:c7:2b:6f:3c:d3:5b:9e:19:14:01:99:0e:27:5d:2c:e7:00:
         e4:c9:de:8f:67:ef:46:76:3c:3d:f5:e7:07:63:73:50:eb:6f:
         3e:11:f7:ea:b2:e0:29:12:c9:e8:e4:75:c9:f5:83:b9:40:ba:
         e6:c7:3e:b2:8c:52:5f:d1:86:20:3e:24:63:45:42:10:53:09:
         75:03:b0:90:ae:b4:3a:97:59:af:c1:59:ca:84:5c:20:0a:20:
         35:40:a9:0c:ec:79:97:8c:1b:9d:bc:be:6f:eb:a2:5a:55:76:
         32:ed:ba:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:52:52 2025 by rpki-client