Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8b0a40d1-0f9f-397f-8a33-5d85f8ded973.roa
File:                     8b0a40d1-0f9f-397f-8a33-5d85f8ded973.roa (raw, json)
Hash identifier:          7waP+YFxa2PO7TpTreK4MljPAop0aJ4fdNY4DW9GNk8=
Subject key identifier:   34:BD:16:72:45:C9:F6:A8:96:30:52:AE:9F:50:AD:D3:2A:98:EE:AE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849E91FAF4C7DB629A743172100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8b0a40d1-0f9f-397f-8a33-5d85f8ded973.roa
Signing time:             Tue 20 May 2025 01:00:49 +0000
ROA not before:           Tue 20 May 2025 01:00:49 +0000
ROA not after:            Mon 18 Aug 2025 01:00:49 +0000
asID:                     202656
IP address blocks:        166.0.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e9:1f:af:4c:7d:b6:29:a7:43:17:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 20 01:00:49 2025 GMT
            Not After : Aug 18 01:00:49 2025 GMT
        Subject: CN=20322971-b749-4efb-a8aa-33c2e1a1df99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c6:18:9a:a6:59:6a:11:e0:2b:c8:6a:80:c0:
                    7a:11:63:df:78:76:27:e8:d6:fb:ba:ef:6e:b3:1e:
                    a8:4b:3e:41:52:82:3c:2f:e8:f3:2d:16:79:b7:c1:
                    67:1b:f5:81:3d:f3:28:a3:95:7d:94:b6:78:87:df:
                    7b:ff:09:39:16:6a:cb:f2:fa:04:dd:3b:12:e8:ee:
                    a7:e5:6d:f9:a2:ec:81:65:4d:f6:1c:b4:12:ca:ae:
                    ae:72:8b:57:3c:db:65:e3:66:a4:ba:70:80:92:ec:
                    50:02:c0:0e:7d:94:71:38:70:45:f0:71:27:8d:1e:
                    3b:70:9c:ee:22:ab:90:fe:00:8b:fa:ec:4d:0b:39:
                    a9:2e:96:87:c0:04:e4:e0:be:9f:2e:04:5f:05:4c:
                    13:69:bb:5b:88:dc:bc:30:b9:80:a4:09:31:ec:f1:
                    ef:47:43:ae:e1:b1:2d:8c:22:fd:e1:0f:c5:73:3d:
                    61:2a:c9:ec:45:50:43:bc:6e:87:c2:6e:a5:87:b5:
                    87:5e:04:18:d5:aa:0f:e6:57:65:8e:b5:b2:11:b6:
                    ba:e4:97:be:b8:74:57:8d:0c:7f:fe:f6:7b:43:eb:
                    23:b6:1f:67:38:c1:f9:09:c3:1c:c2:b9:9d:cf:5b:
                    32:54:67:25:c5:a6:e3:97:a1:17:85:f4:db:7b:64:
                    f3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BD:16:72:45:C9:F6:A8:96:30:52:AE:9F:50:AD:D3:2A:98:EE:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8b0a40d1-0f9f-397f-8a33-5d85f8ded973.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:3a:e8:cb:da:c4:3e:6f:cc:04:cc:11:ba:bd:57:fe:5d:07:
         56:06:22:1c:d8:a4:8b:de:98:be:e3:4e:b1:a9:94:8d:38:06:
         49:2f:1a:7b:ed:56:5a:ab:b4:9c:b0:8c:e5:55:2c:0a:ad:02:
         c5:34:89:b6:af:da:5a:e3:90:b5:cc:07:bd:40:69:aa:89:1d:
         1b:bd:ec:4c:4a:23:9e:4b:6b:e9:58:1d:6d:15:c8:b6:39:14:
         0c:83:be:fe:55:dc:06:7f:8c:eb:9e:05:36:f1:95:a5:cc:08:
         cd:9d:f1:1e:26:5b:91:01:e3:ab:69:dc:6d:7a:c2:74:9e:3f:
         37:10:0d:2b:f9:ab:17:7a:4a:48:ef:b1:5d:9a:18:51:b1:8a:
         bf:3f:c9:de:48:b0:24:be:96:ec:ba:71:8c:32:2a:af:00:f5:
         c9:ff:db:1d:11:4e:ec:fe:3a:86:70:fe:21:ba:f1:ce:f1:ed:
         c2:fa:ad:ee:77:72:bf:33:44:96:1b:9e:7d:4e:20:9a:9a:66:
         a1:57:98:ff:e2:fc:d1:77:ba:c1:cd:28:b9:6a:62:9a:54:c2:
         ad:de:b6:1e:3a:5f:66:ce:12:ca:ff:8e:7c:46:a9:c7:22:a4:
         4d:70:71:08:a0:45:8d:f0:e3:68:00:79:25:19:4e:fa:5d:d3:
         10:2e:e3:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH69MfbYpp0MXIQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk
MjAzMjI5NzEtYjc0OS00ZWZiLWE4YWEtMzNjMmUxYTFkZjk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMYYmqZZahHgK8hqgMB6EWPfeHYn6Nb7uu9u
sx6oSz5BUoI8L+jzLRZ5t8FnG/WBPfMoo5V9lLZ4h997/wk5FmrL8voE3TsS6O6n
5W35ouyBZU32HLQSyq6ucotXPNtl42akunCAkuxQAsAOfZRxOHBF8HEnjR47cJzu
IquQ/gCL+uxNCzmpLpaHwATk4L6fLgRfBUwTabtbiNy8MLmApAkx7PHvR0Ou4bEt
jCL94Q/Fcz1hKsnsRVBDvG6Hwm6lh7WHXgQY1aoP5ldljrWyEba65Je+uHRXjQx/
/vZ7Q+sjth9nOMH5CcMcwrmdz1syVGclxabjl6EXhfTbe2TzkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDS9FnJFyfaoljBSrp9QrdMqmO6uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOGIwYTQwZDEtMGY5Zi0z
OTdmLThhMzMtNWQ4NWY4ZGVkOTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAU66MvaxD5vzATMEbq9V/5dB1YGIhzYpIvemL7jTrGplI04BkkvGnvt
VlqrtJywjOVVLAqtAsU0ibav2lrjkLXMB71AaaqJHRu97ExKI55La+lYHW0VyLY5
FAyDvv5V3AZ/jOueBTbxlaXMCM2d8R4mW5EB46tp3G16wnSePzcQDSv5qxd6Skjv
sV2aGFGxir8/yd5IsCS+luy6cYwyKq8A9cn/2x0RTuz+OoZw/iG68c7x7cL6re53
cr8zRJYbnn1OIJqaZqFXmP/i/NF3usHNKLlqYppUwq3eth46X2bOEsr/jnxGqcci
pE1wcQigRY3w42gAeSUZTvpd0xAu49w=
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:44:20 2025 by rpki-client