Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/916c8711-b212-33d3-9aeb-b3f69920b7c9.roa
File:                     916c8711-b212-33d3-9aeb-b3f69920b7c9.roa (raw, json)
Hash identifier:          6sm8gZvn92pZ76qJYbX6w+ekbhwePpqbU8amp6uhk6E=
Subject key identifier:   64:B8:79:F9:87:59:3C:49:2D:BF:C2:FB:37:E2:26:7E:0D:55:BE:EB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848A830AD314F6CC1260166A480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/916c8711-b212-33d3-9aeb-b3f69920b7c9.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     30823
IP address blocks:        166.0.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:ad:31:4f:6c:c1:26:01:66:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=f405a162-a199-41d5-88e4-36c7db4833ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:73:ce:94:ac:1c:0c:99:7f:50:d7:a3:1c:8a:
                    ae:f5:de:09:f2:ed:e5:9f:10:fb:03:d3:1b:cb:54:
                    8a:f3:c5:8a:38:96:86:7f:08:d9:83:06:d4:cf:00:
                    f9:aa:6c:38:fc:39:99:5e:8b:73:4b:79:9d:2e:eb:
                    74:e8:97:a5:de:5a:4f:b4:4b:26:63:ad:13:7e:db:
                    30:f6:c3:17:77:b6:2e:8d:08:61:b8:fe:1c:d7:b2:
                    2a:d6:93:4a:f0:ef:e2:0c:84:9f:30:d1:52:68:66:
                    11:a6:fe:b2:0b:d6:61:43:9b:48:58:33:13:2b:b0:
                    05:3d:c2:83:21:8f:90:86:0f:a9:11:7c:27:00:39:
                    de:cf:e0:d7:69:81:f2:ab:30:83:a8:5e:b9:60:d8:
                    a8:d3:c9:77:3a:6e:77:28:e0:42:6f:2c:c1:7c:6d:
                    71:f9:ee:63:d5:84:b6:5b:6b:8d:82:4b:ef:ec:d0:
                    78:d0:02:7f:73:ec:9a:20:42:23:e9:ab:74:67:e4:
                    1d:46:32:f4:b3:e2:25:a4:52:12:c5:d8:b0:ad:35:
                    86:e6:4b:a6:24:47:b8:26:e5:87:bc:ac:d0:9d:51:
                    de:82:ab:b8:85:3f:23:8b:c5:56:55:fe:78:4d:e0:
                    66:a9:a5:e9:18:99:d5:e3:5c:0a:9a:3a:dc:11:5d:
                    28:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B8:79:F9:87:59:3C:49:2D:BF:C2:FB:37:E2:26:7E:0D:55:BE:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/916c8711-b212-33d3-9aeb-b3f69920b7c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:f5:7d:08:d9:cd:b3:19:f9:2a:24:e7:a6:11:04:a1:5c:de:
         b4:3d:a7:b9:be:c1:dd:f7:4c:93:06:be:62:fb:b9:da:9a:e0:
         46:af:f4:93:e2:ba:5b:84:bd:10:f3:e7:04:7f:72:5d:1e:c3:
         3b:cb:ae:70:ce:d9:8d:a4:9f:bc:fb:8d:33:64:45:74:8d:ee:
         dc:69:0c:7c:b3:bf:63:90:da:05:13:f1:35:94:0d:c6:17:34:
         16:bd:f6:43:d3:c2:40:a2:1a:b2:d8:f9:15:a4:9a:dc:28:46:
         ac:4c:44:d8:fb:06:70:5b:33:b0:9f:17:16:c2:04:47:f9:8d:
         3a:03:cd:96:0d:31:67:d7:d0:03:c1:b1:cc:ea:c1:ef:d2:e1:
         62:ef:8f:f3:48:e2:19:fe:66:a3:50:20:5b:39:b1:d4:8f:cf:
         51:9f:62:d0:fe:a6:d5:5d:be:bb:0c:19:f2:ab:ab:e7:60:73:
         fd:f4:b4:1e:04:a1:8f:5c:f4:21:fb:7b:0d:e1:22:d8:d5:96:
         18:2b:27:01:ad:3b:9b:87:42:ef:28:f4:42:76:31:81:06:70:
         71:ec:a3:db:e8:ee:97:86:24:6c:2b:a6:3f:50:63:40:84:36:
         2c:a3:cd:e5:dc:eb:e2:c7:b3:ea:3b:cc:17:5b:63:45:ae:d1:
         e3:99:c4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:27 2025 by rpki-client