Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/94bfa4a6-f4c2-357b-b917-94d73f76030e.roa
File:                     94bfa4a6-f4c2-357b-b917-94d73f76030e.roa (raw, json)
Hash identifier:          tR1rYiGjWnWzAptvHCbcUN/o2oFWDPKOQfMc4YEg0A4=
Subject key identifier:   69:7C:A7:67:31:23:F6:A7:41:7A:22:24:D6:E0:76:1D:DE:91:C7:7F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849D1654EB2D2B07C6DE821FE40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/94bfa4a6-f4c2-357b-b917-94d73f76030e.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     58061
IP address blocks:        166.0.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:4e:b2:d2:b0:7c:6d:e8:21:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=cef92ec7-3dba-4e63-90eb-b000f8610e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fa:f0:c6:3a:a4:3e:2e:aa:2f:e3:c7:86:cf:
                    77:2c:b3:4f:8f:bd:b6:b7:f2:2b:f7:c0:2e:00:c9:
                    f5:cf:5a:09:34:a2:5e:ea:ad:c8:7a:c8:21:41:3f:
                    5c:2c:68:ed:5a:53:2b:97:70:e9:2e:a9:53:71:d4:
                    2a:88:e9:74:8c:77:14:68:43:69:f0:fc:ee:01:bf:
                    2e:ac:5e:45:7b:e0:61:51:21:e4:2f:96:cc:b9:f5:
                    94:18:f6:c6:3c:c8:b3:09:c3:d9:b9:0f:1d:69:15:
                    ff:aa:a6:5d:24:1e:8d:1f:27:63:70:fb:10:3c:13:
                    c0:22:29:65:6f:3a:42:bd:df:93:92:b9:96:cc:9f:
                    59:35:5a:fe:e8:88:f4:04:97:48:5c:ec:4d:9d:0f:
                    32:a9:e0:05:df:c5:ef:24:00:1d:5e:8f:2f:d3:d0:
                    1b:aa:b9:71:5f:bc:a7:a9:fb:2e:e6:91:00:5b:97:
                    59:f1:4e:2f:37:1d:d3:0c:66:d7:4d:23:03:62:9d:
                    f6:28:52:26:07:c9:3a:74:49:08:c7:78:86:b6:ec:
                    77:a5:f7:24:2d:43:00:87:9b:a0:af:82:b0:aa:bd:
                    dd:40:94:f9:1a:27:db:09:9c:99:f3:42:ea:ed:05:
                    a7:30:45:79:41:7e:d3:f3:16:00:14:03:06:a9:77:
                    8a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7C:A7:67:31:23:F6:A7:41:7A:22:24:D6:E0:76:1D:DE:91:C7:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/94bfa4a6-f4c2-357b-b917-94d73f76030e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:bc:8c:bf:a6:2d:9a:0e:57:da:8e:d9:30:9d:3d:b9:e7:03:
         4d:87:d3:86:5b:4b:5f:17:de:fc:2d:7d:70:ba:c9:cf:22:93:
         54:cb:b8:0e:50:37:56:31:89:99:78:1a:61:27:14:7f:a4:0f:
         08:51:24:69:27:7c:c8:9a:c1:c2:b2:f2:5a:70:2d:53:38:6a:
         9a:91:da:07:e1:b9:5b:ae:7d:a4:f2:17:7f:5c:c5:10:00:c7:
         5f:f3:9b:fa:63:f9:7d:8b:25:db:59:fb:4e:c8:a7:2a:2a:32:
         8a:8e:9b:cb:cd:ab:dc:25:38:fc:d8:1d:1c:02:4f:4e:8e:09:
         21:44:97:30:d6:c7:76:8c:ca:f6:32:0f:e1:ed:ef:7d:87:23:
         c4:51:c7:f3:7b:a2:aa:06:79:a5:7c:a7:da:d2:0f:a6:1d:16:
         47:f3:ac:80:b8:b4:67:99:d2:49:18:12:30:df:00:ab:8a:c8:
         ce:a5:af:17:a7:ea:87:bc:7a:7f:f5:3e:a0:ca:c9:13:ac:25:
         4b:d7:54:a1:3a:18:f0:11:4c:b5:5b:70:d4:12:eb:7f:d7:8a:
         1a:38:fe:df:77:d3:c6:70:f6:f2:3c:6e:0d:28:11:3f:69:49:
         42:c8:5c:a1:45:ae:b2:29:f6:01:dc:7c:a5:4c:2d:b0:ba:7f:
         5b:d3:51:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:42:58 2025 by rpki-client