Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/99992f30-4f4a-3579-b51d-4dfe3aa98fdc.roa
File:                     99992f30-4f4a-3579-b51d-4dfe3aa98fdc.roa (raw, json)
Hash identifier:          cRr6Xawv2BJcfLQv4V2r/tgMuNLN2rEm4+5t0S8ProA=
Subject key identifier:   23:15:27:A2:4E:CD:EC:79:7E:EC:50:65:10:D8:B9:6B:2A:0E:E3:1E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858494F93F067C8A2FE142A1EC840
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/99992f30-4f4a-3579-b51d-4dfe3aa98fdc.roa
Signing time:             Wed 26 Mar 2025 01:00:40 +0000
ROA not before:           Wed 26 Mar 2025 01:00:40 +0000
ROA not after:            Tue 24 Jun 2025 01:00:40 +0000
asID:                     8881
IP address blocks:        166.0.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4f:93:f0:67:c8:a2:fe:14:2a:1e:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 26 01:00:40 2025 GMT
            Not After : Jun 24 01:00:40 2025 GMT
        Subject: CN=42362a9d-a0db-48f1-9eef-8c8ab2cd372e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:33:7f:ea:c3:83:8b:01:b7:43:f7:39:e3:a1:
                    65:6d:08:ad:de:6c:14:00:6c:46:e2:06:77:dd:7b:
                    05:cb:82:d5:a4:a4:f4:f6:d3:8d:c0:57:2e:b6:6f:
                    f7:1a:39:4d:42:7c:fe:1c:13:3b:a4:70:ed:42:2f:
                    aa:bc:b1:cc:1b:b0:dd:09:d9:2e:68:07:a9:dd:0b:
                    c6:f5:35:5c:bf:b6:a3:fd:ce:ee:ea:1d:41:59:73:
                    b2:a0:07:b2:64:3c:bf:95:79:0c:d0:da:c9:ba:f0:
                    f3:08:18:d8:17:28:e3:48:d8:15:b4:9d:f9:d5:cd:
                    44:78:02:de:63:a6:d5:c4:d7:45:f4:72:17:50:09:
                    10:3c:47:62:66:9e:b2:5d:59:41:82:69:33:4f:c9:
                    0a:78:1e:4c:46:c6:18:74:6e:0f:79:b8:a9:80:98:
                    d1:45:fe:27:c3:0e:e5:c0:e1:d4:44:64:81:72:ac:
                    81:48:1f:4a:12:9e:c5:cf:00:f6:4a:6e:6e:68:1a:
                    52:fc:50:1f:0b:75:21:96:92:53:cf:c0:00:1d:d6:
                    62:9f:42:53:95:7e:de:96:29:c1:32:d4:8e:7a:6e:
                    46:fd:df:9a:74:c7:ba:dc:3f:4f:74:18:d7:ff:95:
                    60:19:66:bb:d0:67:a2:01:62:4a:03:eb:58:96:86:
                    9c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:15:27:A2:4E:CD:EC:79:7E:EC:50:65:10:D8:B9:6B:2A:0E:E3:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/99992f30-4f4a-3579-b51d-4dfe3aa98fdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ce:81:90:c3:09:2a:7e:a4:6a:96:df:7f:b2:b8:05:06:ef:
         6f:5d:b5:da:8a:57:2d:73:f3:08:d3:5a:9c:de:34:c2:d1:7d:
         3b:8a:83:bb:cd:94:91:bb:d8:7d:eb:d8:64:c6:f7:07:e3:d3:
         b5:be:37:8c:48:30:ea:7e:c6:95:89:72:f3:d6:b4:b0:00:54:
         2b:ca:85:86:71:c8:7d:2a:0c:16:6b:39:8f:12:35:92:36:9b:
         b7:ea:3c:ef:93:ce:0c:b5:79:52:75:a4:cb:d9:0c:03:78:6f:
         3f:13:6f:c6:8a:b3:6b:e2:49:af:45:4e:8b:c1:19:35:b0:e5:
         46:c9:a0:ea:81:0f:33:1c:6d:9e:b6:62:0b:26:82:c3:e4:fa:
         49:52:e6:a5:79:81:95:da:77:a1:2d:01:c6:f1:46:c9:09:6b:
         d7:3b:77:71:53:c8:82:ed:29:38:ab:91:c2:b3:eb:7e:89:a8:
         06:15:89:4c:14:88:93:1d:ad:d4:4a:4b:2d:9a:b1:76:16:d1:
         01:1e:40:14:35:83:62:64:c6:6d:3e:70:58:09:74:1b:c2:e4:
         fc:bc:57:01:8a:95:75:db:98:07:e0:ee:9a:24:5b:63:1b:c8:
         0d:27:d0:f5:1c:7c:30:7b:58:d6:42:6a:36:82:1d:43:f2:25:
         8a:70:a2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:04:48 2025 by rpki-client