Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3a17d17-b810-308c-9a95-12a293fcfced.roa
File:                     a3a17d17-b810-308c-9a95-12a293fcfced.roa (raw, json)
Hash identifier:          0UDklSotK+kOnAvL9pFkr+v/7MGjOo3GyPt2vLvnd90=
Subject key identifier:   8D:3D:69:B5:AC:EE:05:EA:05:BB:F9:BD:A3:FD:98:69:2B:CC:6E:24
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849CFFF840D3B262373DC8990A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3a17d17-b810-308c-9a95-12a293fcfced.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     62240
IP address blocks:        166.1.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:84:0d:3b:26:23:73:dc:89:90:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=2dce30e7-71e7-4a34-ae0c-dcefcfe01132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:50:af:2b:cf:26:73:ba:4a:f8:71:70:d7:
                    44:88:45:e6:0d:43:a5:2c:b7:ee:33:42:68:87:8b:
                    be:f4:ee:ff:bf:88:8b:a0:fc:9d:c9:db:3e:91:fd:
                    df:b5:88:98:7a:f6:2c:9f:9d:66:77:b0:26:fe:6e:
                    8f:89:1c:55:11:50:18:56:23:00:3d:18:a7:00:f1:
                    ed:a1:96:9c:d9:40:be:75:ff:4a:ed:a6:af:96:a2:
                    b6:c8:b8:f4:03:5e:e5:aa:6f:87:77:d7:7a:71:16:
                    39:5f:f3:ea:f3:13:a1:72:bc:cf:13:27:46:27:1c:
                    ff:b0:ba:96:68:56:93:c3:0f:83:11:85:63:f0:57:
                    1b:44:e1:2b:08:aa:bb:2c:ea:4e:0c:02:0b:70:7f:
                    81:14:76:e8:35:7c:81:a7:f8:76:12:5b:d8:a3:ee:
                    bc:ea:2d:7c:21:e2:eb:5e:69:cd:8e:c6:57:1d:0b:
                    68:e4:d7:b9:8e:f0:6b:76:b1:d5:a4:03:81:5b:e6:
                    89:7d:56:55:0c:51:35:f7:8d:1e:4f:da:dd:4f:ca:
                    79:f0:37:64:6b:7a:82:a6:3d:1f:b6:15:6e:3b:53:
                    40:36:5a:32:e6:5a:74:48:03:55:e4:e9:78:46:89:
                    0d:fd:bc:ae:5d:2e:64:15:e0:4a:3e:7c:80:e1:cb:
                    5f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3D:69:B5:AC:EE:05:EA:05:BB:F9:BD:A3:FD:98:69:2B:CC:6E:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3a17d17-b810-308c-9a95-12a293fcfced.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:6f:6b:85:80:04:aa:d2:4f:cd:cc:e9:23:6a:fb:0d:4f:3a:
         ed:1b:eb:4d:82:38:3c:a7:5e:1b:16:8c:b5:a6:25:47:89:20:
         6e:8f:8a:9b:e1:a0:b9:21:20:91:2c:27:d3:fe:2f:b8:33:3b:
         e8:c6:1f:ed:54:c0:e0:b6:79:bc:63:66:f4:6a:1c:89:53:95:
         93:a3:06:28:92:29:ee:54:df:58:05:e3:63:76:1b:f7:d8:eb:
         67:16:ed:a1:96:26:0f:7e:71:18:95:b9:1e:40:af:8c:db:a7:
         83:de:1a:0a:33:58:5b:5e:26:cf:5a:d0:dc:b4:85:91:22:c7:
         ed:67:e6:37:61:70:55:1e:99:26:95:f3:0a:60:35:98:80:54:
         7f:f9:42:3c:59:2f:86:f8:50:93:97:c8:29:1f:4a:6f:81:16:
         00:53:c3:8f:a7:79:a5:fb:26:69:ef:ef:47:6e:03:35:9e:1a:
         d6:04:05:0f:c1:05:c0:3f:2a:fa:30:a1:03:39:7d:f3:7b:40:
         df:85:35:2a:22:e0:a3:91:33:ae:fa:4a:2e:8f:93:13:28:31:
         6b:f4:86:81:38:db:5d:b0:e3:ce:03:33:5d:d3:e3:d9:ca:6c:
         71:e1:af:4b:e0:7a:8b:9e:f9:af:55:cc:ce:34:cd:ec:d5:29:
         b7:c0:02:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:21:37 2025 by rpki-client