Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b007b1e6-b061-30db-bfa3-0503760eb8db.roa
File:                     b007b1e6-b061-30db-bfa3-0503760eb8db.roa (raw, json)
Hash identifier:          +OUhqtBNPfXVoIw/sOrTsZU7HtwWvJmJYXyN+lXkgFQ=
Subject key identifier:   4F:FF:97:70:34:65:C5:A2:8E:46:2F:91:4D:D0:B1:C5:B3:B7:61:FB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858483F802FFC3BC2D6725D1873A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b007b1e6-b061-30db-bfa3-0503760eb8db.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     62240
IP address blocks:        166.1.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:2f:fc:3b:c2:d6:72:5d:18:73:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=c6c54f64-686a-436d-8b79-a092656c5a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5d:36:25:7a:7b:64:3d:1b:47:0b:56:ff:f6:
                    d7:66:8e:24:4b:ee:9c:f8:7a:b7:8c:93:1c:27:0f:
                    40:ab:55:8e:d2:f9:bb:9b:fe:5c:56:ad:05:d1:89:
                    70:3c:6d:8e:d8:27:d6:07:fd:37:4e:28:40:8d:40:
                    0d:8c:9f:a1:13:73:64:29:0b:3c:f0:16:81:e7:54:
                    58:af:b2:0c:57:c8:9a:a6:b2:3a:01:a3:28:50:fa:
                    d2:8c:20:4c:5e:d5:75:6d:78:22:17:35:35:cf:76:
                    39:b1:d7:7d:62:24:54:c8:d7:b1:59:84:1e:e4:60:
                    97:3f:3a:e7:fd:81:cb:03:2e:da:ff:1a:44:1e:0b:
                    b0:46:8c:7b:ae:56:6c:44:e3:66:f2:3d:59:6a:60:
                    c8:ef:e6:f4:75:32:01:6e:3d:29:17:57:2e:5d:b1:
                    83:0d:fa:4c:e7:fc:73:40:11:e1:fd:2e:de:f5:55:
                    6a:bf:05:c3:7a:e3:4a:37:71:07:8c:ea:36:bb:08:
                    71:40:96:30:e0:37:82:7f:44:46:7e:7d:ba:4e:0b:
                    b1:55:fb:d5:eb:e1:55:24:dd:a5:ef:d1:3b:1a:02:
                    43:e4:b2:32:90:49:d7:26:f9:ba:d2:83:50:3a:4e:
                    cf:1b:8c:56:33:c5:5a:ee:c4:9e:ce:98:49:ec:40:
                    db:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FF:97:70:34:65:C5:A2:8E:46:2F:91:4D:D0:B1:C5:B3:B7:61:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b007b1e6-b061-30db-bfa3-0503760eb8db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:f3:14:32:5a:02:b2:33:b3:a4:27:3c:0c:a5:1a:4f:a2:3b:
         1e:7b:00:16:09:87:2f:87:b1:da:85:1c:52:4b:f0:01:fa:a7:
         b8:e5:10:79:48:4a:bc:2c:c2:2d:a3:d1:aa:6f:68:86:47:2b:
         56:3b:ca:c0:1a:0e:84:2a:16:60:af:ec:d6:cd:ea:86:ff:de:
         5b:3c:c8:9f:34:fb:18:8c:16:01:55:39:06:41:33:f3:df:82:
         f0:da:be:51:a0:87:e5:e5:f2:e3:bc:ee:1c:fc:73:07:96:46:
         0a:92:ca:d5:c5:fe:d9:9f:cd:a7:f3:1e:96:58:df:07:c2:d0:
         51:8a:1f:11:0b:90:2b:60:d8:56:f9:93:77:aa:8d:bb:d8:4f:
         6a:87:3d:8f:d9:96:84:95:61:ab:77:46:f1:0f:a3:8f:ed:9c:
         b4:f6:2a:8e:86:4c:d3:b1:ea:0a:90:3a:31:94:4f:7e:a7:0f:
         8b:7f:95:5f:df:76:c6:a6:d1:08:aa:dc:5b:73:d0:5e:af:5c:
         b2:09:7a:ac:3a:3b:8f:3e:40:8f:f1:dc:78:4e:76:79:7c:99:
         6c:8e:63:40:b0:58:cb:6d:ef:12:79:7e:00:92:c7:2e:0f:dd:
         9d:8b:ce:9d:96:aa:c2:58:87:95:80:16:b6:ba:62:74:e7:7b:
         db:b0:fb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:32:50 2025 by rpki-client