Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b1566574-d865-3d40-bb8e-201a19f419ee.roa
File:                     b1566574-d865-3d40-bb8e-201a19f419ee.roa (raw, json)
Hash identifier:          nTXfi7euTV/gWaO0LLadc+khjDFshV8Yc2yyEdzB03U=
Subject key identifier:   CD:DF:C0:71:58:5A:48:B4:81:3E:39:7F:FC:C1:91:CB:DD:0B:26:0C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849CFFF8096EEE56D334F27DE80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b1566574-d865-3d40-bb8e-201a19f419ee.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     62240
IP address blocks:        166.1.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:80:96:ee:e5:6d:33:4f:27:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=fc5ed1a4-e7d3-4f94-b46f-4700471a932e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2e:f1:21:72:a3:e6:33:04:4d:b2:42:c6:36:
                    2c:f4:e8:d9:08:0e:db:ed:77:b4:c1:33:a2:5b:09:
                    62:40:61:46:d9:c2:95:da:76:57:ad:ea:06:71:8d:
                    f2:b6:d8:19:58:20:67:30:fb:e1:87:3c:19:35:fd:
                    67:3a:bf:e3:4a:65:15:32:0c:fc:a3:c4:0d:ba:86:
                    c7:b2:3c:06:d1:42:43:ab:a9:c9:76:9c:e3:48:c3:
                    fd:af:da:95:b3:a1:f1:f3:64:27:0d:5b:53:b3:a5:
                    2b:f3:aa:a1:ce:f2:5d:2e:da:8e:e9:ac:1a:a0:e7:
                    d2:f5:b0:bf:56:05:7e:a3:8d:e9:1b:68:a8:59:7a:
                    04:3d:97:dc:0a:62:50:f0:ef:40:7f:c8:ff:2b:37:
                    16:e0:74:cf:41:b6:39:bc:10:fd:38:86:1c:b6:f9:
                    fa:a4:04:23:c6:dc:52:79:d6:bd:4f:28:e2:4a:b3:
                    61:b6:26:cf:84:ac:01:a3:a7:63:54:5c:60:af:76:
                    04:c1:0f:65:57:66:f0:d9:84:88:e1:84:9d:c5:1d:
                    2c:62:41:5d:10:ea:96:ef:3e:b8:70:ab:88:1a:34:
                    9a:5f:98:5f:41:48:f7:c0:c7:71:10:5e:e9:39:ed:
                    72:9d:44:87:ef:76:bd:04:9f:12:06:61:fb:63:1a:
                    2c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DF:C0:71:58:5A:48:B4:81:3E:39:7F:FC:C1:91:CB:DD:0B:26:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b1566574-d865-3d40-bb8e-201a19f419ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:43:4a:8e:f5:85:ce:9a:e2:ab:f1:f3:a4:03:d3:62:1c:2c:
         60:67:ae:88:04:d4:0d:69:da:1d:e4:2b:6a:82:8b:97:85:91:
         a3:0a:4a:a4:86:b7:be:f0:44:9a:fb:fb:c9:54:2e:fb:04:c5:
         70:f0:3f:c7:80:89:4a:2e:7e:e5:33:c3:ed:b8:b5:f4:68:87:
         50:df:32:bd:49:fe:26:76:00:4f:ee:83:2d:4a:fc:22:0d:93:
         ca:0c:1d:37:d5:5e:fc:19:10:c6:32:ad:71:da:51:ef:8f:2d:
         c8:60:1a:06:19:53:c6:d0:41:4e:a5:25:11:45:3c:83:9e:4f:
         b9:5e:40:0b:b6:2b:a8:bc:46:9a:d6:79:6f:51:86:f2:39:d8:
         0a:55:72:b4:eb:a7:70:1d:9f:9d:93:c5:56:d3:2c:91:bf:cd:
         9b:87:aa:6e:87:96:8a:63:ab:56:0d:43:19:45:3b:f7:34:f1:
         33:b9:bc:3c:ca:b6:b7:2c:7d:14:f2:10:bc:16:d9:3b:6e:e7:
         1f:8f:85:52:cc:dd:b2:5e:82:ce:e2:c3:44:65:f2:cb:04:f0:
         67:23:9b:d6:22:e8:a7:e9:e6:77:3b:2b:ec:d5:16:83:86:d8:
         b6:e1:f0:3d:48:87:df:60:b1:23:e5:72:b4:ea:05:98:99:98:
         8a:9c:cf:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:36:11 2025 by rpki-client