Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bd1971f0-d705-3cf4-85b1-905a99288a5a.roa
File:                     bd1971f0-d705-3cf4-85b1-905a99288a5a.roa (raw, json)
Hash identifier:          lj8ZRfCK0gm+BQJsQHpSHjVSpiS0OeH4yXs890DONs8=
Subject key identifier:   0E:B3:8D:AD:4D:A0:D8:45:0F:59:17:EB:3A:F4:50:C8:5E:ED:9F:28
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848F00C6CE0BDF9CDEA72308700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bd1971f0-d705-3cf4-85b1-905a99288a5a.roa
Signing time:             Wed 19 Feb 2025 19:45:56 +0000
ROA not before:           Wed 19 Feb 2025 19:45:56 +0000
ROA not after:            Tue 20 May 2025 18:45:56 +0000
asID:                     62240
IP address blocks:        166.1.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f0:0c:6c:e0:bd:f9:cd:ea:72:30:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 19 19:45:56 2025 GMT
            Not After : May 20 18:45:56 2025 GMT
        Subject: CN=3de4dc9b-9a8f-42a0-be05-77a142e1d38e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e3:71:d1:32:0d:23:1e:50:c2:88:ff:d3:0d:
                    43:e3:dc:cf:78:2c:9d:c1:bb:db:f6:ad:10:fd:3f:
                    16:96:4b:e3:24:a8:7f:76:5d:43:11:47:bb:bb:53:
                    e0:aa:8d:72:f3:eb:d1:d0:1f:ad:ee:fd:3c:20:af:
                    9e:e3:ad:aa:ef:c5:12:31:64:29:f8:1a:a0:76:9a:
                    01:95:c3:f2:da:28:2b:7b:13:67:ad:64:4f:72:91:
                    0b:51:fe:8c:29:d0:73:ed:41:97:cf:5c:5d:f9:b6:
                    12:f8:7f:7a:b1:c7:5c:4f:79:fb:8a:08:c6:b3:5d:
                    d8:7b:f5:75:b6:ed:c7:43:20:c2:b2:80:d7:f8:e6:
                    17:81:46:ed:d0:de:9a:1e:ce:44:f9:0f:96:34:aa:
                    34:ed:0b:79:08:a0:5e:fe:19:7b:55:63:9d:75:13:
                    47:40:fb:05:3e:ad:34:1f:53:b3:67:ea:0c:ca:da:
                    87:fc:a2:c0:08:14:28:d3:ef:8b:68:67:7e:ce:ff:
                    60:31:ea:7d:ea:d1:6f:cf:5c:de:4a:9e:f4:38:eb:
                    65:50:fa:85:9e:d6:5a:ae:62:66:e9:2c:b1:61:08:
                    36:7e:27:a1:0c:bc:c4:ef:ff:fa:89:77:5f:8e:7d:
                    6a:7e:21:24:60:74:64:8c:33:66:21:6f:95:80:90:
                    70:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B3:8D:AD:4D:A0:D8:45:0F:59:17:EB:3A:F4:50:C8:5E:ED:9F:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bd1971f0-d705-3cf4-85b1-905a99288a5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:1e:53:3f:34:cc:2b:1e:9d:d6:c0:68:e8:7c:81:82:39:37:
         1b:7c:a2:91:77:56:f5:1b:00:bf:8a:99:d4:7a:27:aa:38:ef:
         07:2f:47:2c:64:4e:1c:7f:77:18:f0:8d:a2:9c:21:a4:72:46:
         d9:a0:5c:2c:51:3a:57:8e:a8:f3:2f:9b:4a:6a:3a:aa:2a:26:
         93:16:ab:3f:9c:2f:99:c2:0d:78:4e:33:04:c2:17:2a:0e:95:
         a3:bc:70:ba:41:85:49:13:ba:83:c9:95:ad:89:14:00:e3:a0:
         aa:39:41:33:1b:b4:9e:ae:cc:7f:f4:bc:d7:22:59:c7:9f:e9:
         f5:40:81:44:6d:f1:36:8e:17:0b:ae:1d:5c:50:d9:fc:43:9a:
         e4:e4:87:b1:ae:31:3c:14:bc:d9:0a:7e:d2:9b:4f:af:67:4b:
         9c:72:56:5e:4d:26:31:70:c4:89:bf:86:c6:0c:06:c3:64:a1:
         a0:fa:c8:d4:1a:ee:29:8a:97:19:00:c2:23:0c:ba:80:3d:65:
         bd:28:88:ee:05:b5:fd:4d:23:3d:58:0d:ca:bf:c4:e3:68:55:
         f1:28:ba:d1:56:e5:4c:af:42:db:ad:04:a3:07:f1:06:87:78:
         dc:82:b4:8c:28:78:42:51:85:7a:83:d2:b8:55:27:ba:ef:aa:
         05:87:13:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:28:50 2025 by rpki-client