Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c1fea391-eceb-388d-8d15-cefc8c97dec8.roa
File:                     c1fea391-eceb-388d-8d15-cefc8c97dec8.roa (raw, json)
Hash identifier:          pOptzxAqpJIRC7m/dsltWKDs5R9NDKhUfQjyc+oHCuA=
Subject key identifier:   AF:34:18:9A:DB:18:09:45:DB:28:25:9A:C9:67:A7:B4:93:A7:5D:B9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848C5818FA591ED3BCD4FCEE000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c1fea391-eceb-388d-8d15-cefc8c97dec8.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     212667
IP address blocks:        166.1.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:8f:a5:91:ed:3b:cd:4f:ce:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=db5f06d2-ead3-4a5e-8655-d35b56d33e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c8:c5:b6:8e:e6:65:3d:43:da:4b:10:98:76:
                    89:85:8b:51:00:b3:b9:20:2b:cb:16:e5:e2:3e:81:
                    5f:1d:0b:5d:50:ef:04:13:f4:9a:18:16:80:45:7a:
                    6d:e9:6b:c5:32:67:4d:9e:38:54:95:f1:06:a5:81:
                    1d:5b:dd:df:7c:c7:7f:b6:7f:4f:c7:d5:e2:0e:ec:
                    75:34:be:a3:f0:88:83:ab:ca:df:7f:27:77:fb:dc:
                    f6:c0:2e:d2:e4:2c:e5:10:76:6c:06:16:e4:f1:9a:
                    f7:7a:38:be:4a:20:99:92:6b:85:5a:f1:57:56:71:
                    3e:2f:6b:eb:79:69:b6:0e:0e:a6:06:e4:c4:fc:43:
                    13:33:84:f8:e7:49:61:37:e9:82:52:d5:70:b8:f1:
                    8b:c9:af:9f:79:8f:89:4e:c4:82:a9:30:c4:18:0b:
                    d6:3f:8f:5f:ff:a7:8f:ec:c3:f7:a8:2c:17:76:1a:
                    0b:8f:5b:60:62:7e:0d:2d:61:5a:d8:56:d6:1e:00:
                    71:3b:40:e1:48:75:a6:3f:4e:8b:0d:8d:c9:9c:31:
                    18:c5:16:db:7b:3b:50:8c:86:64:4b:96:c3:62:7f:
                    98:92:e1:e6:87:bc:da:cc:d4:45:2c:1b:34:4c:72:
                    80:a1:25:79:ec:4a:dc:58:c9:ba:74:f3:8e:fa:0e:
                    47:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:34:18:9A:DB:18:09:45:DB:28:25:9A:C9:67:A7:B4:93:A7:5D:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c1fea391-eceb-388d-8d15-cefc8c97dec8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:60:c2:b3:bf:58:36:6f:93:8f:e9:8a:d4:34:de:73:7d:4e:
         23:9e:80:5c:5b:e7:34:e8:8b:93:0a:21:39:05:2e:05:5e:ca:
         ac:3f:e8:0f:b1:16:e3:c9:a6:09:1a:99:55:d7:b9:02:2f:4b:
         dd:e0:93:d6:08:70:4c:96:fd:76:db:48:f7:0c:ee:9e:cc:9b:
         60:89:96:99:99:ad:63:e8:ce:6e:96:31:71:4c:dd:30:ce:ed:
         4b:3a:67:35:32:bf:3d:da:65:16:d8:ad:b4:81:43:e0:a4:49:
         71:ab:c9:16:87:01:08:04:0d:bc:cf:82:55:06:d8:f5:91:ae:
         1b:73:fa:98:db:b7:58:d0:87:ca:a2:ac:07:84:8d:52:1d:32:
         49:1c:5f:81:02:bb:a7:c6:a8:72:28:32:1b:a5:f6:e4:a2:fd:
         ac:61:7d:16:1c:e4:34:42:e7:a7:2a:df:15:43:19:90:a3:6a:
         fb:ef:64:4a:4a:eb:bc:44:5b:09:2b:1b:5a:59:da:68:99:78:
         76:45:e9:c1:fa:0b:4a:db:b3:c3:67:4e:12:ff:6b:11:43:34:
         12:17:c2:54:fb:f4:60:98:0b:83:24:10:a6:10:88:d0:b7:7b:
         3a:cc:3f:b9:7f:50:b0:06:48:00:3f:1b:27:64:bc:ba:cf:7c:
         a2:8f:9c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:09:38 2025 by rpki-client