Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ca37900f-609b-3f4a-882e-dce424197819.roa
File:                     ca37900f-609b-3f4a-882e-dce424197819.roa (raw, json)
Hash identifier:          TTrwPu6oNbD57++ibVFwFpihId0QSJNZBlQZ6JnTZVw=
Subject key identifier:   62:BD:D4:31:09:B0:F5:21:01:98:A7:E1:0A:72:E5:1C:A7:EA:75:49
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858483F8031C0E215DF57CF6BE970
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ca37900f-609b-3f4a-882e-dce424197819.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     62240
IP address blocks:        166.1.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:31:c0:e2:15:df:57:cf:6b:e9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=2f13122b-5e32-4933-996f-50f321a5c4ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d8:80:c9:40:93:a9:22:9d:5c:cc:c8:e2:c1:
                    65:42:46:ca:1a:0e:fa:cd:05:87:5a:eb:07:9a:23:
                    ec:19:0e:58:44:98:90:21:49:44:ee:7a:f7:86:9f:
                    1e:1c:8d:0c:e3:38:91:30:6d:f9:fd:41:2d:51:9d:
                    09:94:31:ef:6a:3a:89:5f:94:fb:6a:e1:cf:fe:41:
                    19:43:de:63:09:ec:fd:2d:24:d5:c8:9a:d0:0f:1c:
                    9e:41:76:93:a5:93:66:2f:52:6a:58:0d:06:3a:d2:
                    42:5a:4f:5e:70:e2:aa:1c:67:bd:88:d0:79:a9:83:
                    89:6a:5a:de:72:c5:fd:29:44:41:da:99:25:ee:06:
                    51:f7:fc:d6:8b:66:12:1e:42:f2:91:eb:8a:6a:02:
                    35:10:b3:e7:ff:d6:a3:1c:15:77:9e:6c:6e:b7:7a:
                    34:72:b3:0f:0a:ed:54:d5:f0:fc:99:1a:52:16:1b:
                    df:98:56:bd:ac:98:98:c5:a2:4d:48:90:a7:57:e3:
                    3c:33:6d:d7:52:e0:3a:29:eb:4c:2b:c7:9b:91:33:
                    19:df:4c:d4:24:db:25:01:58:01:fb:54:aa:f9:e3:
                    26:9c:f6:4e:31:56:70:52:f2:e6:a5:42:93:49:82:
                    b8:40:65:64:e3:e6:89:04:a6:b8:ba:64:59:f0:4a:
                    d5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BD:D4:31:09:B0:F5:21:01:98:A7:E1:0A:72:E5:1C:A7:EA:75:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ca37900f-609b-3f4a-882e-dce424197819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:3a:8c:02:01:08:f9:94:d9:20:7f:fb:8a:1c:bd:89:6d:a1:
         cf:2b:81:66:3c:3a:2e:99:12:88:68:8a:07:30:ea:e9:88:3a:
         ab:7a:a5:4a:00:78:31:6a:ee:6a:8c:e4:44:91:49:83:94:9e:
         cb:e9:99:71:73:4e:a6:f9:3c:60:61:67:ff:6e:91:37:b5:0d:
         40:a1:c0:fe:cf:70:4b:ec:6b:5f:5b:49:ce:f7:86:0e:27:d8:
         08:ae:f7:8a:0e:c2:2d:34:c4:10:1a:ef:fa:77:e4:dd:08:c0:
         7d:43:7e:d8:f7:93:28:48:bf:52:36:20:42:f8:90:0e:98:2f:
         3b:d5:67:a3:73:a0:c8:77:f7:35:71:f2:59:03:9f:8b:3d:17:
         39:be:79:eb:9c:74:ae:3c:9c:c5:96:4d:eb:3f:35:22:1f:60:
         39:5f:a8:d4:94:8f:e8:76:b0:8e:ea:ce:60:b9:8b:e0:92:99:
         f6:a7:4e:fa:fd:d0:a6:2e:b5:d9:f2:8e:83:2c:54:0d:9b:d4:
         db:6f:02:19:f1:d1:f5:20:f4:76:b0:e7:43:70:39:43:37:01:
         f7:21:d0:c2:5f:3e:e6:63:81:ea:1e:49:ed:d2:19:51:2e:74:
         32:82:40:85:d1:06:e8:4e:e9:6f:bb:23:56:a8:e0:f8:54:5c:
         75:29:fd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:32 2025 by rpki-client