Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/de5831e3-3271-3a86-837d-1be9fc196edd.roa
File:                     de5831e3-3271-3a86-837d-1be9fc196edd.roa (raw, json)
Hash identifier:          8+691extFJMaKJPa8iNABxqoCfnWOc4EP0gsh7qqBoY=
Subject key identifier:   CA:D2:7B:A3:A5:EE:52:D3:A5:14:41:18:66:48:26:22:CD:C8:03:62
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848F00C79BBD3352241A049DC00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/de5831e3-3271-3a86-837d-1be9fc196edd.roa
Signing time:             Wed 19 Feb 2025 19:46:02 +0000
ROA not before:           Wed 19 Feb 2025 19:46:02 +0000
ROA not after:            Tue 20 May 2025 18:46:02 +0000
asID:                     62240
IP address blocks:        166.1.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f0:0c:79:bb:d3:35:22:41:a0:49:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 19 19:46:02 2025 GMT
            Not After : May 20 18:46:02 2025 GMT
        Subject: CN=8bb90d2d-fdc2-4109-9697-2d85a7e196c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:de:67:aa:86:3b:dd:f9:ca:6d:ed:e9:cf:30:
                    7e:53:52:87:e0:09:99:5e:03:7b:b4:df:02:b6:d7:
                    37:f1:90:d0:24:e9:cc:e4:02:ff:03:7c:d5:bd:7e:
                    4e:da:ec:96:60:93:1d:f2:ba:33:57:ac:fc:dd:9d:
                    cb:e5:4f:01:d4:58:4c:5e:aa:cf:83:cc:1c:af:3f:
                    8d:de:8b:68:d5:5a:55:ce:67:f2:c0:e2:b6:ec:0a:
                    78:00:da:cf:46:33:6a:3f:b2:e9:10:1a:85:ec:00:
                    2e:2f:39:5f:d2:07:1d:ed:d8:5a:28:3a:34:ed:6c:
                    00:7e:e0:e5:c1:9e:87:c1:3c:55:04:c2:5e:5f:be:
                    73:7c:39:ef:6f:43:58:e6:6a:a9:17:4f:d0:a1:f1:
                    9e:ea:9d:a7:6a:af:a3:b3:20:59:64:26:c0:f6:aa:
                    22:ff:f7:cd:08:03:d7:e8:8e:92:af:c1:49:d7:fe:
                    e6:d8:50:61:b6:77:57:d1:49:25:15:0e:a0:ee:f7:
                    50:47:49:45:2c:cd:a2:68:31:bc:81:00:b6:77:55:
                    c0:4c:e8:c2:80:7c:d2:f4:f3:df:7b:59:ff:0c:19:
                    1a:ed:5a:99:a7:84:23:68:9c:6a:af:17:8d:c5:b4:
                    48:cf:07:dc:ed:c0:c4:d5:23:d5:7a:b3:74:7f:3c:
                    a9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D2:7B:A3:A5:EE:52:D3:A5:14:41:18:66:48:26:22:CD:C8:03:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/de5831e3-3271-3a86-837d-1be9fc196edd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:ca:2c:56:28:ab:2c:de:24:1a:aa:63:9c:1d:2f:d4:fa:89:
         2f:f4:c2:b4:17:8d:6f:34:db:dc:70:16:e2:56:34:43:70:1e:
         32:3b:4b:81:dd:96:97:ee:d7:24:2c:d3:34:b1:62:04:43:62:
         df:ca:27:f5:9b:aa:f1:4b:4b:5d:2c:8d:79:8d:0a:fa:04:7c:
         96:60:e0:b2:55:3c:b7:d9:5e:75:30:9e:11:a5:b4:84:25:da:
         3a:bd:f3:1a:ae:0f:69:13:01:21:03:b3:70:ca:7e:cc:12:a1:
         68:06:3e:d7:e3:b0:04:74:6c:21:e9:6b:a0:9a:94:67:9b:2b:
         02:75:30:be:f5:9c:05:b7:97:18:1e:84:5d:b2:b9:b3:d2:21:
         81:47:44:2b:90:4f:75:98:50:db:94:00:81:5d:2d:a7:85:35:
         5b:b4:5d:79:45:ca:88:c1:1e:01:e0:3e:c9:31:45:1f:47:16:
         59:0d:0f:e4:c0:7e:48:92:c6:a6:26:b4:e2:18:71:0f:e7:c1:
         8f:5f:db:69:f5:77:59:83:a3:dc:32:db:53:29:46:8a:ff:2c:
         82:c2:8a:49:79:d8:59:21:93:93:68:bd:b9:da:8e:61:dd:5d:
         87:29:4f:05:9d:09:8b:2b:6c:07:68:bd:2b:21:09:73:d2:0a:
         a8:8a:c5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:24:31 2025 by rpki-client