Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e089ed8b-0699-31c2-9401-f1dd2024ea39.roa
File:                     e089ed8b-0699-31c2-9401-f1dd2024ea39.roa (raw, json)
Hash identifier:          6zzzrGh/XSxPaOMqiCfdPxrjrWhQC5dWxMxBtU6yx7U=
Subject key identifier:   6C:53:A8:11:11:CD:11:C2:53:67:A6:FA:6B:1C:69:32:50:7B:F3:CA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849CFFF7E8AAE083BE4B42C55A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e089ed8b-0699-31c2-9401-f1dd2024ea39.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     62240
IP address blocks:        166.1.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:7e:8a:ae:08:3b:e4:b4:2c:55:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=49ee722e-f766-43f2-a4e3-f8a03668d9c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:10:14:d4:bc:23:71:78:40:5a:e6:56:37:
                    d9:95:39:93:c0:bf:74:4f:08:28:f4:40:82:fb:4e:
                    3d:31:d6:5b:51:51:44:c9:57:04:6e:a3:ab:17:8c:
                    cd:ab:3c:5a:30:a5:da:ba:1a:02:a8:fb:34:bf:c3:
                    c7:d7:d6:92:ea:ce:35:0d:ed:0b:67:bb:40:4f:95:
                    c5:42:58:0f:bd:ad:07:25:77:c9:8b:6c:36:3e:32:
                    41:c7:4d:69:a6:cb:b9:b3:25:0f:15:1a:22:83:7e:
                    f4:46:f8:bc:dc:0d:a2:83:2e:f0:52:59:2f:e6:00:
                    c7:d5:54:6c:1a:f5:2c:03:53:60:e5:48:c1:35:66:
                    b2:a0:57:a8:44:4f:02:b9:24:01:1a:d7:ff:13:a6:
                    27:86:a9:18:c3:dd:e8:b9:0b:aa:81:35:b7:91:57:
                    14:14:67:d4:f0:73:4b:da:13:13:fd:3b:0e:44:53:
                    b3:c6:d6:97:b0:c8:e9:a5:67:f9:dc:55:35:f4:f9:
                    26:1b:c7:7b:b8:78:36:95:7d:12:60:ab:98:c6:f2:
                    9e:35:09:f1:bd:86:d0:dd:da:21:71:0a:b9:cf:26:
                    8f:de:f8:6c:6c:76:95:37:86:b5:05:76:d8:d9:7e:
                    9c:63:47:89:62:73:f8:6d:e4:83:5f:11:c1:7e:c5:
                    30:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:53:A8:11:11:CD:11:C2:53:67:A6:FA:6B:1C:69:32:50:7B:F3:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e089ed8b-0699-31c2-9401-f1dd2024ea39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:54:f8:01:28:08:a6:80:cc:0f:9a:e3:91:5f:cc:84:95:b9:
         ec:8f:50:21:11:62:23:36:96:11:85:96:85:13:9e:34:2d:fa:
         6f:e7:31:f0:d1:1e:4f:15:b9:7c:9c:f4:62:d5:59:a7:e4:77:
         37:88:0a:44:5d:9c:f5:92:e9:8e:90:f4:38:ea:27:d5:ae:db:
         a8:6e:40:9e:71:48:12:fb:5d:f8:1c:0c:ba:c4:8f:27:87:cd:
         45:71:ef:ea:4b:02:69:87:af:e1:3d:03:18:bc:0c:4d:17:ea:
         12:5c:f4:16:64:51:04:27:76:05:73:ee:79:fa:91:67:be:89:
         4d:ca:f3:1a:18:33:28:a2:4b:2b:24:11:5f:5a:65:35:a8:95:
         43:9d:2f:d0:76:9d:94:24:f0:3a:7a:54:23:1e:27:44:6f:96:
         f5:60:41:a2:29:91:3e:27:e0:67:9f:03:be:29:9c:b2:af:b0:
         d9:ff:38:63:63:ac:b0:47:cf:8d:c9:83:2d:3d:0b:5a:3b:f2:
         e0:e0:85:76:18:f8:ce:eb:88:d1:f2:e4:06:47:aa:6b:ed:fc:
         5a:7c:79:10:71:50:d0:88:6b:db:0f:49:1d:39:e8:3a:dc:1d:
         12:78:f1:1e:c5:90:c4:94:9e:d1:e1:31:ff:b6:2b:d3:82:0b:
         fe:7b:df:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:18:05 2025 by rpki-client