Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e1da8820-1668-3c5c-b819-4dbbd5f4d3f1.roa
File:                     e1da8820-1668-3c5c-b819-4dbbd5f4d3f1.roa (raw, json)
Hash identifier:          7EUdJxSZlwI4e/ifXWRFFK8e7rhAUCABXH6QZ1YXkpE=
Subject key identifier:   1C:B1:3B:97:4C:EC:6A:DE:06:64:7D:02:24:A7:87:4A:A8:35:22:C2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858483F803164C2E741C83DD4F100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e1da8820-1668-3c5c-b819-4dbbd5f4d3f1.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     62240
IP address blocks:        166.1.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:31:64:c2:e7:41:c8:3d:d4:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=1e1e2185-4552-49f1-aaa9-e08f1f8f645d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b4:11:99:aa:ee:75:f5:11:f1:27:d8:49:39:
                    d5:a0:fa:eb:11:43:a6:03:3e:aa:0e:f8:15:50:74:
                    31:ce:b5:36:52:2d:74:6a:a6:89:41:cb:02:8e:12:
                    a3:8b:52:77:21:8d:34:6c:7e:92:1e:2e:24:47:19:
                    7b:a8:33:4d:3e:6b:5d:12:93:50:ca:94:da:ea:41:
                    6e:9a:0f:ec:83:15:bb:8e:d5:80:78:64:c0:4a:66:
                    04:ab:ce:db:e4:9b:c6:c4:5e:69:5c:fe:af:18:89:
                    a4:05:68:e8:7f:53:88:2e:50:9a:99:cd:6e:bf:4c:
                    dc:4b:ab:af:ed:98:fd:1d:33:e1:f1:20:0a:f2:d7:
                    da:75:92:1c:5e:ed:c3:b7:cf:ec:34:68:9a:ba:69:
                    c2:43:b3:15:de:9f:da:b5:25:12:fc:de:f2:20:5e:
                    76:1a:95:0f:7e:52:8c:ed:28:2a:f1:f2:56:58:20:
                    33:73:0d:76:19:ce:1f:3c:80:c8:f1:11:4b:27:4b:
                    52:df:55:f9:85:64:92:93:88:59:07:c4:fc:32:a2:
                    67:c6:fa:71:93:d1:d0:2b:88:1d:5d:be:81:e5:8b:
                    60:8c:ec:3a:06:d3:d5:6e:7a:84:1f:51:f7:ae:e8:
                    77:64:08:b3:2a:2e:82:7b:5e:ad:df:cc:e1:e1:3a:
                    2e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B1:3B:97:4C:EC:6A:DE:06:64:7D:02:24:A7:87:4A:A8:35:22:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e1da8820-1668-3c5c-b819-4dbbd5f4d3f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:19:e9:4d:61:fe:b0:b4:b1:cb:98:c6:09:47:f1:e1:23:22:
         b1:53:a8:bd:98:27:5d:ed:5e:f6:76:82:fb:8a:be:cc:70:9f:
         80:a5:99:b0:ac:ec:4e:53:e2:48:2f:3e:90:14:ae:0a:49:87:
         1e:8e:f7:6a:8e:12:42:97:12:8f:f4:6a:bc:57:32:a3:7c:86:
         03:5f:53:20:4a:a4:69:25:f0:09:ea:ef:ad:80:40:41:d4:56:
         f7:c4:b2:e8:5f:95:62:95:b5:ee:52:ef:45:75:ac:1d:77:70:
         f6:88:04:f6:6c:2a:85:10:31:ba:05:fb:87:0b:37:fb:94:77:
         ab:40:65:49:fd:08:c6:fc:66:16:2e:7a:46:cd:76:c8:3d:c5:
         73:a3:82:3f:31:fa:06:69:9e:e8:f3:c1:6d:1b:2d:c9:49:28:
         2c:86:ce:aa:34:da:66:40:d5:f8:2d:59:14:42:6d:f9:0f:93:
         31:a2:d3:44:40:62:87:a3:90:c2:a4:4b:25:c7:3a:48:17:fe:
         d1:7f:a8:03:af:cd:3d:a3:dc:b6:ee:76:df:69:c6:44:a1:b4:
         ce:8b:1e:42:3f:be:ab:f9:6b:d8:78:c2:d0:8e:17:78:c9:8e:
         39:34:b5:c6:dc:c0:0f:fd:74:1a:45:09:5e:d1:26:49:cd:a7:
         54:cf:bf:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:59 2025 by rpki-client