Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e3d41c72-cdd4-3b1b-b30b-410b1afa1253.roa
File:                     e3d41c72-cdd4-3b1b-b30b-410b1afa1253.roa (raw, json)
Hash identifier:          jISPFLzA3GLhntr1Y8v427utS2BlofKppfrrtv6elO8=
Subject key identifier:   7D:5F:58:66:97:0F:52:7B:79:1F:35:FC:57:B3:D5:15:C8:C9:E6:C7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584858A05DBDE3D9D7073F7CCA00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e3d41c72-cdd4-3b1b-b30b-410b1afa1253.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     264409
IP address blocks:        166.0.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:5d:bd:e3:d9:d7:07:3f:7c:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=d7784590-bd4c-4b46-a3d8-29af8640734e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2b:0a:00:20:62:fc:28:4d:4e:b8:e1:f2:32:
                    9b:05:10:d7:ed:6c:ae:fc:16:6e:20:0c:e1:59:d0:
                    b0:9f:ee:5c:b8:4d:fb:e2:9d:97:dd:ca:7e:f3:65:
                    da:fc:8a:d9:6c:94:95:ce:6c:26:55:8f:7c:3b:00:
                    fe:55:e9:ad:2f:b2:4d:c4:9c:6d:b8:9f:dc:6c:45:
                    da:ea:6b:cd:c7:9c:0e:f1:00:f0:8d:e4:a4:65:44:
                    02:8b:1c:1f:f0:4c:9a:91:73:09:f1:aa:3a:fa:74:
                    55:3a:b1:77:95:1e:7b:26:6f:43:51:e6:c1:4b:e8:
                    b9:e0:ee:6e:54:4f:08:8e:0d:bf:30:52:12:43:7d:
                    77:96:35:8b:98:6e:b9:1b:f4:d2:77:3f:13:c1:98:
                    9d:ca:d5:6a:02:04:20:dc:2c:20:47:d3:57:6e:a3:
                    31:9b:1d:11:79:c8:ff:9b:c9:32:2d:14:a3:03:17:
                    da:22:51:0e:f8:bc:3f:b3:e1:82:e0:a4:05:c6:02:
                    ff:52:2d:d5:91:b9:97:e7:77:97:e2:20:b5:55:cc:
                    39:46:66:e8:97:e0:77:25:57:7a:05:ce:bf:b1:8e:
                    f7:eb:71:05:c6:b1:aa:bd:27:d5:de:5e:0c:47:da:
                    44:8b:f2:6f:e0:55:c7:9e:46:52:5f:4c:65:ed:a9:
                    78:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5F:58:66:97:0F:52:7B:79:1F:35:FC:57:B3:D5:15:C8:C9:E6:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e3d41c72-cdd4-3b1b-b30b-410b1afa1253.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:81:a2:61:cd:ae:25:a9:78:25:b2:c9:29:a0:c1:33:70:b6:
         03:2d:f1:97:8c:b7:2a:72:87:36:98:84:1f:f2:16:8a:ed:86:
         6f:29:85:2e:63:30:6a:47:d1:68:17:36:37:3b:17:e0:0d:dd:
         fb:6d:61:5a:fb:ed:e4:3e:d9:3a:24:d2:8c:d6:bd:52:2d:cd:
         4b:c1:94:b2:69:21:8b:45:72:93:59:7f:60:2c:fc:d5:08:b5:
         d1:67:85:35:d8:7e:e3:52:e0:f9:97:89:bd:24:59:db:72:24:
         c0:48:2a:bd:23:c0:86:83:e1:1a:f5:94:4f:7a:0d:44:3b:d7:
         d0:b5:16:61:9d:ae:08:79:ec:ae:4b:d4:0e:07:1a:03:2c:a9:
         9b:d6:9b:1e:b2:6b:9c:40:bc:8f:10:27:fb:27:a3:03:4d:63:
         a5:bc:e2:da:02:8a:99:d2:1a:3a:ea:27:51:55:75:2b:f2:09:
         87:19:72:93:32:ee:8c:69:c4:44:60:73:1e:c3:b0:e3:e5:3d:
         31:be:c6:bd:07:03:0f:2a:20:d0:01:82:9e:e0:a3:bb:62:62:
         9f:67:ff:51:13:64:0b:95:b2:b2:87:5d:2f:e6:2a:1b:51:75:
         fa:72:78:56:81:c8:7a:a8:be:b2:28:21:8f:ae:88:13:8d:21:
         1b:30:6d:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoF2949nXBz98ygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
ZDc3ODQ1OTAtYmQ0Yy00YjQ2LWEzZDgtMjlhZjg2NDA3MzRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApysKACBi/ChNTrjh8jKbBRDX7Wyu/BZuIAzh
WdCwn+5cuE374p2X3cp+82Xa/IrZbJSVzmwmVY98OwD+VemtL7JNxJxtuJ/cbEXa
6mvNx5wO8QDwjeSkZUQCixwf8EyakXMJ8ao6+nRVOrF3lR57Jm9DUebBS+i54O5u
VE8Ijg2/MFISQ313ljWLmG65G/TSdz8TwZidytVqAgQg3CwgR9NXbqMxmx0Recj/
m8kyLRSjAxfaIlEO+Lw/s+GC4KQFxgL/Ui3VkbmX53eX4iC1Vcw5Rmbol+B3JVd6
Bc6/sY7363EFxrGqvSfV3l4MR9pEi/Jv4FXHnkZSX0xl7al49QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH1fWGaXD1J7eR81/Fez1RXIyebHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTNkNDFjNzItY2RkNC0z
YjFiLWIzMGItNDEwYjFhZmExMjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgC5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACyBomHNriWpeCWyySmgwTNwtgMt8ZeMtypyhzaYhB/yForthm8phS5j
MGpH0WgXNjc7F+AN3fttYVr77eQ+2Tok0ozWvVItzUvBlLJpIYtFcpNZf2As/NUI
tdFnhTXYfuNS4PmXib0kWdtyJMBIKr0jwIaD4Rr1lE96DUQ719C1FmGdrgh57K5L
1A4HGgMsqZvWmx6ya5xAvI8QJ/snowNNY6W84toCipnSGjrqJ1FVdSvyCYcZcpMy
7oxpxERgcx7DsOPlPTG+xr0HAw8qINABgp7go7tiYp9n/1ETZAuVsrKHXS/mKhtR
dfpyeFaByHqovrIoIY+uiBONIRswbWc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:21 2025 by rpki-client