Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e5271c04-2699-3915-b08f-0add852bbb20.roa
File:                     e5271c04-2699-3915-b08f-0add852bbb20.roa (raw, json)
Hash identifier:          waBAb1B7y7RPjcB5x68i3aFoScmoOh1Y6CQKvxul3ic=
Subject key identifier:   01:55:B6:19:C3:58:4A:C3:C8:2D:B3:7D:B3:4C:5B:FC:83:EA:9E:D5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849D1654F13E1711921CA940B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e5271c04-2699-3915-b08f-0add852bbb20.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     58061
IP address blocks:        166.0.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:4f:13:e1:71:19:21:ca:94:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=259f82a3-1598-4a02-8a7c-5cfb530d8eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b5:85:a8:41:9f:18:07:62:b8:76:78:d3:c4:
                    2b:e9:ab:fb:96:1c:19:eb:a7:74:35:9b:b9:6e:8d:
                    00:ec:53:c2:d9:f0:f1:dc:a5:90:49:3b:fc:bf:16:
                    68:bc:64:6a:cf:82:86:4b:4c:dd:1a:7d:0f:4d:1c:
                    83:52:e9:93:7c:41:74:db:0d:f1:92:15:a1:ee:0b:
                    9a:d5:fa:af:42:4d:cb:b7:1d:dc:91:a9:5e:9c:29:
                    07:2b:c9:34:ac:0f:3b:a3:20:b2:cd:4f:6e:e8:5f:
                    c9:e3:b3:b8:8e:21:c9:5a:ea:df:15:0b:4f:45:73:
                    e4:72:e1:6f:a1:3d:79:cf:a7:02:ee:b9:e1:c1:37:
                    4a:26:a7:e8:53:8e:24:16:e7:94:54:2d:c4:dc:1f:
                    b9:c8:2a:d4:07:0b:00:ff:f0:3d:af:02:50:5b:3f:
                    40:dd:55:d0:3c:71:0d:ba:7a:8f:05:0f:37:c5:a4:
                    67:d5:49:f8:31:14:54:af:d9:74:55:d7:7d:50:07:
                    8b:64:2f:ca:47:ee:33:84:92:6f:93:38:ad:48:3c:
                    35:76:36:61:20:0d:cc:d5:e9:06:e2:aa:7b:ff:d4:
                    9f:99:15:5c:67:a8:63:0a:02:9f:4d:97:1d:7e:21:
                    a5:3a:d3:98:a4:65:6b:75:43:28:03:1c:1a:b2:53:
                    78:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:55:B6:19:C3:58:4A:C3:C8:2D:B3:7D:B3:4C:5B:FC:83:EA:9E:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e5271c04-2699-3915-b08f-0add852bbb20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:9f:c3:1d:d2:c2:9a:e9:ab:db:8a:16:5d:fb:29:f1:73:e6:
         52:7f:56:73:c4:b4:a3:2c:1d:54:63:b5:d1:f9:a3:58:25:13:
         1e:1f:91:e0:ec:42:bb:22:39:9c:3a:e2:2a:d0:8e:3d:07:ec:
         fc:d4:f5:8e:4f:72:49:4f:20:9b:9f:cf:2b:c8:c2:4b:42:4b:
         64:82:55:b3:35:0e:af:3f:25:33:2f:06:b8:0e:85:76:e0:79:
         30:f8:f6:1a:a9:79:34:ce:f2:2c:78:5c:6a:34:69:d1:92:cb:
         63:31:b6:99:da:f4:7e:24:f3:fa:54:aa:21:8a:e4:ed:a3:a8:
         b1:0d:79:80:ed:51:3a:69:23:cf:13:93:73:91:64:3b:32:62:
         ce:78:1a:b9:10:87:8c:7b:1b:35:b6:81:08:d1:38:cc:bf:c1:
         4c:f1:34:5f:ee:45:d6:93:42:9e:be:b4:d6:a1:5b:55:93:c4:
         63:44:b8:4e:a0:fb:56:71:87:77:01:c6:f0:fd:db:de:73:cd:
         50:9d:d3:9a:0b:6f:e4:01:e7:de:bd:a4:f1:44:4b:32:5a:7c:
         7f:7e:2b:e3:9a:ad:fb:d1:66:46:8a:a9:e8:a9:9a:8e:7e:85:
         88:77:b0:4e:ab:f3:62:d0:5b:2e:33:fa:6b:26:b3:55:e6:80:
         24:d3:34:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:51:30 2025 by rpki-client