Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e8951b51-c352-330a-886d-aec602acaa51.roa
File:                     e8951b51-c352-330a-886d-aec602acaa51.roa (raw, json)
Hash identifier:          XuAmesHLcqDX1b+DcmSzdFk+N1zOeKh2nhWrspTCgE0=
Subject key identifier:   3C:48:71:A8:45:AE:5B:04:49:02:9E:E0:90:0F:6D:B7:07:59:1E:34
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848F22C24397170072532E261A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e8951b51-c352-330a-886d-aec602acaa51.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     58061
IP address blocks:        166.1.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:24:39:71:70:07:25:32:e2:61:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=620c26fa-0c8f-4919-930b-12655a933cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:79:a1:39:d3:02:c8:16:b4:6d:d6:bf:8d:27:
                    2f:f4:0c:f1:98:8a:0c:02:62:d9:2b:6b:b3:d7:1c:
                    e0:79:f8:3b:f0:51:de:e6:c0:fb:0b:dc:de:da:c8:
                    55:76:e3:1b:1e:70:a6:c0:68:03:e9:d0:03:e5:53:
                    f9:51:f8:dd:bb:ac:08:55:12:9e:10:11:b3:cc:86:
                    84:35:6c:a2:62:bf:25:1a:61:d4:90:ac:ab:d5:78:
                    cf:ad:55:60:ad:29:a8:45:e8:0c:ce:04:da:c8:8f:
                    1c:4e:32:06:98:db:c4:b0:f1:0b:79:15:40:95:78:
                    68:4d:05:67:3e:c3:66:3f:60:27:29:2f:6f:a9:aa:
                    0a:6a:c5:80:4a:54:79:f2:90:98:61:d3:35:ad:34:
                    8a:32:84:d3:51:ed:cd:c9:24:dc:70:c1:25:cb:ed:
                    3c:f2:f1:cf:cf:e8:0a:4f:60:d4:34:9f:d6:8c:dc:
                    8e:02:ba:f1:02:69:72:f7:0c:94:bc:71:da:e1:b4:
                    3e:12:4c:51:1a:f7:d1:d2:5f:22:bd:0b:0c:1f:f9:
                    8a:82:23:86:47:36:d7:d1:9d:14:c9:75:d0:57:0d:
                    97:18:c1:70:b2:ae:4b:82:d1:25:4b:a9:16:bf:6a:
                    fe:7c:43:00:00:84:84:df:c1:14:85:4f:27:88:94:
                    dc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:48:71:A8:45:AE:5B:04:49:02:9E:E0:90:0F:6D:B7:07:59:1E:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e8951b51-c352-330a-886d-aec602acaa51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:17:ef:0d:76:b3:d2:34:57:55:34:d4:04:b2:f4:47:5e:b7:
         ce:a1:0c:9e:ca:8b:56:98:81:7d:79:0e:9f:72:1e:93:c4:e7:
         14:ee:c0:46:ce:76:f5:d5:eb:9a:76:db:18:56:cb:64:68:ce:
         d3:18:f9:81:3c:6b:e2:53:60:7d:53:11:e5:d1:31:81:8b:38:
         ed:12:90:c6:54:df:54:d2:5d:42:4e:f0:ef:66:9e:b0:e5:1f:
         5a:e1:a1:3d:28:8f:c8:f8:90:a8:55:d2:6d:a6:38:b8:8c:03:
         e5:c1:30:0a:21:6b:b9:82:d5:c7:5e:04:af:71:df:1f:80:20:
         0c:6f:82:0b:06:78:f3:83:f1:04:50:ec:b8:52:52:6e:12:f8:
         83:f2:02:d0:90:09:06:9d:96:9c:80:01:50:40:04:ab:21:49:
         02:bb:1f:7e:e1:d5:13:e8:6c:b5:8a:91:33:39:0b:4c:32:51:
         05:99:42:67:4b:52:c8:59:b4:19:19:0b:fa:a3:d0:9f:b5:1a:
         b8:16:e2:71:4f:9e:5c:d3:90:dc:4f:55:51:3d:0a:7e:58:fa:
         fa:ed:bf:fa:86:61:34:a2:69:2c:a5:90:70:0c:79:3d:d4:c3:
         f1:f7:d2:02:0a:45:9f:71:01:7f:61:36:02:b5:bc:e9:c1:85:
         14:d6:6f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:27:25 2025 by rpki-client