Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec3aced2-c1bc-3346-b0f6-35cc595b961c.roa
File:                     ec3aced2-c1bc-3346-b0f6-35cc595b961c.roa (raw, json)
Hash identifier:          lQrklbNhBOkSD0hj9aphzeGRnpbNl/SVuzlk2FJ+enw=
Subject key identifier:   E2:A7:A9:30:BB:1B:E2:07:56:E9:90:8D:C3:AC:2D:84:EF:4F:CA:39
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848F00C6AA2A8B1F816F4B31D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec3aced2-c1bc-3346-b0f6-35cc595b961c.roa
Signing time:             Wed 19 Feb 2025 19:45:55 +0000
ROA not before:           Wed 19 Feb 2025 19:45:55 +0000
ROA not after:            Tue 20 May 2025 18:45:55 +0000
asID:                     62240
IP address blocks:        166.1.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f0:0c:6a:a2:a8:b1:f8:16:f4:b3:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 19 19:45:55 2025 GMT
            Not After : May 20 18:45:55 2025 GMT
        Subject: CN=eea31c79-3ff5-4280-b14c-e25f828a40b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:90:b1:de:79:07:9e:e6:c6:9f:ae:61:37:a6:
                    73:d6:25:fe:92:43:60:36:cc:8a:99:2f:6e:8c:03:
                    18:b9:be:f4:0d:12:d2:81:06:27:ea:91:88:26:22:
                    64:79:cf:88:9a:c8:8e:08:f8:60:01:31:eb:bf:e0:
                    42:9b:df:dc:7b:56:1b:3e:25:a8:0e:fc:2d:9a:22:
                    e2:93:b2:f4:d6:a1:d4:ac:54:44:54:37:82:c3:fa:
                    18:50:d4:5b:ce:18:ed:55:9b:00:30:32:4d:01:f2:
                    2f:34:23:50:79:f1:16:c9:b6:55:e6:51:2c:99:89:
                    8d:eb:4d:c3:d5:92:65:cf:4c:a6:35:cb:da:48:c2:
                    f5:02:1a:18:c9:d0:f5:00:0b:95:f2:b9:c7:7e:d4:
                    81:31:5a:11:9a:29:5d:63:71:2d:b7:4b:e1:3b:53:
                    ab:4c:97:06:6a:87:a8:df:c8:10:4c:ee:c7:c7:67:
                    0c:a1:98:c2:14:69:db:05:c4:e6:a4:9d:77:90:1e:
                    51:44:71:db:d0:25:a7:b6:0b:31:cd:4d:b7:d1:4d:
                    f0:02:88:f7:44:5d:32:ff:32:75:87:e6:44:83:d9:
                    1f:01:65:33:11:1e:04:ab:17:bc:f6:53:c6:4e:c4:
                    26:9b:d6:f7:1f:aa:07:c0:53:17:35:68:1f:50:7e:
                    49:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A7:A9:30:BB:1B:E2:07:56:E9:90:8D:C3:AC:2D:84:EF:4F:CA:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec3aced2-c1bc-3346-b0f6-35cc595b961c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:72:c3:2e:b4:4e:ee:c5:ee:69:85:3b:19:9a:7b:7f:4d:b1:
         2a:32:d2:8d:40:63:69:39:cc:56:9b:03:7b:aa:d1:f1:63:56:
         49:f7:f9:f8:17:1f:58:f0:85:7d:95:8a:bf:eb:ca:b5:ab:84:
         30:74:7f:98:6a:e1:0a:2d:e2:f3:b9:75:2f:bc:0b:a2:3d:66:
         db:15:19:0e:1e:12:f8:f7:79:ac:80:76:6e:d6:10:a8:16:ce:
         fd:3c:cb:fb:74:58:8e:d0:96:c1:21:0f:71:b8:30:eb:37:f4:
         68:6f:30:21:c4:1d:52:75:ef:fe:ca:6e:17:fd:6f:aa:07:bc:
         58:f9:b5:cd:c0:6f:29:db:eb:8b:7f:43:e9:9e:f0:70:a2:63:
         d8:77:50:f0:a4:29:dd:1f:86:be:62:03:8d:b0:84:d6:4b:bf:
         f9:0c:a3:6e:7b:3d:9b:99:01:99:92:31:54:b8:b6:17:26:ee:
         d4:1b:7e:a4:b8:cd:91:c3:c2:56:ae:c6:64:0e:09:83:54:3b:
         71:5d:dc:fe:8c:77:d2:98:1d:52:a2:c7:47:5d:4b:5c:53:d7:
         fe:55:1d:7c:fb:92:cb:27:5b:e7:de:5a:c1:77:93:da:5e:e0:
         80:01:98:26:d9:c1:81:87:27:da:f6:8b:9a:cb:d1:a8:b8:e3:
         78:9d:48:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:28:51 2025 by rpki-client