Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ecc3b2a5-e2a2-3708-b19e-ec52cd37f431.roa
File:                     ecc3b2a5-e2a2-3708-b19e-ec52cd37f431.roa (raw, json)
Hash identifier:          xxfDwL8hrwZrCUd7em7Ry502ROkQtzBUXRRXRZE+yUc=
Subject key identifier:   42:C5:68:F2:02:46:C2:BE:50:AA:44:D2:68:B4:55:9A:B8:FD:CA:F6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848F00C69E715F799CBE867CB00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ecc3b2a5-e2a2-3708-b19e-ec52cd37f431.roa
Signing time:             Wed 19 Feb 2025 19:45:54 +0000
ROA not before:           Wed 19 Feb 2025 19:45:54 +0000
ROA not after:            Tue 20 May 2025 18:45:54 +0000
asID:                     62240
IP address blocks:        166.1.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f0:0c:69:e7:15:f7:99:cb:e8:67:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 19 19:45:54 2025 GMT
            Not After : May 20 18:45:54 2025 GMT
        Subject: CN=4fdf8c2c-8ace-45b3-aa04-48b87da5c663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c1:43:4a:06:77:2c:13:cf:93:0d:e3:df:b3:
                    7c:2b:86:89:1b:2d:af:72:d0:c3:7f:95:25:8f:4f:
                    d0:a5:dc:1a:f1:8e:0a:75:d6:6d:12:d9:b5:a4:88:
                    8e:48:8a:9d:38:71:de:ac:0e:ca:c9:85:65:a0:c2:
                    10:37:dc:fa:00:55:4c:95:14:87:8d:6d:32:0f:33:
                    1b:f4:50:bb:6b:40:e9:d5:30:e3:cc:21:ba:5d:63:
                    6a:06:11:cd:f4:6c:c9:d8:28:ca:a6:b7:7c:de:5f:
                    e1:d2:3e:64:33:4c:36:3c:7a:6d:fd:5e:49:b0:8c:
                    18:7d:5c:0f:85:2e:3b:80:ab:48:29:35:92:10:e4:
                    da:6f:3c:b1:05:9f:ee:d8:2a:4d:2b:15:c8:70:fc:
                    b2:ae:99:7d:12:6c:0f:d5:e4:ac:18:d1:67:0f:8f:
                    07:b8:df:da:e9:7d:bf:24:c5:c5:5b:a2:ac:89:c7:
                    a6:cc:83:4b:3a:3d:f0:11:68:6e:97:d2:51:d6:93:
                    79:e9:56:8e:9a:64:9f:e2:e4:f6:1c:72:a0:32:f2:
                    2d:a4:03:94:2b:b2:ec:ff:21:2d:00:97:e7:37:e7:
                    22:ac:39:4c:da:49:c8:cc:01:fd:6d:57:92:15:06:
                    5c:96:78:15:f6:7c:e6:ac:92:6d:34:6e:0c:94:cf:
                    ef:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C5:68:F2:02:46:C2:BE:50:AA:44:D2:68:B4:55:9A:B8:FD:CA:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ecc3b2a5-e2a2-3708-b19e-ec52cd37f431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:42:ad:6c:bd:b7:dd:ca:12:27:65:a3:d0:e7:69:8b:39:7e:
         e0:83:68:fa:f6:fc:70:8c:69:d2:d9:59:49:2d:2a:0d:b3:99:
         70:9c:97:09:ef:ed:0f:b2:a0:4a:f2:ff:ef:71:9c:3f:c1:e8:
         44:99:5e:13:c3:98:76:6a:f8:31:83:1a:0d:77:e2:ee:49:ed:
         f9:fc:95:dd:36:c1:37:51:eb:54:cb:ca:91:d5:f7:93:8d:a1:
         f2:a4:78:e3:f7:bf:e6:30:8a:a7:7a:6a:73:88:72:89:f3:c3:
         ca:1f:7c:4e:ab:bd:b5:05:19:bd:0f:c3:79:52:f5:86:7b:cb:
         f6:b2:3f:0d:9f:81:cb:5c:e9:b1:88:b3:3e:b2:49:d1:89:18:
         51:aa:16:65:30:70:6b:27:d2:9c:51:8f:90:fb:53:9c:48:67:
         15:ff:68:3a:da:b8:1a:30:d7:79:a4:80:78:80:f1:35:ef:e5:
         b5:b2:74:eb:e8:3f:76:9e:ab:3c:9c:a3:10:40:a0:34:81:ac:
         fc:19:98:8b:34:d7:45:5b:d7:f0:e4:46:47:d5:81:bf:a0:b6:
         2a:3a:8d:5f:3b:7a:37:10:04:4e:87:75:5d:78:b6:5a:44:cc:
         7c:d1:ea:82:9c:ae:82:ee:0b:df:fd:59:41:fa:73:b7:68:02:
         21:da:e8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:18:39 2025 by rpki-client