Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f07eea59-2908-30cd-81b4-5c1c0fd935d9.roa
File:                     f07eea59-2908-30cd-81b4-5c1c0fd935d9.roa (raw, json)
Hash identifier:          bluA3dtbZQ3X5Sd1/LWmP5VHiGxU1IiVtCuJWUulKSY=
Subject key identifier:   92:EC:37:65:DE:BC:DC:16:93:A7:5A:F1:63:43:6A:1E:E6:60:BB:3A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849D1654F967C8E3C9E95CEBBF8
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f07eea59-2908-30cd-81b4-5c1c0fd935d9.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     58061
IP address blocks:        166.1.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:4f:96:7c:8e:3c:9e:95:ce:bb:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=5ada08c3-51e8-4d6b-a745-2d0c8418a87c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:85:a9:46:27:72:6b:d3:f7:ec:63:ca:7f:04:
                    9a:43:f8:e3:da:5e:cf:7b:23:b7:db:ff:90:9e:f8:
                    c6:dd:0d:3b:9c:a4:3c:c9:e9:19:e2:b1:39:5c:e6:
                    1d:18:bb:4b:c4:b7:cc:d8:2a:95:b0:64:14:f9:85:
                    c0:10:05:0f:6c:6d:56:66:56:6c:ca:c3:4c:32:b1:
                    51:ca:e3:b4:9c:92:7d:3b:1f:bf:d4:15:2e:24:96:
                    cf:82:86:98:84:56:e2:c5:85:d5:29:05:de:7b:87:
                    31:4f:83:9b:ae:ac:59:d5:61:d9:22:7e:16:c9:b1:
                    98:e7:45:ad:09:90:37:9f:63:0f:c9:42:cb:9d:f4:
                    0b:c1:b9:f0:d1:0e:f1:30:71:69:96:2b:31:7f:a7:
                    71:ac:09:de:1d:da:77:e0:d1:b3:53:de:09:cc:6c:
                    f2:0a:35:e5:6f:12:eb:6f:ad:4b:10:45:22:bf:6f:
                    a0:3b:ce:98:8b:09:21:99:d2:c7:cd:78:9e:fe:a9:
                    b0:9f:4a:51:e7:4e:40:cf:3f:b1:de:73:a4:8b:dd:
                    30:6c:a4:4d:14:86:3f:52:f8:84:c8:34:fa:b0:e0:
                    cc:c7:e0:b8:33:23:a2:6f:fe:81:b5:71:f7:38:2f:
                    37:18:04:9a:d0:05:92:4c:3c:22:8c:06:b1:7d:24:
                    d4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:EC:37:65:DE:BC:DC:16:93:A7:5A:F1:63:43:6A:1E:E6:60:BB:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f07eea59-2908-30cd-81b4-5c1c0fd935d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:fb:5b:60:55:d7:8c:47:16:a2:8c:d8:79:13:4e:71:d4:1e:
         12:47:cf:db:94:69:e1:a5:51:0b:33:ca:dc:81:58:43:02:54:
         6b:25:c1:c6:fc:86:db:7a:24:e5:b3:0c:ad:4e:82:2b:33:59:
         0c:9a:e9:e0:55:09:be:58:dc:d2:c8:13:bb:4f:ae:c4:38:10:
         c6:f2:6c:ec:cc:26:59:93:51:6e:2d:43:26:55:3a:17:66:5f:
         8c:42:0e:41:c1:32:14:98:ca:e9:2e:ec:66:3d:26:de:6f:78:
         1a:64:84:3c:8e:02:08:c6:de:0b:db:9f:8d:02:ea:85:58:ea:
         eb:b2:35:17:de:0a:3e:29:f0:ef:30:df:c0:21:29:12:20:2a:
         a8:cf:86:bf:67:d1:7d:f9:43:a4:1e:c0:8e:ed:28:c0:08:82:
         0b:88:ad:dd:06:36:ac:b4:fe:15:18:82:6e:d7:c3:91:14:fc:
         9c:ac:76:02:71:33:bb:5a:d9:0b:88:18:8a:6d:a8:2c:10:31:
         79:7e:09:bd:38:21:05:8e:33:55:cd:35:75:19:50:fc:03:8c:
         d0:95:50:f9:00:c5:e9:97:63:26:16:07:91:1b:4b:4a:38:3e:
         08:5c:ec:08:59:b8:5d:23:89:01:40:4a:5f:b9:1d:07:1b:80:
         98:5f:0b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:40:47 2025 by rpki-client