Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/ed0b2087-ddc2-3ee5-853c-45e74ecf88c0.roa
File:                     ed0b2087-ddc2-3ee5-853c-45e74ecf88c0.roa (raw, json)
Hash identifier:          wW2eehltn8eu0fkHmusFYLm6hJMO6xCoafQ0Z+cgXUk=
Subject key identifier:   5F:4F:B5:35:2E:74:03:6B:31:1D:BD:2A:D9:EC:EB:14:75:02:26:0E
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F43285848A830A5302121AB21750A7160
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/ed0b2087-ddc2-3ee5-853c-45e74ecf88c0.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     7018
IP address blocks:        107.166.96.0/22 maxlen: 24
                          107.166.100.0/22 maxlen: 24
                          107.166.104.0/22 maxlen: 24
                          107.166.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:a5:30:21:21:ab:21:75:0a:71:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=e1866ddf-4c4d-4889-9a05-94b8ae72fde2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3d:b6:83:9d:63:1e:79:cd:92:bb:dc:1d:bc:
                    1d:df:9f:bf:2d:b1:32:4f:5b:ef:f7:01:c6:0d:7d:
                    d3:d6:79:0e:a8:bb:f9:e1:01:a2:30:d4:3d:3c:a5:
                    42:be:39:41:07:05:9f:d5:61:0d:6e:11:06:f8:06:
                    b1:dc:af:96:60:68:24:b8:ef:48:cd:37:5e:b3:00:
                    20:01:1c:8b:a1:ca:d1:c8:97:7c:03:19:df:c6:e8:
                    21:8e:45:af:9a:76:63:67:5c:50:2a:62:17:d0:87:
                    58:75:4c:35:de:9c:ee:32:31:18:82:d1:1f:0d:6e:
                    e3:ee:f0:91:34:8c:65:8d:25:9b:9b:eb:39:4e:3c:
                    d2:90:cf:e3:f7:93:c7:42:3f:c0:cb:51:f2:a4:33:
                    de:c9:16:4d:62:b0:18:08:64:23:1b:d9:1f:7e:17:
                    45:84:d3:28:cc:51:52:f6:aa:df:3b:84:d3:68:80:
                    aa:69:c4:c8:0d:70:a0:ac:05:0a:a7:76:4c:e1:c7:
                    c5:39:30:79:bf:44:db:14:f8:07:9c:3f:46:90:61:
                    fd:5d:94:30:f5:ef:eb:de:20:83:0c:62:d7:c4:58:
                    3e:93:30:c2:78:3e:70:37:50:41:83:3b:32:67:f9:
                    55:35:b5:51:f4:82:51:4c:7d:48:cc:a7:b6:12:66:
                    12:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4F:B5:35:2E:74:03:6B:31:1D:BD:2A:D9:EC:EB:14:75:02:26:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/ed0b2087-ddc2-3ee5-853c-45e74ecf88c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.166.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:5a:b8:9b:2a:75:ed:3b:4d:3c:5c:82:72:d7:73:77:76:43:
         04:a7:f0:7d:c5:77:8d:62:af:b1:39:ed:2c:30:5d:c4:b2:34:
         f4:e4:94:c7:29:5f:4d:af:de:4c:de:62:18:d6:02:0c:a0:30:
         cb:19:a8:cc:2c:5f:3f:11:18:d4:75:a3:74:43:12:e6:cd:38:
         c3:46:c9:0a:3a:27:44:dc:b2:06:17:e8:7c:73:e0:6a:c0:51:
         13:64:c4:65:84:c9:cc:e8:e9:7c:2d:3d:54:93:d1:a8:04:2b:
         49:94:33:b4:e0:bd:47:cc:b5:f4:99:1b:65:9b:a6:e2:01:d4:
         03:9b:91:75:84:f6:fa:42:f1:46:47:22:8f:c4:ef:58:b8:62:
         b3:ed:5e:43:73:f9:52:b0:0f:ac:d1:a0:20:35:ad:43:e5:54:
         22:b5:0e:ff:76:2f:71:19:b5:97:e8:8f:0b:00:d1:39:24:52:
         65:ec:50:12:64:21:59:bd:2a:f0:62:93:bd:0b:e6:31:67:4c:
         67:88:44:0c:05:67:08:9b:07:bf:90:5d:ad:ab:d1:fb:f0:71:
         ec:59:1e:51:08:07:18:38:15:96:36:c4:23:2e:1d:3d:d6:5c:
         28:e7:b3:8f:24:5e:c4:a2:33:cd:55:91:aa:0e:53:37:76:e2:
         39:02:05:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:46 2025 by rpki-client