Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21e6778b-5823-360c-86be-9a87913016a0.roa
File:                     21e6778b-5823-360c-86be-9a87913016a0.roa (raw, json)
Hash identifier:          G6QTBRyE/Vg+8rkIRUXlyuWQ7orA5BL+3gkKpg1f7wc=
Subject key identifier:   57:9A:22:20:19:EA:12:7C:90:A6:84:55:29:75:27:18:EF:5F:23:C2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858499AF48135FFE1DEBD5DD373C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21e6778b-5823-360c-86be-9a87913016a0.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     19318
IP address blocks:        166.0.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:81:35:ff:e1:de:bd:5d:d3:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=cc6fbf63-a891-45b9-96da-8786741c46cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b7:9a:e7:54:5c:c3:75:5c:07:36:cd:80:7c:
                    b2:af:af:86:f8:34:4c:5a:35:ae:70:a8:18:2b:77:
                    a7:d0:00:c9:5a:9d:b4:90:0e:c1:c0:83:9d:37:4c:
                    fb:48:17:0e:fd:14:ab:47:81:09:54:9b:8a:c0:69:
                    a7:3c:16:0f:11:3d:77:f3:09:3b:7b:9d:b0:88:9c:
                    ef:db:4e:6d:d0:3b:19:5a:b5:5e:45:7d:0a:95:d9:
                    9a:aa:c8:a2:f8:3a:0c:14:83:7e:f8:bb:14:17:3d:
                    6d:62:ab:fa:e6:92:9b:48:65:48:1a:fc:a0:90:b3:
                    eb:bd:bb:2d:3e:ef:48:c6:5f:e5:ee:08:75:91:03:
                    da:e2:7a:ce:a0:49:ae:42:34:a9:49:ee:f3:e2:18:
                    92:7c:03:a6:04:6e:ef:5d:1c:3b:b2:b2:1e:b0:50:
                    2f:10:79:1a:bd:6b:fe:83:b1:be:c7:bc:a9:cb:d4:
                    06:f1:9f:14:9f:3f:a5:92:71:5f:d2:33:c6:59:89:
                    c6:ce:f5:a5:ea:a2:88:57:17:13:12:c2:87:89:65:
                    31:74:0d:99:cb:82:62:71:b6:17:8e:1d:4d:e8:e6:
                    7d:56:9e:a1:27:1f:11:da:9b:27:38:ba:f6:4d:db:
                    dd:66:a4:37:08:a3:25:15:b9:fb:1b:77:47:98:eb:
                    5d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9A:22:20:19:EA:12:7C:90:A6:84:55:29:75:27:18:EF:5F:23:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21e6778b-5823-360c-86be-9a87913016a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:8f:18:0f:20:9e:e7:61:04:54:ad:7e:c1:ff:ca:dc:2b:d3:
         c5:b1:2a:2d:14:0b:44:dc:57:10:41:8a:0d:ee:4d:69:c9:3b:
         cd:40:c0:5f:02:14:54:f4:69:92:8f:e0:c8:a4:c2:fe:22:2e:
         29:fc:99:89:69:69:2d:b8:d8:30:35:2b:1f:4c:47:f9:89:99:
         b9:01:3d:fc:87:11:4d:13:ab:7e:20:cc:08:1c:f3:20:24:0f:
         4a:34:c1:5f:ff:0a:13:7c:b5:4b:23:a2:19:39:53:4d:11:80:
         ba:25:9e:74:df:d5:f0:35:1f:42:1d:44:7b:19:13:45:35:40:
         aa:76:46:d6:af:6b:d3:72:4e:8a:60:09:28:22:1f:bd:3f:0f:
         72:9b:01:6e:ef:c7:1a:4f:23:bb:11:ca:9a:d5:f1:c1:fd:10:
         a4:80:5c:da:3e:a1:36:b0:a9:a6:e5:74:fb:7a:c6:3a:f0:8b:
         2c:ba:e9:5f:d1:6c:ab:52:8a:1d:07:e4:d6:a8:9e:f5:6d:45:
         91:f0:ac:98:35:b2:2b:6d:8e:2b:13:74:0c:6d:68:b5:ab:37:
         45:2d:a1:e3:50:08:3c:b8:23:bf:06:23:e0:b4:65:6f:4f:7b:
         fb:34:6d:33:d5:a7:69:5f:0f:22:db:ac:b7:75:e0:5a:93:64:
         6b:0d:17:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:47:11 2025 by rpki-client