Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/34db8f54-d8ed-3f3d-9b45-900e2b220242.roa
File:                     34db8f54-d8ed-3f3d-9b45-900e2b220242.roa (raw, json)
Hash identifier:          n5OwXAEGu3s5u56SXrIrfqpjk6aHN4KMJT8+L2jHR7M=
Subject key identifier:   0D:ED:01:19:FB:8A:15:A9:93:EF:B9:62:CB:70:57:C3:5C:88:DA:68
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849ABB496BF75FF5E5268443EC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/34db8f54-d8ed-3f3d-9b45-900e2b220242.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     401152
IP address blocks:        166.0.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:96:bf:75:ff:5e:52:68:44:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=9a108670-3f95-49ac-9539-fd08bfb90824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9e:b5:95:93:30:85:e5:93:b0:04:2d:28:08:
                    c9:5a:84:e0:e4:92:3d:35:e9:24:8c:70:fb:1d:3f:
                    09:ac:30:ab:97:95:9b:51:ce:99:4e:e1:05:71:ed:
                    01:3a:fa:5d:45:59:1f:73:9b:e0:7b:52:55:36:d0:
                    27:bd:5b:3a:3d:1a:89:3f:32:cd:f6:6c:83:f1:0b:
                    1c:2c:95:ea:bc:61:32:61:5a:43:8c:64:f8:f3:02:
                    4b:79:28:80:6f:9d:0d:f2:15:5a:35:15:5e:5a:d7:
                    c9:d5:55:83:ce:78:76:24:c7:be:e6:ea:61:c3:0c:
                    03:f7:1a:b4:2c:2c:64:77:31:fd:3f:1d:41:c3:86:
                    db:14:93:b4:67:fc:35:c2:88:23:6a:eb:d5:c5:c0:
                    7d:b6:ab:c9:51:a6:4f:88:87:e2:36:21:59:40:7f:
                    28:3e:65:10:0c:45:ef:57:b1:f0:14:6f:77:90:26:
                    6c:3f:2f:bc:02:3c:62:7a:8a:94:d2:f0:f3:24:ac:
                    94:10:16:b4:42:4a:4c:11:59:dd:e9:24:0a:f6:47:
                    78:cf:52:f5:7c:63:00:1c:7e:a8:c4:85:e2:0e:cb:
                    63:85:c0:50:45:90:25:0a:ae:e2:f0:33:31:b7:5c:
                    9c:f9:2c:e5:0c:71:54:06:7f:09:3d:b2:bb:de:16:
                    92:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:ED:01:19:FB:8A:15:A9:93:EF:B9:62:CB:70:57:C3:5C:88:DA:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/34db8f54-d8ed-3f3d-9b45-900e2b220242.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:73:be:a7:78:41:c7:95:af:5b:56:e4:94:05:7b:2c:72:b1:
         3d:81:67:71:f5:b1:30:dc:3c:89:fb:a9:cb:77:46:f5:b5:f1:
         24:56:f8:08:be:89:55:c7:17:01:3c:ed:4f:ce:04:4a:07:2a:
         c5:90:e5:54:ea:de:fe:71:fe:14:7e:26:b7:09:ea:9b:0f:80:
         65:77:55:d2:88:10:43:ab:b1:90:1d:e2:6a:8a:9c:ff:9b:c6:
         75:aa:ab:e5:a1:15:46:99:63:bd:c5:f1:e5:e8:97:28:cc:fd:
         98:05:de:99:bb:85:df:f7:2d:62:05:54:3d:2f:3f:ab:fc:f8:
         51:06:50:f6:18:81:4f:11:b4:80:6c:11:9a:39:fb:99:6e:13:
         5b:8b:b1:72:f8:48:9b:64:a7:1f:a0:0a:62:91:29:c9:66:80:
         30:4a:8d:cf:66:c4:7d:08:f5:bd:78:de:66:2d:1a:65:88:2c:
         3c:b6:d2:d9:32:c9:db:53:e6:96:7e:ce:00:5c:47:93:7c:f8:
         68:af:83:96:68:e1:cf:bf:d1:bb:78:6e:2f:5d:5a:a6:7b:83:
         6d:12:89:16:0a:d9:68:e1:91:35:0c:e4:9e:cd:5f:ec:3c:10:
         33:05:46:e1:33:3a:c8:57:93:8c:10:04:dd:92:86:9c:77:80:
         56:75:f1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:17:05 2025 by rpki-client