Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3cce6d36-dd4f-39a4-aaf6-786185f487b2.roa
File:                     3cce6d36-dd4f-39a4-aaf6-786185f487b2.roa (raw, json)
Hash identifier:          1EXLo9QL22xhbtGR1rIXrz4Lv3CbMGV3angTLgXLNEM=
Subject key identifier:   C2:41:B3:95:F9:4C:EA:42:9A:B9:02:23:39:C0:E6:C3:E5:BB:10:90
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858499F24B9F433AFF01EA5D88200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3cce6d36-dd4f-39a4-aaf6-786185f487b2.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     132335
IP address blocks:        166.0.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:b9:f4:33:af:f0:1e:a5:d8:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=0ca33654-3965-4e21-9a67-fb6ce14432b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:aa:6c:81:97:09:9a:7d:ba:6b:c3:a1:af:44:
                    09:fd:20:11:f5:d2:af:6b:24:cb:93:47:bf:11:b9:
                    ec:7f:61:93:2d:5b:74:f1:5d:f6:4e:74:5c:35:9c:
                    80:3c:2d:3e:31:9f:53:aa:2f:58:cc:44:f2:b5:f2:
                    fe:f0:20:c6:73:9b:a8:e0:16:af:1b:36:db:b6:11:
                    cb:72:b7:5d:63:96:e6:9e:7a:51:f4:19:25:6c:02:
                    64:ff:f0:94:30:08:7b:b2:25:54:0b:35:19:c3:20:
                    78:7c:f9:a8:8c:54:70:9c:2d:64:94:26:7b:5d:08:
                    a2:2f:1a:d0:30:66:ed:85:0b:70:0f:ae:c2:55:3d:
                    5b:70:88:d7:f2:47:4c:c3:1c:8d:4e:98:40:4a:ac:
                    1e:85:ff:4b:7d:71:f1:71:f7:ab:ea:ce:7d:74:ce:
                    ee:82:48:5b:6f:a0:cb:67:09:a7:af:5b:dc:0c:14:
                    fc:43:eb:31:86:2e:fe:bd:0b:42:f6:e3:cf:55:1b:
                    b8:0d:57:2d:60:d0:dc:4f:65:4a:b2:38:63:30:c6:
                    34:7e:e3:41:2d:92:1b:7c:ba:81:72:c6:10:b6:37:
                    57:05:87:b9:75:53:e8:fc:26:21:83:44:50:47:a9:
                    64:07:0a:a5:1d:bc:cb:a7:b3:26:62:25:e7:2e:99:
                    f6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:41:B3:95:F9:4C:EA:42:9A:B9:02:23:39:C0:E6:C3:E5:BB:10:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3cce6d36-dd4f-39a4-aaf6-786185f487b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f5:28:ed:f5:a7:10:9c:29:55:cf:0f:fd:43:dc:c9:d0:82:
         b9:0b:f1:f5:3f:b6:b2:df:90:f1:83:e6:47:36:38:af:c3:51:
         63:a8:30:57:e6:40:e6:57:dc:36:85:3c:02:56:ff:5f:d8:56:
         83:f2:8a:31:f7:a2:44:04:e1:47:a1:a6:af:cc:fc:6b:b8:17:
         7c:fd:3e:7e:09:59:65:df:45:04:d5:ad:fb:af:70:70:c1:3d:
         b4:f0:d9:3d:e1:0a:81:18:55:c8:0c:8f:e7:df:e5:d2:34:c8:
         10:de:b7:49:9c:06:e1:eb:19:0c:88:a7:83:31:13:17:98:83:
         80:6c:c6:38:a3:70:dd:7c:2b:2d:0d:12:c4:1e:4d:fb:ca:4c:
         2d:35:b6:4c:e6:81:df:f3:1c:d9:8f:d9:e1:55:d2:26:04:59:
         4d:34:af:ec:a0:4a:2b:6f:3a:3a:6d:e6:bb:49:f4:e2:24:b2:
         68:ed:f6:34:64:b6:d4:cd:b2:f0:5c:0c:bc:64:c3:90:f7:72:
         f8:09:51:74:99:97:3f:86:99:c7:98:49:d2:75:34:21:57:5c:
         bc:62:a9:65:1a:cf:55:ce:4c:cb:25:e2:91:8c:34:62:41:49:
         0c:43:a2:7a:16:57:46:a0:3d:2b:f2:d9:c8:68:eb:5b:3e:2c:
         55:b8:8b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:23:09 2025 by rpki-client