Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d6569db-93ab-3fe2-986b-75e79959ddbb.roa
File:                     4d6569db-93ab-3fe2-986b-75e79959ddbb.roa (raw, json)
Hash identifier:          0WNOtf8LTgtgPQ56+ruIg+E6c8i8iz5TBD2R1cc/slg=
Subject key identifier:   C0:23:F0:35:22:F2:94:EA:C1:FE:FC:CE:6B:C4:82:C1:CB:EE:3E:70
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849D1654DECF094EF02AAA4CD30
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d6569db-93ab-3fe2-986b-75e79959ddbb.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     58061
IP address blocks:        166.1.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:4d:ec:f0:94:ef:02:aa:a4:cd:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=3969b194-2f4a-4bce-abd7-023acc14460f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:aa:72:93:24:2c:01:cd:17:71:2f:99:f6:ba:
                    c5:00:f3:74:55:8f:73:66:66:cb:7c:1c:4f:d6:40:
                    38:74:ea:c5:64:02:d8:4f:35:2a:f5:8f:cc:ea:fd:
                    38:43:70:08:16:fb:e2:45:ba:0a:91:54:40:c2:0d:
                    0a:07:ba:77:ed:c2:73:8c:bc:02:54:3f:32:db:61:
                    a6:ff:a6:c3:10:af:74:66:3d:e2:a7:4c:df:ff:7f:
                    b0:d2:1e:90:35:46:13:24:00:13:89:34:71:eb:ae:
                    de:eb:7f:75:ac:7f:5b:ee:32:bc:bc:92:72:f6:03:
                    d8:39:15:be:96:49:84:4b:88:33:4e:54:93:10:6e:
                    57:18:f0:3a:83:90:1c:58:91:3d:c4:84:73:d7:14:
                    0b:37:5c:d5:50:2e:fb:16:19:e0:5f:84:9e:1a:56:
                    1a:eb:87:68:89:ec:d1:09:85:5a:f9:f4:db:28:22:
                    fa:3c:00:30:80:41:5b:fa:6e:be:d4:be:2d:52:15:
                    37:a0:ed:fa:9e:a7:f9:1f:13:16:32:4a:10:c9:81:
                    95:71:8e:39:df:cb:c1:c6:90:97:5c:64:e6:a2:01:
                    01:d7:03:1e:9b:06:e0:03:32:0f:15:e9:cd:47:0c:
                    b4:60:6d:bd:01:88:32:b8:94:de:6e:33:dc:5b:53:
                    73:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:23:F0:35:22:F2:94:EA:C1:FE:FC:CE:6B:C4:82:C1:CB:EE:3E:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d6569db-93ab-3fe2-986b-75e79959ddbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:21:df:17:01:87:9c:65:5b:38:ac:3a:91:32:0e:f6:63:7c:
         59:7b:dc:4a:5e:64:62:8c:77:67:62:0f:12:43:2a:de:a5:e5:
         63:0a:3f:98:aa:48:49:42:8c:e9:de:ad:43:36:9c:f9:68:f6:
         14:09:7d:ce:87:d6:8a:a3:24:44:bc:a2:64:0c:e7:b1:83:b2:
         21:7b:a9:f8:d5:b0:e7:bc:fe:11:db:63:a9:2b:be:49:71:75:
         43:6f:59:dc:f1:4c:6d:46:90:6e:a6:6f:b3:2e:fb:d8:1e:c6:
         0f:03:f2:aa:b8:61:cc:fb:52:fb:d7:bc:e9:0e:f9:36:2e:8d:
         7f:9f:0a:59:af:ba:c8:f3:71:07:cb:ad:04:4d:39:6c:db:e5:
         91:05:be:59:74:c9:81:df:9b:b0:46:1d:f1:e6:d8:82:e6:af:
         91:ae:e7:1c:27:09:bb:7b:0b:ce:0d:22:6e:44:f5:b0:30:cb:
         ab:6d:5f:42:80:9e:7d:b2:3c:de:4f:18:a2:94:5b:3a:7d:13:
         08:fa:c7:ce:f2:78:94:18:50:03:2a:2d:14:37:c2:19:f7:96:
         31:0c:aa:65:df:86:5e:fa:42:e6:1d:b9:21:29:e7:ef:21:34:
         36:bf:93:c9:63:42:ef:18:ae:09:46:35:f2:68:d7:39:71:6e:
         b1:d6:77:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:13:32 2025 by rpki-client