Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/619b7040-124b-302a-b5e7-0d812b1f23c4.roa
File:                     619b7040-124b-302a-b5e7-0d812b1f23c4.roa (raw, json)
Hash identifier:          E7ut+cRkkR1LzGNob9jxFWyihUK+I8UqChXu+n+TI2Y=
Subject key identifier:   F1:65:C6:78:C0:D0:BD:AB:F4:29:1D:13:58:95:4A:13:B1:15:F8:97
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584991877B047FFECDCE29E256C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/619b7040-124b-302a-b5e7-0d812b1f23c4.roa
Signing time:             Fri 18 Apr 2025 15:59:01 +0000
ROA not before:           Fri 18 Apr 2025 15:59:01 +0000
ROA not after:            Thu 17 Jul 2025 15:59:01 +0000
asID:                     212238
IP address blocks:        166.0.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:87:7b:04:7f:fe:cd:ce:29:e2:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 18 15:59:01 2025 GMT
            Not After : Jul 17 15:59:01 2025 GMT
        Subject: CN=3cca5b48-07a3-42b1-a921-b03e8835bcbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:16:45:93:06:a5:be:d7:bf:ac:b4:1c:cb:ad:
                    eb:48:d7:5b:06:37:7a:64:79:c2:29:b6:6a:3c:40:
                    61:3f:5b:26:29:3b:76:18:b4:1d:95:ab:7b:a7:16:
                    ea:36:06:f4:10:47:aa:37:9e:b6:78:6d:37:3b:ea:
                    82:a8:c3:ff:fc:af:81:b3:e0:07:ae:80:c3:13:0f:
                    7f:53:44:e4:ef:ef:4d:db:b7:7d:ac:af:87:98:f4:
                    7f:06:b7:c3:25:7c:75:d8:09:cf:09:66:ea:f2:72:
                    d7:0f:e0:77:ee:5a:55:1a:a6:b2:fd:c9:2f:6a:4c:
                    9e:dc:61:09:82:b3:bb:8b:6a:c1:7f:a9:9e:42:54:
                    34:58:2e:8b:ad:36:b8:19:08:27:b2:15:d8:b7:a5:
                    01:69:2a:fd:9d:c1:f2:79:83:91:aa:65:c0:41:d9:
                    6f:69:ae:bd:bb:d0:8e:44:c3:09:fe:8f:f7:a4:c3:
                    ba:f7:ea:40:19:21:67:72:c9:2c:e2:94:21:99:3e:
                    77:f9:48:7b:ff:48:d6:a2:98:4f:04:e5:ba:26:23:
                    b1:10:77:00:57:4b:58:dc:b3:00:d8:fc:a6:c7:50:
                    ac:3f:08:e5:08:3b:5e:d3:cf:8a:8f:e6:7b:7f:8e:
                    2d:8b:61:64:2e:2c:30:0d:b3:7b:88:2b:13:10:c1:
                    8c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:65:C6:78:C0:D0:BD:AB:F4:29:1D:13:58:95:4A:13:B1:15:F8:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/619b7040-124b-302a-b5e7-0d812b1f23c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:a9:65:69:9a:aa:aa:03:1b:9e:82:9f:bf:b7:e4:8d:ec:bb:
         4e:c0:d4:9b:c0:9f:74:86:46:03:25:e8:57:07:ee:fe:2c:aa:
         8c:d4:02:ad:ab:6f:ab:18:0f:96:64:40:ba:52:19:5a:76:68:
         43:d4:5b:da:02:e1:1f:c8:8f:31:b2:7d:20:a8:7d:b8:7f:8b:
         0c:18:96:3b:d8:3c:d6:52:38:49:f9:af:1f:8b:eb:97:3e:21:
         36:71:8c:77:10:c5:3d:b2:59:25:75:4e:74:cd:55:20:ff:4a:
         22:b9:3e:64:27:2c:3c:18:f0:3c:4c:0a:ac:df:35:5a:e1:e5:
         66:bf:aa:f8:78:63:10:d3:d4:e4:41:ab:37:c5:8a:4e:7e:18:
         88:6d:7b:41:07:23:05:91:b0:cb:11:05:5d:a0:ef:0b:d4:84:
         09:65:82:d1:14:26:89:73:12:18:f0:18:90:c2:5d:2d:ad:95:
         4f:f2:c2:49:6b:e8:7b:a6:41:5d:d6:6a:79:d4:3c:29:d1:83:
         02:06:22:f8:9d:f1:93:af:db:3b:b2:7c:2c:71:43:ce:bc:86:
         ee:4d:8a:77:74:ef:56:e9:a7:a1:67:e5:6b:8f:6c:67:f7:93:
         5e:ea:bb:ec:1c:16:af:46:16:42:08:c5:c7:ef:36:3e:cc:67:
         b4:21:a9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:22:47 2025 by rpki-client