Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/61de7229-98d9-3cc3-aed2-c2c55c47ae52.roa
File:                     61de7229-98d9-3cc3-aed2-c2c55c47ae52.roa (raw, json)
Hash identifier:          ScsOpcUQhZKwoK+Qd1M6hPSGwBXbGAmKniZeJjlLEzA=
Subject key identifier:   0F:FA:F5:8B:68:49:8E:C0:EE:F7:B5:FC:2B:AA:08:61:B4:DA:87:D1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849DC8FBC80CF4AD39700BC8980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/61de7229-98d9-3cc3-aed2-c2c55c47ae52.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        166.0.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:bc:80:cf:4a:d3:97:00:bc:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=2c9f136b-b669-4368-947c-255e3ff6395c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:00:cc:f6:e5:87:74:b7:1d:dd:4f:7f:a0:e1:
                    b2:d0:b3:5d:53:92:bb:cb:3d:02:8b:4e:8b:c6:e0:
                    3f:42:f4:cc:e0:0f:2c:91:d2:ff:68:3f:e3:43:0a:
                    66:9e:06:62:6d:e9:9a:76:eb:65:c5:20:f1:5c:d3:
                    1f:b9:48:ea:bb:6e:b9:75:c0:ab:e5:c1:15:e7:c0:
                    a2:8f:1b:eb:a4:6b:78:6f:d5:31:85:c5:8d:e8:08:
                    e5:79:ab:6f:77:54:d5:9e:cd:77:da:87:39:6d:e0:
                    07:f0:dc:2c:47:d4:59:76:62:0a:db:e1:4a:9e:44:
                    14:dc:12:eb:42:b5:4b:85:99:9d:f3:4d:32:f6:49:
                    bc:e7:27:a1:21:bb:17:b5:11:1c:e5:e6:db:d8:88:
                    93:06:43:dc:6d:39:65:8f:1b:cd:3a:42:9a:14:c7:
                    8b:80:d5:fa:ae:86:22:21:03:ac:2b:18:7a:cf:65:
                    3b:ee:4b:4a:93:19:e9:42:26:4f:03:68:9b:4d:3d:
                    0d:71:3a:f3:7a:93:65:1a:2d:95:ee:1e:e8:69:8a:
                    7b:89:e1:60:ef:4e:c3:51:9e:28:19:c7:27:2d:cc:
                    70:2f:ef:1c:6e:79:63:41:96:66:4f:bc:3b:f4:30:
                    42:ac:66:ef:c5:e3:d2:16:e3:54:10:bf:ee:30:ee:
                    85:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FA:F5:8B:68:49:8E:C0:EE:F7:B5:FC:2B:AA:08:61:B4:DA:87:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/61de7229-98d9-3cc3-aed2-c2c55c47ae52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:38:1b:ff:53:f0:0b:b2:fb:73:d2:2c:9f:5a:7f:a0:1d:be:
         91:80:65:f1:90:0c:dc:6c:7b:17:17:d1:a5:cb:af:a1:ad:7d:
         78:c9:82:45:20:34:ae:7d:c1:e6:af:ae:67:a3:68:28:51:8f:
         e0:ee:9d:1c:98:35:25:ca:5b:df:58:9b:61:bb:ff:01:75:08:
         30:7b:fa:68:b9:af:35:47:18:d3:34:cd:8d:2d:54:c2:48:d7:
         92:09:5a:74:ae:ca:07:2b:fa:be:c9:6f:9e:ff:62:2a:c8:b6:
         22:88:d4:61:c8:28:0b:6f:b8:bb:3a:f0:7d:ff:66:7e:bf:0f:
         e7:07:44:ca:ca:25:08:97:e2:4d:7d:92:e6:cd:80:24:57:57:
         1f:ed:d5:86:f1:19:10:ca:58:29:90:6d:81:01:7e:3a:55:c6:
         e4:80:52:37:e4:88:47:a5:00:06:2e:82:fa:df:56:88:2e:9a:
         47:0b:7f:68:a5:7a:89:5a:f4:e0:83:b4:49:d9:c0:df:d5:52:
         7e:89:45:b8:5a:59:02:87:94:ea:40:b9:52:4d:64:c1:45:91:
         27:6a:e2:a4:9a:39:18:e4:19:92:73:ac:79:82:45:1b:54:7e:
         e7:15:cc:c8:9f:fd:ab:3f:b0:b4:32:93:1c:cf:46:49:a0:1c:
         b9:2e:f8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:30:32 2025 by rpki-client