Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/76f2f319-79b0-3c66-ae46-b88fe6107ef3.roa
File:                     76f2f319-79b0-3c66-ae46-b88fe6107ef3.roa (raw, json)
Hash identifier:          csA9Nshf0ZyCXELqqTO/7zh7Sx60u23Ahr7cbHBxiSM=
Subject key identifier:   CD:E4:A7:23:1A:12:1A:7B:3A:FD:C2:34:5E:71:30:F7:E1:EF:A6:50
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A2ABAE591FBA2AAC85809DC80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/76f2f319-79b0-3c66-ae46-b88fe6107ef3.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     35830
IP address blocks:        166.1.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e5:91:fb:a2:aa:c8:58:09:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=4d13a493-2b8f-448f-afc0-3ab343ccc547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:31:d3:4a:de:17:ce:30:23:76:e1:9a:ca:66:
                    06:3e:ec:c9:7c:ff:02:3b:e1:98:2e:16:93:7e:bf:
                    ad:db:e9:dc:4f:3f:5d:58:21:b2:2b:90:dd:10:5b:
                    74:be:2c:47:a9:ae:ce:23:d0:ee:78:a9:1c:44:19:
                    52:c0:a4:06:d1:8e:e9:a4:d1:99:29:bf:c8:ee:ea:
                    de:aa:9d:e3:61:e3:bb:d2:3a:82:2a:1f:1d:21:45:
                    43:7d:d1:11:af:b8:ca:27:b8:f8:05:03:81:2e:9e:
                    56:ea:18:50:a5:38:f8:60:56:d6:fc:93:1e:b5:b7:
                    4d:f1:07:ad:16:8a:7b:48:21:9e:43:87:cf:42:6e:
                    d4:e8:58:da:44:cd:f7:c7:ce:9e:e0:40:64:a9:87:
                    03:20:8b:6d:ed:59:dd:94:ce:a8:3b:d6:dd:e6:de:
                    ba:42:7c:34:6c:2d:ed:2d:27:17:8a:ee:9b:fd:f2:
                    84:35:bd:29:70:39:2e:0a:4c:6e:a0:0d:22:c7:0c:
                    ea:20:f8:5f:0c:15:5f:9c:42:26:7e:b3:45:df:ee:
                    74:fc:d1:d4:dc:09:2a:a3:5f:05:3a:da:9b:f7:9f:
                    27:44:34:48:bb:a0:c2:7f:94:c8:db:1e:c9:a8:8b:
                    68:48:da:e0:30:c2:27:a2:91:3b:30:5a:33:29:1e:
                    ca:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E4:A7:23:1A:12:1A:7B:3A:FD:C2:34:5E:71:30:F7:E1:EF:A6:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/76f2f319-79b0-3c66-ae46-b88fe6107ef3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:2f:36:da:6b:4e:ee:5d:3e:58:53:15:0a:e0:c3:fd:da:df:
         64:0a:3d:0f:06:c2:44:62:10:3d:87:53:70:07:a3:0f:98:e0:
         4f:3f:a2:28:7f:e2:04:15:24:1b:e0:0a:27:95:c3:46:2b:5f:
         97:f7:57:43:82:bd:b1:71:97:44:a1:3d:27:78:33:61:1a:39:
         15:a6:c7:3a:f3:21:fb:ac:7f:b8:ef:7c:52:18:21:d4:59:a3:
         43:d9:a2:ca:92:4e:5e:c2:ef:c7:2d:da:f6:f5:e4:b9:2a:53:
         ac:2f:d7:99:2d:5d:77:09:de:3c:d2:20:2b:f4:5c:c5:a8:76:
         f1:e2:81:9e:55:b2:ab:92:2b:82:88:0d:0c:02:a4:68:82:83:
         89:ee:e9:58:93:de:24:d0:5c:75:8e:f5:4b:36:dc:f2:8e:f3:
         39:55:34:73:70:7c:21:eb:b1:e8:22:95:a8:48:e6:ef:bf:ff:
         c8:a5:c0:e9:e2:69:cc:1b:ea:23:a8:4a:15:3f:9c:20:b8:2b:
         0f:59:eb:13:e7:60:3b:0b:c3:65:6f:91:11:1e:76:d2:d9:e5:
         2b:34:58:8b:87:d7:1e:71:61:88:41:d6:40:51:10:46:d7:2b:
         6b:42:2a:37:be:c5:a0:a8:89:f4:b8:a6:33:96:26:70:dc:8b:
         39:04:0a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:53:15 2025 by rpki-client