Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/86d9b413-e25f-35e7-a0ab-b1ef4414a4ce.roa
File:                     86d9b413-e25f-35e7-a0ab-b1ef4414a4ce.roa (raw, json)
Hash identifier:          frWGop3JvGOCf/rptHUjKJMQup98HgKSoiub2jSRk8E=
Subject key identifier:   98:6B:47:C2:42:8F:77:2F:91:91:3F:8B:63:34:90:85:3C:90:0F:D8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858499F24C5053D96173AF18A7300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/86d9b413-e25f-35e7-a0ab-b1ef4414a4ce.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     209043
IP address blocks:        166.0.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:c5:05:3d:96:17:3a:f1:8a:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=2b3c10e2-127c-4778-bf3f-d08a3db8b8c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:63:74:83:4c:6a:f2:7e:71:b0:ee:ce:e1:37:
                    ac:30:73:6f:88:70:5f:a1:68:7c:ad:7d:b8:eb:d8:
                    fc:f5:fe:e6:57:4d:5f:d8:d3:cd:ce:33:88:15:f0:
                    95:c1:92:44:f0:84:c9:fb:50:cc:b9:44:82:3c:29:
                    17:14:ac:c0:53:9d:9d:7c:c4:0a:aa:4c:c5:c0:36:
                    3b:d1:0f:30:52:d8:69:03:ba:8c:48:d3:88:7d:82:
                    aa:95:ad:3e:01:38:e4:19:9e:77:2e:ee:1d:8b:df:
                    2a:46:37:21:21:d2:4a:29:cc:4b:f9:a7:c4:a0:b7:
                    ab:88:16:a3:05:f1:4a:94:9a:99:be:0b:d3:10:93:
                    bb:c1:82:d4:43:e8:77:88:1c:e3:e3:e8:bb:82:47:
                    5a:6e:6c:8b:45:36:39:60:6c:15:5e:28:1d:9d:72:
                    cf:fd:f9:25:d7:0f:f9:fc:db:2d:19:d7:e7:c7:10:
                    2a:56:62:b3:b1:e7:c1:46:cc:be:99:e6:ad:3c:08:
                    94:60:0d:2e:9f:1b:81:5b:a2:b5:6d:4c:30:87:fb:
                    d7:50:e6:2f:91:f6:cb:a9:c0:b8:ea:06:76:4a:86:
                    36:7e:7a:fb:c5:f2:61:ce:32:ca:b4:af:a4:3f:32:
                    46:16:65:1a:dc:14:8d:be:5e:5a:43:69:0f:fd:75:
                    6d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6B:47:C2:42:8F:77:2F:91:91:3F:8B:63:34:90:85:3C:90:0F:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/86d9b413-e25f-35e7-a0ab-b1ef4414a4ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:f2:07:0f:4d:dc:5e:d6:4b:13:5e:c6:eb:ca:72:6b:19:3b:
         1b:b4:62:e3:c9:6e:d7:bf:5b:cb:ee:c2:c3:b2:03:b8:93:48:
         c2:e8:0a:f4:f2:ef:e2:31:70:93:dc:ae:82:7f:47:d4:f6:52:
         f2:93:fd:98:92:ed:be:a1:61:7a:86:3c:a6:6a:bf:68:0c:c1:
         c3:dc:b4:d6:93:0f:6f:d3:18:88:46:43:69:48:f3:35:cd:fe:
         8f:29:33:4d:a6:03:31:48:c5:c2:f3:0a:0d:60:bb:35:0e:a5:
         14:54:5f:b9:0f:0c:ac:02:14:90:0a:d8:c8:1c:bb:14:45:ea:
         9d:f4:9a:69:0d:3d:b2:f6:56:c7:8e:db:50:c9:34:e8:7d:5a:
         7a:3b:99:88:6c:05:ee:ae:26:b9:8b:21:d7:b4:fa:8b:85:61:
         a9:22:eb:bf:1b:89:8c:2b:7a:ac:5f:e3:37:5d:77:02:f9:c9:
         70:56:27:38:64:bc:98:ff:3f:12:fa:79:14:3f:e1:1b:fb:5d:
         a7:2b:a2:ff:99:3c:f1:ac:a5:b8:42:ae:e6:ff:22:96:77:81:
         70:21:5e:8d:33:69:57:de:b6:06:ec:7b:cd:02:87:5e:bf:11:
         22:d1:09:07:a8:d7:74:59:65:aa:5b:e0:2a:64:66:14:ea:a8:
         9e:f3:6c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:24:28 2025 by rpki-client