Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d3eb10bb-e61e-3f7d-ba13-23b9f5946a86.roa
File:                     d3eb10bb-e61e-3f7d-ba13-23b9f5946a86.roa (raw, json)
Hash identifier:          0pRhENHBrgU1NJxV1F0nMUl+GQEm/ggnUaKsNjpy1kw=
Subject key identifier:   09:0C:57:7E:B9:3F:19:FD:DE:B5:42:1A:EB:3A:39:94:F5:47:AC:C8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849A4BB7D1742BEBFC0162FFA00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d3eb10bb-e61e-3f7d-ba13-23b9f5946a86.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     58061
IP address blocks:        166.0.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:7d:17:42:be:bf:c0:16:2f:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=10a09904-f3fb-4084-adac-7b276d184d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:25:7b:89:04:b8:fc:c4:23:fa:1c:63:d2:94:
                    42:74:7f:14:79:00:5f:d7:54:46:c4:ca:32:5c:f6:
                    0c:13:38:53:bc:fc:b7:1c:58:9d:34:45:e4:7f:18:
                    11:2c:25:fc:a1:c8:f1:72:0d:59:11:07:3b:6f:67:
                    d0:b5:86:3e:04:4a:d3:a0:f3:82:bd:15:af:40:38:
                    c7:ae:31:da:59:4e:55:9d:b1:8f:9a:56:c2:1d:53:
                    a5:1d:f9:10:c1:93:6a:3d:ef:b0:e4:9d:12:cf:ff:
                    4d:77:6c:d7:b4:c5:36:58:ed:da:f5:56:3e:e8:ef:
                    32:e0:71:21:eb:b3:26:ea:a7:3c:f2:7f:33:a1:e4:
                    24:a6:86:64:2c:48:d1:1c:2e:86:b8:9e:13:f5:59:
                    56:ed:d2:64:5d:ca:9b:28:12:9e:07:e9:ac:76:e3:
                    ab:c4:a7:6f:ac:bb:ad:58:f1:e8:a2:75:90:89:93:
                    ce:4f:59:17:ca:e8:35:6b:df:64:ce:09:0c:9e:89:
                    c4:6d:8b:30:ee:3a:25:54:76:e6:87:56:54:37:65:
                    e9:70:9b:7f:9a:1a:39:a8:cf:dc:01:4d:29:fa:d7:
                    2c:cd:64:98:57:05:a0:02:72:01:57:c5:85:57:02:
                    b9:9a:1b:9e:2b:b9:03:cb:59:c5:bf:49:13:ee:cb:
                    de:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0C:57:7E:B9:3F:19:FD:DE:B5:42:1A:EB:3A:39:94:F5:47:AC:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d3eb10bb-e61e-3f7d-ba13-23b9f5946a86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:8a:fa:17:3b:79:81:55:ef:49:81:6d:6f:67:08:63:f2:18:
         0c:ae:e5:bf:e1:bb:48:24:05:81:5e:c9:77:db:95:1f:6f:62:
         76:b9:ed:33:1a:70:e4:85:94:ce:1f:d1:4f:b1:e9:7c:d6:7a:
         b8:a0:ff:1c:78:ad:5e:bb:77:3b:bc:36:8f:18:d7:d1:70:f7:
         b6:f6:30:af:66:03:e8:80:23:36:0f:80:0e:bb:7c:55:6d:cd:
         33:e2:7d:51:c2:c3:f2:9a:7e:87:db:8c:d3:20:7c:2a:e1:06:
         a6:97:a7:20:bd:e3:ba:02:ab:7b:d3:9e:18:bc:52:2e:50:84:
         bc:74:09:f3:43:f9:8a:7f:c3:86:30:c7:47:53:86:28:3e:7f:
         28:eb:8a:6e:d5:61:87:13:77:87:6c:16:0e:00:cf:95:cb:ec:
         71:9a:8f:cd:fd:dc:1a:56:7b:be:9d:a8:fa:ce:91:31:92:29:
         0d:18:22:89:1c:71:a5:42:f2:b7:7e:79:0c:6e:0d:8b:8b:d3:
         63:a6:38:a8:6d:79:c1:9b:1c:33:c5:e8:d5:4a:ee:2c:a0:21:
         2b:a0:ef:db:ea:ff:a6:87:fa:dd:d8:dc:bb:d1:af:5f:55:2f:
         a6:a4:4f:83:45:4d:ac:b7:73:b1:60:98:b2:68:ef:07:35:b5:
         de:92:57:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:13:15 2025 by rpki-client