Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/03d139ba-bdd9-3301-925b-7e597744778d.roa
File:                     03d139ba-bdd9-3301-925b-7e597744778d.roa (raw, json)
Hash identifier:          7Nu3KeoUxFGYLhw61e5EFDxUodn6OlxzCuf6svCU17o=
Subject key identifier:   72:A5:22:DA:2E:45:F7:B3:21:C7:1B:B0:A8:B8:9E:24:B3:F3:89:4A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849B6DF47D2ED5900257F626D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/03d139ba-bdd9-3301-925b-7e597744778d.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     401152
IP address blocks:        166.0.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:47:d2:ed:59:00:25:7f:62:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=21b83eac-8e92-4423-a064-2ea647a1335c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:96:20:fe:9f:3d:7e:ac:36:60:07:1d:73:70:
                    17:3d:80:74:85:e2:86:cc:5d:d7:33:97:e6:1b:81:
                    ef:37:98:f0:fb:c0:9d:e2:09:7c:16:b8:2e:d5:be:
                    9d:77:d6:c2:89:f6:ec:a6:6c:52:52:0e:c9:7c:02:
                    67:c1:3f:cd:bc:81:43:cb:be:91:a6:b5:2a:21:aa:
                    b2:2f:d8:7e:9c:c1:69:35:9d:1c:f9:b9:4e:47:2d:
                    f5:60:5e:5a:0e:2b:04:8d:a4:e5:4f:51:e8:b9:57:
                    f7:2c:7d:7f:56:1c:6f:10:7b:c1:92:0f:9f:ff:d4:
                    2e:bb:94:c2:e7:bf:a9:0e:9f:68:81:f8:d0:5d:25:
                    14:28:99:0c:00:a7:4f:a1:4f:84:fa:46:48:3c:b7:
                    41:16:9b:ee:9b:56:81:75:a8:d8:b5:48:b4:6c:16:
                    c2:1b:0d:6c:16:bf:d4:4c:99:6e:06:94:2d:bb:2e:
                    31:4a:1f:48:8c:ce:75:00:55:78:b2:c0:f1:63:44:
                    f8:a9:8b:8e:f0:f0:c7:83:55:42:8e:90:ba:3a:4a:
                    62:ba:1f:51:4b:d6:ef:19:c7:b5:e2:06:cf:2b:c7:
                    de:e5:c9:ef:98:a6:cf:ff:59:37:39:ac:f0:14:3a:
                    95:cf:d9:46:a7:ff:fe:ea:e4:e7:a5:76:9d:4e:28:
                    4c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A5:22:DA:2E:45:F7:B3:21:C7:1B:B0:A8:B8:9E:24:B3:F3:89:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/03d139ba-bdd9-3301-925b-7e597744778d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:b1:5d:24:fc:20:d0:e1:d9:88:01:cf:e1:21:a7:bb:72:dd:
         ce:0b:44:10:3a:63:0c:f4:0d:9a:58:52:b5:04:51:6d:83:75:
         4a:80:af:d0:b0:01:50:54:55:60:fb:7e:25:54:77:4c:73:c0:
         5e:bf:b5:c0:1a:a8:ea:e6:e1:8f:d6:06:31:3c:0d:9a:2c:44:
         2c:b8:0e:66:66:ae:40:8d:df:b4:ed:01:38:64:c5:42:11:72:
         ef:7f:7b:7a:9e:98:0f:78:b9:56:57:cb:39:ec:a4:10:b7:03:
         24:9c:47:42:eb:51:23:00:3a:43:fb:fc:a1:bc:61:6a:0e:4c:
         43:cc:7e:35:1b:ca:6c:9c:04:dc:61:47:9a:40:c2:d3:da:fa:
         1e:fd:40:a8:5e:38:36:de:fa:fa:35:80:87:2a:ae:3a:1f:d4:
         ab:6b:f2:19:51:57:d8:e0:e0:01:e1:da:7b:0f:57:19:84:a2:
         78:a6:ef:ac:29:a1:55:5c:cb:6f:38:d3:35:91:a8:7c:2e:f6:
         5d:1f:e1:c3:21:58:ad:4e:43:fa:12:ca:7d:f0:57:08:5f:e7:
         6d:82:07:8c:5f:29:aa:73:e7:ed:47:6d:dc:86:f6:f5:60:4a:
         51:9f:d9:80:6a:4a:a1:60:61:df:b3:d7:c9:2e:65:a4:48:29:
         8c:b8:be:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:58:57 2025 by rpki-client