Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/217d6a2e-2c58-3540-b8c9-4d6efb709eed.roa
File:                     217d6a2e-2c58-3540-b8c9-4d6efb709eed.roa (raw, json)
Hash identifier:          u6MU1rjb8mqoVOYtmIqLr7gEFsqgHQJn1JIdvUFomos=
Subject key identifier:   A6:A2:17:92:90:D3:08:F3:FB:98:26:9D:D7:21:34:73:54:E9:7D:59
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849CFFF7F0170BCADF37CC54100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/217d6a2e-2c58-3540-b8c9-4d6efb709eed.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     62240
IP address blocks:        166.1.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:7f:01:70:bc:ad:f3:7c:c5:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=416f5d53-ebdf-42ba-a13f-0f9b9568874b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:63:3b:51:0e:3e:96:6c:e4:3b:84:e9:47:58:
                    3e:ee:1f:b8:86:64:c1:d6:8a:40:ee:b9:27:20:6c:
                    44:2c:ec:a9:88:f5:21:fc:ea:1e:bb:ce:9b:a9:d5:
                    c1:e1:d0:b8:98:82:d8:49:56:9e:17:ab:d9:c8:0e:
                    df:1d:59:02:0c:38:6f:c6:85:4a:18:cc:a6:e7:31:
                    6c:17:ec:af:88:6b:2a:74:37:df:35:37:f5:3a:58:
                    ae:a9:61:70:17:52:66:99:2a:a7:a0:88:e0:29:2c:
                    0d:86:08:4d:a1:35:e3:a1:cb:21:f7:29:0a:e5:9d:
                    34:93:63:4c:f0:cb:d5:06:0e:e4:f4:f7:0c:d0:56:
                    ed:b1:b7:2f:f3:79:fa:f9:82:20:5f:df:a5:1d:b9:
                    7e:c8:fe:98:c0:e3:9f:88:02:99:76:a5:e9:12:08:
                    f3:fe:36:25:67:80:d8:99:85:e3:b1:73:2e:07:93:
                    b0:c5:fd:6e:53:f8:c7:6d:46:c9:dd:56:71:d1:0d:
                    01:7a:f5:15:43:dd:b9:4b:a1:63:9c:aa:a8:11:21:
                    b2:a6:ac:67:e7:11:fb:fd:53:90:de:7a:7a:34:e0:
                    32:94:c1:c9:fb:7e:58:b4:b8:69:38:1f:61:69:82:
                    f7:fa:7b:2d:0c:95:a6:3b:b3:e1:b9:8c:be:33:70:
                    22:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A2:17:92:90:D3:08:F3:FB:98:26:9D:D7:21:34:73:54:E9:7D:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/217d6a2e-2c58-3540-b8c9-4d6efb709eed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:b1:7c:4c:1f:7a:60:9f:04:60:31:e5:bf:9d:38:28:f2:1d:
         db:4e:52:64:6c:0d:82:5e:16:f2:0c:5b:57:5f:15:d8:1b:58:
         f4:fb:c5:50:48:6a:1e:f1:92:be:5f:b9:c4:b5:1f:ab:e6:44:
         72:9e:0c:08:0f:0a:20:ec:49:a1:aa:74:83:1d:b9:e8:47:a2:
         2a:85:5d:82:24:8d:64:fe:62:5f:9b:e1:ab:ef:06:9f:80:a6:
         87:2e:84:8b:db:d4:b1:11:14:3c:5b:74:9a:05:ef:8b:db:79:
         96:85:a4:5c:7a:d0:04:9a:a1:db:46:09:b2:73:ab:53:d9:3b:
         cd:79:ea:1a:ab:d4:7c:31:38:2d:d0:7f:69:ff:48:24:89:c3:
         90:5e:e2:28:64:9d:32:5f:7f:6d:34:db:b8:1e:5e:ad:ab:24:
         8d:0f:57:9c:c0:f0:ad:27:47:6d:5f:e9:be:a4:52:a6:1e:5f:
         1e:49:60:26:97:61:2c:40:61:30:85:b1:a3:63:e3:48:d0:2f:
         fe:49:f3:1d:5a:a7:f1:9c:9c:53:f1:15:e5:e0:e5:8b:9c:54:
         ba:e9:d6:85:ee:45:9c:49:40:5f:bc:8e:b1:ae:bf:bf:4a:74:
         c4:7c:80:da:e1:64:9a:2b:1b:6d:8e:36:61:4c:26:c4:ad:a1:
         f7:2b:5b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:09:50 2025 by rpki-client