Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2dfa2958-869d-3921-a8ad-1a559be0d746.roa
File:                     2dfa2958-869d-3921-a8ad-1a559be0d746.roa (raw, json)
Hash identifier:          Hdwi8x0hMUK3M3u0QsHWTGo28iAz3vsMdowDZkHWmBU=
Subject key identifier:   F8:DF:EF:CA:B3:7D:CA:74:A5:D5:9B:A5:9E:24:A0:72:B3:EE:7B:63
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849B57A228A039D9A56473EC900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2dfa2958-869d-3921-a8ad-1a559be0d746.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     10103
IP address blocks:        166.0.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:22:8a:03:9d:9a:56:47:3e:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=91f5c33b-ab42-4b02-bac6-cb90f47eb7bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:64:a4:ac:88:bf:6a:74:a3:54:52:1b:16:91:
                    be:a9:58:c5:7a:7c:b8:00:66:8f:fa:30:42:b7:8a:
                    3c:d3:84:62:d3:c2:9d:6a:d0:bf:d0:e2:c8:47:3b:
                    b2:70:32:b0:f6:87:25:7a:1e:5d:6f:e2:dc:fa:41:
                    4c:32:fd:b4:58:cc:92:f9:64:86:1b:06:a3:c2:85:
                    7e:67:a6:a1:fa:4c:5b:cc:7f:16:83:7d:e8:e1:ef:
                    5f:36:e5:1c:ec:4a:21:ac:6f:d0:9e:1f:2e:16:ea:
                    b9:c7:4b:a2:05:3c:dc:ed:20:b7:55:42:c4:0f:b6:
                    79:6a:1a:0a:c8:f7:16:2a:ba:50:9f:cb:22:86:c4:
                    65:b5:e2:a6:98:de:e9:22:0f:d7:36:8b:f1:e0:45:
                    f2:6d:59:5d:d6:38:86:7c:14:9e:a5:20:cb:bd:4d:
                    fb:f6:0c:e9:c8:98:9f:01:e9:5e:f2:b1:df:e3:34:
                    91:87:53:a9:fe:a3:ee:09:50:e2:26:c7:1d:d6:d5:
                    ef:2d:ae:0c:f0:f8:35:1f:a3:85:8c:87:27:88:02:
                    d7:e9:90:2c:91:8b:c7:b6:94:77:b5:26:ca:82:83:
                    81:56:8a:6c:f3:59:aa:19:3b:10:c6:8d:5a:47:01:
                    e1:af:c2:05:41:ff:e2:1c:75:af:64:60:d8:08:04:
                    91:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DF:EF:CA:B3:7D:CA:74:A5:D5:9B:A5:9E:24:A0:72:B3:EE:7B:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2dfa2958-869d-3921-a8ad-1a559be0d746.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:40:31:8c:fd:ae:60:be:0e:65:d9:ed:87:a3:ba:5e:8e:83:
         77:94:0f:74:3e:f5:69:da:8e:00:47:21:e5:a6:40:eb:4b:bf:
         65:03:c2:63:32:21:ef:05:a9:31:17:0c:db:7e:b0:57:cc:85:
         b5:8d:3d:05:10:e5:67:49:67:da:5a:0d:24:42:60:5a:de:fd:
         31:d1:c4:8d:2c:c8:37:9c:51:6e:ee:cf:74:23:4a:b0:45:51:
         bf:17:c2:f9:df:8c:ed:29:a5:1f:d1:70:87:92:e5:0c:6b:22:
         95:ca:f2:fa:69:ad:b1:d2:13:0c:62:82:80:a0:d6:06:00:04:
         09:d3:1d:e3:07:e7:4a:b2:99:43:a0:bb:62:d2:1e:3c:f8:35:
         1c:88:b2:2d:81:1d:d6:44:78:ae:37:75:6d:b3:1e:27:51:8f:
         c6:52:56:68:54:13:bb:25:18:e2:4d:bc:b9:9d:9f:7b:61:ae:
         8c:f4:d8:d4:f4:d8:46:26:95:e8:93:42:d9:f2:50:85:4d:e5:
         16:87:da:c6:64:86:37:54:40:9c:4c:71:80:53:1e:a4:54:35:
         28:28:56:3f:5c:bc:29:3a:78:7d:40:ae:fa:22:af:9b:7c:28:
         0f:14:a6:9a:5c:9c:a2:a2:5f:17:61:02:29:91:22:69:61:b5:
         d5:d4:0a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:16:11 2025 by rpki-client