Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3a347588-5377-366f-a581-2f2ceacd5991.roa
File:                     3a347588-5377-366f-a581-2f2ceacd5991.roa (raw, json)
Hash identifier:          Udi0nW91Dlx+V/megbN0J9/oVUSR69jodfpa1Hx9D+8=
Subject key identifier:   AF:1F:5B:19:C7:83:2F:00:AD:E8:00:DB:81:AE:F5:17:24:0E:81:F9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849B14A0468E8DDCE054F9BE500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3a347588-5377-366f-a581-2f2ceacd5991.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     22773
IP address blocks:        166.1.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:04:68:e8:dd:ce:05:4f:9b:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=961fc923-d6b1-47aa-addb-30312b67a6cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:37:dd:c4:fa:57:52:5a:78:df:dd:b5:39:d9:
                    6e:dc:05:24:6c:10:2c:40:3d:8f:d0:21:68:58:0e:
                    0d:9f:05:f1:e3:d0:d4:98:e6:c2:9c:03:95:2d:b7:
                    7b:88:cd:2e:6e:2d:5a:74:44:4d:85:91:3c:44:35:
                    f9:e1:bb:63:a4:5c:bb:77:7b:99:1b:a0:b4:7e:eb:
                    84:60:ed:e0:5c:88:6d:44:37:cd:fd:d6:08:91:4e:
                    94:91:a0:31:dd:f5:a8:fc:0a:15:63:1f:28:07:e9:
                    81:66:a1:40:8e:52:97:c2:8a:74:d9:48:cf:e4:ea:
                    11:db:83:4b:46:d7:7a:53:8f:e3:77:03:34:b0:fc:
                    73:2a:08:f9:d1:4f:03:8d:46:c0:b8:08:2b:0a:b8:
                    f0:b8:ae:c1:58:8e:3e:92:2c:c1:37:f4:66:f8:d0:
                    59:ae:22:c1:7d:fc:2a:57:4d:2c:cf:ee:21:d2:33:
                    a3:55:12:e5:57:bb:18:7f:1f:18:a7:30:74:97:9b:
                    1d:c9:42:08:2f:7a:98:7b:d7:8e:c0:0e:46:81:78:
                    10:cb:ae:4b:dd:ef:78:33:70:2a:ea:4b:c2:32:e3:
                    65:20:8e:52:18:40:36:e3:ad:1b:5a:05:db:3c:72:
                    78:de:df:71:14:f5:48:16:6c:e1:83:4a:6c:40:36:
                    c0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1F:5B:19:C7:83:2F:00:AD:E8:00:DB:81:AE:F5:17:24:0E:81:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3a347588-5377-366f-a581-2f2ceacd5991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:58:25:8e:42:5f:76:53:5c:3d:b8:b6:0c:0a:f9:4b:8d:99:
         cb:e1:9a:f3:5b:4b:11:2f:27:de:a9:61:30:86:10:1a:ce:e4:
         19:4b:16:e5:a6:69:d7:66:b3:01:c9:88:a6:97:97:1d:3a:a0:
         bb:82:51:81:0b:0b:6d:b3:b4:ab:b1:77:38:d0:4a:39:b8:11:
         30:36:15:8c:db:3c:6e:33:4d:d0:21:c3:5f:d0:3c:08:c3:12:
         44:1e:40:c0:59:8b:22:14:71:4b:b0:c0:72:01:3b:06:bf:46:
         27:87:f8:7a:14:30:8c:1c:b1:91:a2:ff:98:39:65:67:5d:81:
         55:f2:a1:90:fb:72:a0:31:f7:20:65:dd:a8:4f:ce:1b:73:d7:
         b9:6a:a6:ca:2e:21:a7:f7:bb:df:95:e2:b0:e9:72:9e:31:b7:
         9e:b7:ff:d2:41:ed:13:3f:65:6b:ba:ae:e1:3f:12:91:4a:e6:
         08:f8:5a:bc:f6:05:a9:a8:66:0b:e8:f5:a8:e2:ba:c1:dd:6a:
         59:1d:c3:07:2f:1f:76:a1:fc:9e:dc:cd:c8:a0:ec:03:28:48:
         69:e3:e1:f7:4c:41:59:7b:59:21:ee:3b:83:b3:37:88:f4:f9:
         76:75:03:ec:0b:66:05:24:57:b7:2f:58:f3:6b:bc:e8:d6:dd:
         36:6d:b2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:27:07 2025 by rpki-client