Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3aa0aa95-5dae-3ce9-beda-7fa161efcb42.roa
File:                     3aa0aa95-5dae-3ce9-beda-7fa161efcb42.roa (raw, json)
Hash identifier:          XnJNJXbkXKprl02FxqTS/MdGCGIyyOGR6tSduowixtw=
Subject key identifier:   9B:44:27:64:8A:07:36:68:3D:EB:C5:D9:99:A2:07:C4:2C:96:4D:93
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849CFFF7D88ADA96EBBE277FE00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3aa0aa95-5dae-3ce9-beda-7fa161efcb42.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     62240
IP address blocks:        166.1.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:7d:88:ad:a9:6e:bb:e2:77:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=bfbe938c-4492-411f-9736-15063d1cbe31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e3:cc:cf:18:94:bd:fe:f8:68:6f:81:de:83:
                    9a:9f:71:63:88:b2:b0:b6:b1:0e:b7:2a:7e:09:5b:
                    89:a9:14:d6:c2:be:a3:7e:ad:29:75:04:6f:de:17:
                    0c:9b:e7:89:22:a5:57:43:c4:95:a0:0d:ca:52:4c:
                    d1:0a:c0:11:e2:b8:c7:7c:88:57:3b:5f:1b:50:05:
                    a7:03:80:2a:3f:6d:c6:c9:32:41:2c:5d:0a:38:aa:
                    98:ab:0a:12:99:be:82:10:ea:47:61:d4:92:bf:fd:
                    26:26:2f:52:5e:11:c4:6a:00:d6:66:3d:db:03:04:
                    ba:77:38:3a:6d:50:97:8f:f3:1d:95:43:0d:e2:53:
                    a2:2a:1e:6e:2d:6c:c1:06:51:91:05:33:9f:9a:e6:
                    fb:2b:f8:01:63:1b:40:27:a6:09:dc:ff:21:dc:78:
                    3d:4f:fc:02:91:9a:d9:e9:3e:e4:5f:b2:c5:4e:45:
                    95:55:7b:82:e1:34:08:a1:c1:8e:5d:5f:7f:aa:80:
                    d2:23:d6:87:50:39:3a:f9:8e:c0:70:93:84:b1:fc:
                    c1:47:7d:b5:fe:94:14:e9:ad:da:89:57:a2:b9:36:
                    c5:a3:20:40:2d:dc:d7:af:83:1c:c4:10:54:51:54:
                    21:d2:f9:72:61:2b:84:3d:95:54:ca:d9:3d:07:b9:
                    cb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:44:27:64:8A:07:36:68:3D:EB:C5:D9:99:A2:07:C4:2C:96:4D:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3aa0aa95-5dae-3ce9-beda-7fa161efcb42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:90:a1:e8:80:c9:74:2d:cd:28:5d:ac:c2:c0:69:40:65:a2:
         e1:1d:b7:fd:27:31:bc:97:da:c6:a4:d6:2a:9c:e9:a6:6d:1b:
         29:07:f7:f2:24:fc:eb:47:3e:ab:74:c2:de:ed:b1:02:16:e8:
         eb:22:f4:b2:9e:82:45:38:4e:23:6c:8c:65:47:27:f0:09:ee:
         70:8e:28:f9:1c:a6:6b:b8:1b:58:ee:03:9f:d9:5c:a7:22:4a:
         5b:8c:6c:00:94:5f:a7:39:5e:1c:63:b4:47:59:11:0c:2b:fb:
         34:ed:1d:88:32:86:ef:2e:fb:69:12:08:f5:66:58:d1:c7:8f:
         81:56:1e:4f:92:d9:f8:f7:1f:0d:17:ef:c6:c3:91:5a:95:82:
         b2:67:ff:97:b8:2c:84:a3:80:49:65:60:07:49:8b:62:37:cd:
         a6:54:f6:4c:59:a8:59:4f:eb:27:41:9f:15:bb:0b:0e:5c:49:
         60:02:cc:bf:73:2e:3b:91:09:87:78:6f:2c:0a:6a:a3:c9:b5:
         43:62:d7:06:c8:32:0c:69:40:15:46:0c:81:41:8d:48:0d:68:
         1f:40:4e:26:41:42:7d:fe:ee:d8:e9:92:64:ce:db:ca:49:64:
         ec:6e:5d:be:13:c6:aa:b1:46:b0:43:dd:6b:bc:ef:86:6c:d2:
         c9:a5:94:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:42:41 2025 by rpki-client