Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/50fe0b16-021d-3334-a6fd-60df50be8524.roa
File:                     50fe0b16-021d-3334-a6fd-60df50be8524.roa (raw, json)
Hash identifier:          jsbhxWcr+KSRXc0aUfp4mGvhNCKBOwZNKAW6yPr7x1E=
Subject key identifier:   16:B1:7E:5B:9E:6C:87:A5:68:24:6B:F3:A6:18:A0:DD:A2:89:E7:5E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849CFFF815F7D9D78773ED280C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/50fe0b16-021d-3334-a6fd-60df50be8524.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     62240
IP address blocks:        166.1.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:81:5f:7d:9d:78:77:3e:d2:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=4903535c-cafe-4f6e-bb83-9e00c59125c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:14:b0:4a:46:75:e8:b7:97:8a:ce:32:13:c6:
                    f7:23:d5:ab:f9:02:f7:56:a0:e1:e0:d2:b7:5a:fc:
                    ae:79:c3:07:51:df:c9:f1:a5:56:14:a3:1f:2c:48:
                    b5:83:6c:b5:1f:c9:de:9d:70:47:df:9b:c4:61:58:
                    aa:3e:69:51:74:58:e8:97:42:cf:42:3a:02:9c:c0:
                    74:55:2e:eb:2c:84:9e:39:4e:46:cf:d8:c8:b3:a0:
                    96:a7:27:28:f7:ce:4a:1e:d0:83:ea:21:64:65:a1:
                    44:d1:3a:60:9f:f6:2d:f5:ed:34:26:19:15:db:35:
                    3b:a5:f5:04:bb:cc:3b:13:c7:9f:5b:f2:4a:61:d9:
                    2d:1c:7c:b4:fc:54:9c:5e:89:e9:e5:d6:d4:99:b9:
                    7e:68:49:81:86:fc:e0:06:d3:30:ad:30:2b:5e:0c:
                    c3:57:d2:fa:d6:77:7b:35:f8:ac:25:13:55:70:48:
                    ec:ee:87:eb:64:7a:0d:c0:64:5e:cf:a6:15:c9:04:
                    c7:e3:7f:f9:84:7b:70:7d:d7:c8:01:9c:ac:45:e8:
                    79:75:b8:a5:b0:8a:22:55:98:4c:40:7b:d8:84:21:
                    ac:50:35:c8:bf:21:05:9d:8a:f6:38:cc:9b:3e:a2:
                    a0:22:32:51:cc:13:cc:77:97:bb:f8:b7:ee:18:38:
                    54:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B1:7E:5B:9E:6C:87:A5:68:24:6B:F3:A6:18:A0:DD:A2:89:E7:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/50fe0b16-021d-3334-a6fd-60df50be8524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:ba:ed:2c:1a:89:77:08:c6:d7:a9:06:a2:36:b7:d0:5b:c8:
         63:59:a9:97:db:d2:d3:ff:28:ae:12:9a:a8:3d:67:17:c3:7e:
         32:cc:6b:7b:8a:79:e0:b5:3b:d1:09:91:7a:7c:7f:ec:33:f7:
         5b:ff:80:d7:78:79:17:29:7a:fe:41:51:d2:c9:e4:37:7a:a1:
         58:ad:5e:61:bf:9d:70:50:c7:70:17:93:a3:a1:3e:ec:1f:ba:
         1c:31:de:a1:ef:fd:44:99:7d:b8:90:bc:5c:88:4b:2e:4a:3d:
         6b:d8:97:a1:8c:a3:15:1a:f2:a4:b1:ad:23:6b:a3:76:64:d8:
         1e:9e:99:a1:59:e6:43:57:99:38:7d:05:bb:f0:fa:85:90:34:
         be:ac:8c:fb:e5:8f:01:1c:72:29:44:60:04:d5:50:6f:71:cb:
         cd:08:c8:47:53:34:72:97:b3:d2:9b:5e:f3:ef:26:7f:01:5e:
         51:4e:2b:4c:cd:1f:93:87:d4:b2:f8:cd:1e:fe:e1:af:20:e4:
         82:24:9e:f3:99:0d:b9:fa:f2:9f:69:e3:47:72:27:b6:cb:93:
         b6:de:3f:91:8f:f5:45:32:c9:24:44:7d:f2:42:dc:dc:6f:09:
         b3:e7:ef:ea:4e:be:12:32:05:fd:4e:7e:bc:39:fc:9b:9c:61:
         3b:17:c9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:22:27 2025 by rpki-client