Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/607e863f-43e6-3abf-b77d-c24c6153103b.roa
File:                     607e863f-43e6-3abf-b77d-c24c6153103b.roa (raw, json)
Hash identifier:          DhoQT0uKbM93cR0P1wVnZMTpfwDlv3McfY36G1V47KI=
Subject key identifier:   7C:73:D8:AB:CE:0B:2E:8A:6E:55:02:F1:78:80:DD:F5:C3:6B:BD:C7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A3BCEAFD112960827CF4A7F50
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/607e863f-43e6-3abf-b77d-c24c6153103b.roa
Signing time:             Wed 18 Jun 2025 15:49:54 +0000
ROA not before:           Wed 18 Jun 2025 15:49:54 +0000
ROA not after:            Tue 16 Sep 2025 15:49:54 +0000
asID:                     401152
IP address blocks:        166.0.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:ce:af:d1:12:96:08:27:cf:4a:7f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 18 15:49:54 2025 GMT
            Not After : Sep 16 15:49:54 2025 GMT
        Subject: CN=f8efa3d2-5d8c-443c-a7be-0c6266252a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fc:e4:12:ed:99:43:b6:6a:ee:1b:4c:31:f9:
                    bd:c1:83:3b:ed:62:c7:b2:ce:d1:1c:2e:19:6a:e8:
                    78:c6:83:23:1e:77:f9:03:47:15:34:18:be:ba:2c:
                    b3:f4:ff:cc:e4:c4:6d:28:0c:17:f6:b6:15:0a:15:
                    e6:fc:53:3a:00:07:2a:73:e9:6b:d2:7d:34:58:e5:
                    76:8f:e4:c6:da:27:f8:7e:f5:bc:af:ca:7a:5c:56:
                    16:1e:b1:78:d0:1b:b6:93:80:d5:8e:03:5b:cc:46:
                    06:a8:a9:eb:8d:b7:80:a5:b6:6a:bb:2f:7c:f1:b1:
                    99:12:92:f6:68:5f:24:07:87:9c:8d:86:59:51:3b:
                    10:25:44:88:d3:ca:51:10:21:88:60:b7:6d:09:08:
                    ad:d7:7d:aa:ae:2d:36:b5:dd:3f:3f:f9:17:ea:01:
                    45:e0:2c:09:c4:34:66:cb:ba:05:1d:4a:80:2e:30:
                    d6:37:26:dc:66:82:03:64:c9:0c:97:0e:98:dd:d7:
                    84:8d:1e:7f:8f:b3:f0:18:88:5a:a2:27:36:59:f2:
                    16:3c:c2:d3:88:a0:22:00:21:19:e7:5c:bc:3d:7c:
                    34:00:4c:be:e4:23:10:0d:35:4e:25:c1:45:14:7e:
                    ff:b6:1d:da:d5:59:ba:bc:3f:b2:35:5c:c1:25:75:
                    64:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:73:D8:AB:CE:0B:2E:8A:6E:55:02:F1:78:80:DD:F5:C3:6B:BD:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/607e863f-43e6-3abf-b77d-c24c6153103b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:ba:d8:f1:5e:06:59:53:7d:1c:c9:73:c0:2d:e5:17:92:de:
         53:db:03:35:0f:ba:4f:12:c9:ac:ec:6e:04:6e:dc:d8:32:fb:
         42:1a:bb:ea:2b:12:3c:bc:96:77:ec:8d:90:38:00:01:b7:f6:
         e8:98:63:68:dd:d5:0d:b0:6a:c3:3b:fb:44:ed:9b:6b:68:56:
         63:50:1b:5e:83:89:ea:36:59:ce:cc:7f:81:5b:e2:38:8b:cb:
         86:2e:99:df:63:c1:b3:50:02:e6:a7:5c:f7:a1:6e:48:f9:00:
         66:66:c9:22:5d:2d:25:81:90:a5:e9:9d:44:f1:dc:27:89:02:
         f2:de:38:93:8f:4b:dc:57:c2:92:27:f3:49:6d:fb:84:fe:07:
         26:95:59:5d:4b:0e:51:61:2f:5d:db:19:47:50:4b:84:60:e7:
         54:da:05:c7:ce:af:dd:5a:bb:08:d5:b4:49:c8:2d:47:55:27:
         a0:f7:6d:a5:7f:1f:4b:05:26:ea:72:f8:57:f3:d7:42:51:66:
         e1:ca:f2:f3:58:42:85:61:a3:a1:6c:5c:36:00:46:80:f9:89:
         03:a0:b6:06:78:34:8a:3b:12:ab:4a:b7:f3:a0:af:1f:41:06:
         66:8b:c5:fd:c0:2a:a1:7a:0c:b4:c2:2f:c7:4e:92:81:74:d0:
         48:62:fe:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:31:05 2025 by rpki-client