Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/830a5b32-dd2c-3b79-bd26-453dcf6acb9a.roa
File:                     830a5b32-dd2c-3b79-bd26-453dcf6acb9a.roa (raw, json)
Hash identifier:          BMsVyshcO5E6cMdyjR6JH/yaBaS4mJzvEGpTXAlFuiM=
Subject key identifier:   26:34:A5:25:2D:B8:29:73:84:27:E4:53:CA:A2:3E:9B:0E:94:AE:D1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849B57A2115056F4F964797DAA0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/830a5b32-dd2c-3b79-bd26-453dcf6acb9a.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     58061
IP address blocks:        166.1.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:21:15:05:6f:4f:96:47:97:da:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=9ffda63c-c70c-4d44-921d-fcf0e1cb45dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:72:f3:f1:55:2f:f7:9e:01:84:14:8d:7d:84:
                    00:14:ab:33:0a:61:46:ab:29:21:98:6b:93:c7:35:
                    d1:28:06:f6:ed:86:7b:6d:fe:a8:2d:4a:0f:45:ea:
                    44:19:1d:89:08:48:4b:f5:55:15:56:34:00:15:27:
                    ee:a1:2e:48:f0:81:98:15:ce:56:19:ff:1d:83:82:
                    60:cb:48:3f:bc:2c:7c:ec:ad:ad:3d:02:7c:9b:e0:
                    a6:4a:93:25:0a:40:ba:ee:d5:f0:32:45:f4:42:db:
                    d2:ac:59:cf:f9:87:0c:f6:a3:0d:d1:d1:30:52:c8:
                    78:a3:ad:df:bb:3b:d2:44:c5:4d:39:62:9b:09:ae:
                    b2:c5:30:de:b1:56:36:b7:f0:f0:ae:29:dd:ad:e6:
                    55:e9:ab:09:c3:ca:23:7b:3b:89:63:e6:a9:98:c1:
                    be:69:6f:1c:ba:7f:bc:4d:6e:18:b3:8c:f3:91:5f:
                    9f:a9:dc:e9:35:f5:b3:8b:d0:b9:18:57:3f:88:09:
                    b7:03:c9:27:d4:95:dc:10:39:71:26:e0:80:29:e9:
                    44:14:0d:28:76:5f:f1:02:46:95:87:5e:72:57:20:
                    97:45:be:a8:0f:b8:66:a2:e5:12:f4:58:ea:f4:3f:
                    a6:42:f2:03:48:97:d9:49:07:d1:9b:74:21:ba:1f:
                    ab:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:34:A5:25:2D:B8:29:73:84:27:E4:53:CA:A2:3E:9B:0E:94:AE:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/830a5b32-dd2c-3b79-bd26-453dcf6acb9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:33:0d:ba:3b:9a:66:fc:05:6e:89:85:17:11:1a:43:bb:da:
         2d:ef:99:60:4a:2d:8d:71:6f:85:b6:5d:87:05:a9:b5:9b:2a:
         bf:cf:c4:c4:47:0c:c0:aa:db:6d:ae:e3:ae:56:5c:d4:d5:36:
         1a:48:51:e0:eb:11:b4:24:bc:df:24:69:e4:90:ec:b0:ce:c9:
         6b:75:0d:00:71:21:10:c5:9e:df:47:bd:70:39:a0:74:a6:57:
         dd:a8:36:18:9d:98:b4:92:1e:8d:26:13:a0:bd:72:bf:31:b1:
         98:e7:34:62:0f:34:c8:3a:6b:57:32:8f:20:52:80:11:b2:e1:
         0a:00:22:6d:f1:20:f8:93:26:92:0f:13:21:0c:18:04:68:31:
         77:2a:56:19:dd:36:35:67:67:da:a5:59:9b:e7:bc:03:2e:7f:
         34:fb:b6:33:2d:d0:0a:24:c0:f5:e9:16:af:ec:15:47:d5:97:
         83:42:c4:83:a1:dd:13:9a:b9:db:0d:ef:03:d0:4e:42:7a:f5:
         3b:b7:b1:af:a2:72:f4:22:ac:f8:bf:08:45:12:bb:ce:38:7b:
         db:10:ca:a4:0e:0b:75:20:6d:8a:be:c9:05:44:e9:de:22:a6:
         1c:11:49:f9:87:9a:74:da:27:f0:e7:52:0c:f2:57:17:ea:1f:
         ee:e8:c4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:52:22 2025 by rpki-client