Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/da230a41-0d49-35d3-8e3e-15c208654bcb.roa
File:                     da230a41-0d49-35d3-8e3e-15c208654bcb.roa (raw, json)
Hash identifier:          Ih9mhSb9N7y0TX8M1K6/Chpk0ia196baM64ltBKNGVI=
Subject key identifier:   E1:3B:C7:C1:5E:88:BC:8E:BB:5E:91:34:CA:0B:DF:FB:95:28:8C:B6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849D1654DC9BB26665200166980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/da230a41-0d49-35d3-8e3e-15c208654bcb.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     58061
IP address blocks:        166.0.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:4d:c9:bb:26:66:52:00:16:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=99921874-150e-4bd5-aea5-3641f21e2b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d1:8e:fe:a2:9f:57:a1:0b:16:9c:fe:5b:2f:
                    a5:d0:35:8a:ba:0e:ef:b4:34:d3:b7:72:b7:dc:a9:
                    fe:e3:25:35:b1:d5:40:db:00:63:da:44:d2:67:fc:
                    82:bb:1b:b4:31:fa:20:6c:f3:65:c6:83:6d:6e:4d:
                    3e:f6:50:06:3c:76:c9:e6:17:eb:5b:dc:0f:e0:fc:
                    09:13:4d:d7:8f:4c:b7:0f:2f:88:37:cc:32:9c:d3:
                    f7:ed:4e:0e:9b:34:80:89:24:cf:45:c6:20:82:db:
                    fb:ed:14:e0:c1:01:1c:c5:58:d7:31:30:31:89:50:
                    2c:57:6a:64:36:ef:76:47:a6:05:ca:a8:0a:c1:a1:
                    f7:f0:6e:3e:17:65:76:08:fd:cd:58:b5:f5:1b:17:
                    85:54:7c:e9:fd:a7:4d:fc:25:02:da:eb:24:03:19:
                    ed:f6:05:e8:da:cd:f2:eb:c9:d1:35:1a:b3:02:2b:
                    8d:89:8f:85:2e:ca:75:ad:a5:9d:30:26:60:61:57:
                    ed:fb:4e:dc:1e:be:4c:5a:01:d2:45:99:e1:f2:b6:
                    98:9a:f4:1b:50:7e:8a:e6:f7:73:82:d0:25:cf:17:
                    09:d6:c6:76:3b:4d:14:57:77:b9:5c:eb:aa:f1:92:
                    23:98:24:ca:c8:1b:98:7e:ea:b7:64:de:f6:f2:a3:
                    c7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3B:C7:C1:5E:88:BC:8E:BB:5E:91:34:CA:0B:DF:FB:95:28:8C:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/da230a41-0d49-35d3-8e3e-15c208654bcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:0d:09:6a:d1:3f:e4:d4:89:57:03:ae:4e:36:85:e7:ea:a1:
         40:ce:9b:50:c5:46:0c:e3:9f:3f:bf:85:ca:5b:16:b5:fc:12:
         72:ef:93:da:c5:8d:3e:5d:09:57:47:99:16:cf:71:f2:ca:d1:
         31:cc:4e:52:48:3f:e6:a2:fb:35:d5:1f:4f:56:83:e6:99:49:
         61:e0:bc:28:e3:60:4c:4f:3a:00:1c:e5:04:bb:6d:3b:99:ae:
         ac:50:dd:d0:86:b2:fa:a7:fc:ab:24:7d:b3:e7:52:ca:45:63:
         bd:65:7c:ed:dd:16:11:e6:f2:89:6c:fe:68:7a:2a:5b:fb:dd:
         f1:b8:e2:b8:24:6e:bd:71:39:f9:00:b1:4d:ba:5f:e4:d0:87:
         9f:14:a5:fe:66:5f:60:05:8d:cf:0b:7a:e5:de:e1:d3:49:10:
         f1:5f:7c:07:f6:b0:b9:1a:ea:29:1f:f3:16:a9:a2:f7:35:c9:
         fb:21:c3:65:97:2c:75:2d:03:8d:d3:38:6c:ac:45:d0:95:ac:
         76:76:74:b6:08:79:82:f9:ed:27:0c:4d:cb:f3:be:35:a6:07:
         b1:8a:34:5a:a2:e0:da:10:56:ff:9d:50:7e:90:e2:84:11:ca:
         17:4f:e8:e0:d9:fb:4f:74:04:f2:c1:e0:c6:56:f4:38:24:ea:
         c8:a9:e8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:28:57 2025 by rpki-client