Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/60ee4e78-4d5b-3fdc-a7eb-b511f9f42e90.roa
File:                     60ee4e78-4d5b-3fdc-a7eb-b511f9f42e90.roa (raw, json)
Hash identifier:          SvDCkEIhH47iou+JP/vrGTo9VujF1l0sHM1emjlYd+A=
Subject key identifier:   FC:A8:1D:0A:3A:3D:D7:B1:AA:20:1E:8A:8E:A6:0A:3B:7A:4A:41:41
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A94D0DC87D08B703B1528F100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/60ee4e78-4d5b-3fdc-a7eb-b511f9f42e90.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     58061
IP address blocks:        166.1.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:dc:87:d0:8b:70:3b:15:28:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=4ba296fe-0367-42f7-a665-4da326d6f1e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ba:ea:3c:c0:8d:19:ec:10:02:a4:a9:5f:64:
                    1d:cf:6e:29:52:5d:02:58:ad:f1:a6:3d:f1:84:06:
                    d2:46:e4:20:04:c7:cb:6e:ca:54:e2:b1:83:0e:14:
                    a3:66:e8:8f:53:a6:08:41:1a:b4:30:a8:60:ea:df:
                    cb:fc:5d:a5:fa:b6:67:83:00:e1:b4:65:4e:fa:4d:
                    b6:e6:2a:c6:58:36:1a:fc:56:71:d1:c9:c7:39:80:
                    09:c3:31:b8:fa:75:0e:81:51:55:fd:03:0f:86:40:
                    f8:ef:e9:04:a2:17:62:ac:b1:7c:c9:54:08:c4:c7:
                    af:df:01:0a:7a:1d:07:42:83:2d:79:a3:90:e3:ec:
                    4d:87:4c:87:96:d4:19:dd:74:d7:a6:2a:2c:98:df:
                    5b:cb:3f:70:de:34:50:02:a2:38:1e:1f:18:3b:2b:
                    c3:08:06:8e:a4:08:4d:14:e9:f6:4d:f0:b6:61:10:
                    c9:06:5b:43:ab:dc:91:3c:25:5a:7b:75:1f:3e:9e:
                    51:95:6e:4f:4a:e6:9f:07:d5:79:39:1f:9c:bf:dc:
                    cb:6d:c9:21:84:a2:f5:a6:a6:fa:84:4f:a7:6a:65:
                    94:27:54:ee:89:c4:24:3c:d0:69:94:60:a1:74:3e:
                    57:b7:95:71:48:70:cf:85:df:38:c5:ea:57:55:ac:
                    ab:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A8:1D:0A:3A:3D:D7:B1:AA:20:1E:8A:8E:A6:0A:3B:7A:4A:41:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/60ee4e78-4d5b-3fdc-a7eb-b511f9f42e90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:2e:11:a5:5e:90:a4:83:e9:6b:a1:71:d7:cc:9d:da:ac:b8:
         73:e2:a5:f4:4b:3a:69:0c:18:de:d2:64:86:81:9e:86:52:e2:
         ae:08:3d:ce:f1:57:6c:a9:28:05:ba:13:c5:65:bc:71:51:ba:
         c8:a5:0b:99:18:99:c1:34:c5:24:69:8e:45:c6:e9:c2:04:03:
         e0:5b:26:db:ae:bd:5a:01:99:07:bb:60:10:dc:25:f2:34:56:
         dd:5f:9f:9c:4d:5c:d5:e0:cf:b4:23:24:af:47:c3:ab:49:a9:
         72:c8:2f:11:71:48:8b:72:5c:1c:1a:da:cd:c2:0b:7e:71:92:
         2b:12:d4:5c:8c:7e:aa:d2:4b:87:18:4a:7f:6e:41:b4:85:06:
         ca:9c:29:68:6a:68:87:4d:1e:1a:41:ea:06:f5:53:bd:1c:e6:
         f9:9e:ee:79:58:55:61:4c:f7:64:6b:8e:03:cd:92:3f:40:7d:
         6f:72:7c:2b:69:7f:a8:85:3f:fa:06:37:56:0b:4a:46:c2:04:
         be:c9:87:a0:52:dc:a4:3c:18:f0:e4:a9:d7:15:6f:1c:46:43:
         18:dc:0a:e8:9e:14:55:9f:5a:56:64:2c:d3:7c:09:b1:55:e4:
         3a:a0:d6:75:9f:17:c2:fa:d0:7c:49:a1:b2:7f:70:5a:f7:64:
         0e:26:30:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:10:34 2025 by rpki-client