Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/67d95ef6-2881-3461-9580-cd20bc0c7f81.roa
File:                     67d95ef6-2881-3461-9580-cd20bc0c7f81.roa (raw, json)
Hash identifier:          Z0tqxxzM6ly7+FB+rXrnbF61x37TO83iZRd1nEhoMfw=
Subject key identifier:   C0:8D:F9:11:7C:64:7A:68:9C:5B:43:57:28:A0:E3:01:21:B3:30:AA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A87B8BED878BEC6C095686200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/67d95ef6-2881-3461-9580-cd20bc0c7f81.roa
Signing time:             Tue 15 Jul 2025 20:27:08 +0000
ROA not before:           Tue 15 Jul 2025 20:27:08 +0000
ROA not after:            Mon 13 Oct 2025 20:27:08 +0000
asID:                     44559
IP address blocks:        166.1.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:87:b8:be:d8:78:be:c6:c0:95:68:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 15 20:27:08 2025 GMT
            Not After : Oct 13 20:27:08 2025 GMT
        Subject: CN=a7b73a18-da61-499d-8e54-81ffbe047a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:aa:be:de:3d:6c:7f:be:a2:b0:1b:86:ed:ce:
                    b7:4f:ed:ac:6f:af:71:22:91:8c:79:00:d3:af:88:
                    98:f3:de:6f:d8:79:ee:d8:02:96:cb:54:66:99:25:
                    fb:f4:2e:09:54:92:b5:23:87:0e:40:ba:90:fa:47:
                    7b:67:5a:f1:04:7f:5d:70:65:05:eb:27:50:30:76:
                    a2:25:dd:80:a0:26:35:54:dc:c6:e8:3b:b4:3c:e3:
                    a2:1c:74:3d:7b:67:46:00:67:b0:42:00:3a:68:72:
                    dd:38:3e:d8:8e:50:91:00:75:c6:e9:06:2f:41:0e:
                    43:9d:2f:bc:f2:e9:04:cc:4b:6d:5b:e2:3f:33:1c:
                    60:6b:af:58:50:4f:83:2d:ee:01:d9:21:d9:98:c4:
                    69:cf:c8:b7:70:66:a2:23:a7:41:79:18:47:67:1c:
                    5c:b8:7d:4f:9d:81:0b:e1:4e:f1:da:11:63:07:2d:
                    7a:6c:cd:17:2f:0f:f3:26:e8:6a:ec:98:12:a2:c7:
                    b0:1f:a5:87:cf:11:b1:89:b7:41:2e:6f:85:42:e1:
                    90:ed:f3:a8:61:19:78:b4:c3:81:a6:42:43:d0:78:
                    e0:31:9a:7e:a2:05:07:42:f8:73:5f:be:56:41:a0:
                    e1:cf:2c:c9:cb:15:f4:3c:b5:cc:d6:2c:05:5c:68:
                    20:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8D:F9:11:7C:64:7A:68:9C:5B:43:57:28:A0:E3:01:21:B3:30:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/67d95ef6-2881-3461-9580-cd20bc0c7f81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:26:e4:49:b5:3f:81:68:d3:c1:a6:41:f6:c4:0b:00:d0:e7:
         a0:75:a3:8c:14:6e:c7:bd:dc:81:e4:1f:ee:d5:8a:fa:d1:5b:
         69:95:99:96:fa:ed:ca:cd:ba:45:e3:13:86:fd:f4:b9:e1:9e:
         1a:97:df:f1:44:04:fb:08:ac:c6:df:5e:c8:27:88:fa:2a:e4:
         dd:b2:c0:b7:ef:64:e4:67:a6:a6:39:37:53:b5:8c:45:01:00:
         b0:5b:26:35:68:38:64:ec:f3:9e:9a:1a:a5:e0:b8:40:f7:de:
         9e:40:b3:c3:cc:76:bd:0a:3f:d2:24:d3:9f:c7:3a:f4:c6:0a:
         66:3c:c4:09:33:9a:e3:95:0a:5c:d9:e7:62:0e:53:43:c8:60:
         28:e1:43:c4:69:d8:23:d7:01:e8:bd:72:27:8d:9e:36:36:a6:
         14:7b:c3:33:9f:ff:de:a5:33:60:69:f5:55:40:71:75:6a:54:
         3f:4b:a3:73:d6:fa:3e:62:64:c1:0f:ac:76:d7:30:1d:c5:2a:
         ad:f1:81:72:60:c6:fd:87:2d:db:53:c9:67:8e:dd:e0:f2:89:
         e1:12:73:30:15:dc:88:b7:64:da:ad:2f:1f:69:22:54:b2:00:
         b9:67:c7:1c:cf:87:97:cd:fc:96:dc:a8:d1:e7:76:7b:87:7a:
         cf:4a:cf:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:38:27 2025 by rpki-client