Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9514aa76-3f5b-3501-a4f8-d7265084100a.roa
File:                     9514aa76-3f5b-3501-a4f8-d7265084100a.roa (raw, json)
Hash identifier:          NUthI7taQXY8hCtsthqFmjn3myJ0C/K6VeyUCTVhy3I=
Subject key identifier:   E2:56:A9:4F:7C:A7:99:43:15:04:CA:35:DB:02:10:DD:EF:55:7C:21
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A9E65601D6FBD944B04F5F700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9514aa76-3f5b-3501-a4f8-d7265084100a.roa
Signing time:             Wed 23 Jul 2025 23:22:44 +0000
ROA not before:           Wed 23 Jul 2025 23:22:44 +0000
ROA not after:            Tue 21 Oct 2025 23:22:44 +0000
asID:                     7385
IP address blocks:        166.0.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:65:60:1d:6f:bd:94:4b:04:f5:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 23 23:22:44 2025 GMT
            Not After : Oct 21 23:22:44 2025 GMT
        Subject: CN=5a5da330-4237-4588-b070-3aa2846b05d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9a:2f:69:91:1b:31:fd:51:94:36:61:01:ee:
                    2f:04:4b:09:d5:37:9e:59:17:15:b9:e1:12:58:bc:
                    8f:f6:60:ae:5a:d2:e5:e6:f7:f9:9f:c7:fe:ec:be:
                    d5:bf:70:1b:22:33:7d:ac:be:59:be:6d:03:f7:2c:
                    c1:5a:69:fa:00:86:e8:00:4f:75:11:33:da:9a:73:
                    f7:be:25:a4:92:69:04:ed:6f:77:c9:dd:8e:54:d0:
                    17:5c:6b:35:10:d4:07:0f:11:56:00:51:bd:85:1b:
                    ce:01:ef:79:ce:4f:ac:aa:78:6b:b4:f7:b2:ea:1e:
                    2f:69:ed:ae:8c:d4:0e:38:55:38:bb:76:09:6c:bc:
                    ff:f7:c5:61:fe:7e:0e:99:69:70:f7:98:a7:8e:78:
                    12:0a:03:66:c2:eb:fa:8a:04:b4:3d:3d:3d:b2:ed:
                    c0:75:f8:2f:87:72:89:01:ed:98:d4:f2:b0:65:a7:
                    88:23:67:6e:eb:e1:54:a9:71:54:55:08:dc:bc:39:
                    98:3d:1f:31:58:8f:c6:c2:d8:c3:af:ef:4c:7d:a8:
                    77:e4:b1:c9:cf:c9:98:10:e1:1b:31:00:53:ca:65:
                    73:4b:d7:8f:91:90:a7:ce:82:c9:1b:bb:a3:07:1e:
                    20:d3:d1:12:ae:bc:64:7d:41:82:c2:75:bc:fc:61:
                    f7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:56:A9:4F:7C:A7:99:43:15:04:CA:35:DB:02:10:DD:EF:55:7C:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9514aa76-3f5b-3501-a4f8-d7265084100a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:82:cc:d0:7e:a4:82:fa:5b:9d:28:eb:8e:d3:7c:5d:c7:d0:
         a9:bd:f9:1a:85:af:a7:ba:c3:b7:8a:f5:7a:9c:ae:f5:e0:70:
         b9:cd:5a:46:38:31:56:ca:1b:58:5c:75:26:70:c8:c5:f3:0f:
         de:a4:14:a0:f5:d4:48:f3:4f:64:b5:9d:97:ec:f9:72:83:d7:
         a9:70:0a:08:9c:d8:84:de:ff:ae:ce:e6:80:8e:c7:c8:ba:c2:
         e9:29:69:fe:e1:13:b9:2f:10:a3:83:97:bf:e2:84:a0:a4:1d:
         e4:aa:8e:21:58:c8:53:41:63:9a:81:24:b0:e5:9a:8d:61:9a:
         f4:63:4e:ab:b7:d4:c1:23:2e:28:f9:17:e8:f3:4c:4d:26:76:
         86:c5:7a:bf:27:3e:56:58:75:8d:84:1e:bd:6b:d3:2d:51:3c:
         11:28:36:a8:63:aa:73:3f:cf:bc:81:be:14:85:04:c4:59:9b:
         5b:ca:79:b6:20:58:2a:9b:32:ca:5d:5e:0f:d1:fc:44:e2:bc:
         1c:ba:9b:cf:a9:d6:1e:11:6f:46:2b:23:db:b9:77:32:01:b9:
         45:fe:10:5f:fc:5b:62:61:e8:f3:d2:4c:85:3d:92:5b:e0:7b:
         ab:2c:cd:b9:cd:cd:9f:41:7e:84:8b:67:ce:62:10:64:d8:36:
         07:af:0a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 13:11:59 2025 by rpki-client