Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd50cc5d-02c6-3cbc-939c-8a958811f1a4.roa
File:                     cd50cc5d-02c6-3cbc-939c-8a958811f1a4.roa (raw, json)
Hash identifier:          ChZ5LZRUMAgf+mvdevXJHqiM6hq7jU24TyyHPgjukgk=
Subject key identifier:   2A:45:0E:83:65:1D:82:69:3E:E4:29:C9:02:9F:F4:CB:30:34:47:EC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858495D897609713C62F632572000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd50cc5d-02c6-3cbc-939c-8a958811f1a4.roa
Signing time:             Mon 31 Mar 2025 01:00:47 +0000
ROA not before:           Mon 31 Mar 2025 01:00:47 +0000
ROA not after:            Sun 29 Jun 2025 01:00:47 +0000
asID:                     134465
IP address blocks:        166.0.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:89:76:09:71:3c:62:f6:32:57:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 31 01:00:47 2025 GMT
            Not After : Jun 29 01:00:47 2025 GMT
        Subject: CN=dcfda659-e588-4ec3-b490-0cf99ca6c98c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:77:48:02:6c:ce:3b:4e:ae:c2:73:31:5f:c1:
                    dc:68:e2:63:d9:90:31:10:b5:09:d4:db:1e:fa:9a:
                    bb:dc:93:12:0f:6b:3f:34:34:4e:7a:b8:fb:4e:22:
                    05:73:f8:cb:86:65:ef:59:f5:66:c7:6b:ed:00:cb:
                    1b:c1:23:8e:99:3e:65:df:6d:7f:1e:9c:ce:5a:69:
                    e8:15:13:45:bc:9b:07:fa:da:5d:86:b6:24:6d:a6:
                    02:fc:23:f7:b9:51:70:64:67:66:9b:84:a3:f9:9d:
                    65:50:be:68:5a:5f:44:4b:58:37:02:0e:a4:21:e0:
                    d0:d7:cb:c6:81:e8:23:cb:a0:d2:af:82:b0:46:b0:
                    c1:72:16:4c:b3:ec:87:bc:8c:35:52:7e:7d:06:8f:
                    94:f9:56:6e:8d:aa:2e:1f:2b:8e:f7:e0:1e:37:c8:
                    7e:57:62:e7:1d:41:76:10:c3:57:8c:69:04:02:cc:
                    e6:aa:0c:aa:9e:dd:ed:46:3e:86:30:f2:c6:26:63:
                    c5:4f:bd:a0:8b:a3:88:02:7b:bd:f3:2a:75:ad:e4:
                    0d:45:bc:6b:0e:34:d6:be:97:f9:dc:1d:cb:97:72:
                    13:64:66:47:0c:32:d7:9d:52:aa:34:33:b6:49:67:
                    67:2b:a2:79:7b:02:61:0b:55:7c:50:44:44:44:44:
                    ba:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:45:0E:83:65:1D:82:69:3E:E4:29:C9:02:9F:F4:CB:30:34:47:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd50cc5d-02c6-3cbc-939c-8a958811f1a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:bb:33:a0:1a:54:ee:c9:d2:45:c6:e9:b0:68:aa:62:c9:5f:
         a6:37:d0:4e:dd:9f:bc:2d:a8:6f:f1:47:a7:32:e0:d1:34:cc:
         68:94:86:f8:f7:bd:67:88:31:ae:49:9c:75:7a:4c:29:0a:71:
         71:3c:96:d1:0d:95:1f:c0:3a:bf:a8:fc:94:d8:d2:85:16:67:
         0c:a9:e8:b0:b6:6b:6c:d3:85:5a:d4:c2:a1:a3:0e:11:45:f4:
         4d:cb:25:42:8d:36:6d:49:bd:5b:29:82:f1:6a:f2:91:43:4c:
         f3:ed:47:2f:46:10:d6:93:3b:83:c6:f8:cf:d5:56:6b:d9:ef:
         2c:74:0b:6f:c3:f8:3e:dc:61:29:7b:2c:f8:41:48:58:a9:9f:
         2f:d1:a6:d1:e0:68:25:e3:19:bd:76:c9:4a:3b:b7:64:62:cb:
         41:ea:2c:7b:13:97:97:cd:06:51:e3:ba:11:07:be:db:85:79:
         87:db:7b:2b:20:06:bf:9f:71:86:12:1c:f8:4f:fb:4d:74:bc:
         08:73:a5:d4:0a:37:6c:2c:78:c0:2a:a6:f5:fc:43:d5:a2:22:
         b5:dc:9f:90:2f:84:20:8d:01:01:a3:63:87:c0:d6:7f:9a:24:
         d7:9d:23:eb:96:0b:4c:be:b8:09:1d:b5:47:83:4a:70:54:a5:
         a7:c7:ba:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:33:44 2025 by rpki-client