Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf303ef4-ad27-3e52-9478-6ff8b78c163c.roa
File:                     cf303ef4-ad27-3e52-9478-6ff8b78c163c.roa (raw, json)
Hash identifier:          zEagKObeTJbpgoaxy6GXP1ryOnPqlAqBkB1pF8rIu9U=
Subject key identifier:   AD:2C:EE:BC:16:7B:75:20:1E:6E:3D:07:91:CF:32:6B:BE:FA:76:0C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A87B8BF3386B9E37BA1D93560
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf303ef4-ad27-3e52-9478-6ff8b78c163c.roa
Signing time:             Tue 15 Jul 2025 20:27:08 +0000
ROA not before:           Tue 15 Jul 2025 20:27:08 +0000
ROA not after:            Mon 13 Oct 2025 20:27:08 +0000
asID:                     44559
IP address blocks:        166.1.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:87:b8:bf:33:86:b9:e3:7b:a1:d9:35:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 15 20:27:08 2025 GMT
            Not After : Oct 13 20:27:08 2025 GMT
        Subject: CN=9798c83b-685a-40e2-acf7-b81368a845fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9b:6a:d6:8b:c9:ad:5e:e2:5e:17:74:9f:5a:
                    89:dc:e2:0d:f6:b5:fb:51:92:12:64:1f:50:ea:be:
                    a0:2a:94:a5:32:20:ad:62:93:ca:6b:96:0b:55:4b:
                    d0:5d:22:83:7a:13:94:33:9d:e3:1f:e5:9b:34:f9:
                    78:16:c0:b1:26:73:c6:c4:94:08:dd:51:ae:3b:c8:
                    cc:d0:22:46:11:44:c9:56:f8:70:84:5a:c3:4b:d0:
                    d7:7f:56:ad:e5:28:5f:ec:cc:c4:f1:15:65:a8:93:
                    75:b9:bb:7c:06:a4:bd:61:87:71:61:e8:fd:f3:90:
                    22:c5:e9:23:64:a3:66:55:ce:61:06:c4:4b:8d:51:
                    b8:ce:dd:5e:1b:25:5d:e0:bc:3b:c5:95:2b:da:37:
                    a1:35:20:c7:21:54:18:86:d4:c0:ac:0e:1f:e1:d9:
                    f2:6c:c7:f5:0a:02:2d:b3:20:5b:3e:c2:e1:b6:52:
                    da:86:0a:dd:2a:e4:b4:f0:12:6c:ba:d3:45:13:e4:
                    e4:1c:7d:c3:ab:61:b0:ca:c2:91:31:43:a4:91:db:
                    46:03:43:76:07:9f:06:9e:28:ef:b3:8f:eb:0a:db:
                    b7:e2:7c:bb:dd:4e:c3:9e:51:74:9d:f6:83:bd:6f:
                    ca:6e:83:0d:69:f7:32:c9:be:99:a3:d4:b1:34:c7:
                    19:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2C:EE:BC:16:7B:75:20:1E:6E:3D:07:91:CF:32:6B:BE:FA:76:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf303ef4-ad27-3e52-9478-6ff8b78c163c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:8a:57:af:85:f7:28:58:e5:f9:94:98:31:74:f0:2e:a2:de:
         fa:d9:74:4c:8f:df:c3:eb:f7:49:d9:68:07:4f:34:c6:e9:dc:
         66:51:4a:63:84:da:fb:16:55:17:74:4c:e1:92:04:c3:9c:1c:
         d0:93:c4:c5:fa:1d:9e:76:e3:9b:45:b8:9f:ff:f3:a1:e5:a5:
         4c:c3:d7:bd:92:b1:86:64:6c:f6:56:37:21:dd:12:f4:a8:bc:
         9a:d6:77:13:06:99:54:84:5a:3f:88:2f:7b:42:6d:0e:ad:de:
         db:38:74:a7:60:b0:b8:4a:6e:29:8d:1e:6f:15:3d:5e:5c:6a:
         c7:90:ad:e3:bd:ff:17:1e:a8:e1:a7:fa:ae:5b:9c:ea:eb:7a:
         c0:b9:ea:35:59:0f:b2:1c:9e:94:11:6a:59:73:88:83:ec:6e:
         98:4c:be:26:08:2d:e0:e4:d6:d1:3d:5c:a6:50:5d:6a:3f:7b:
         66:8a:7f:80:f9:a1:7d:09:4f:4b:5c:0b:ac:34:a3:fc:3c:9f:
         6e:8e:f0:3f:aa:40:72:00:7e:1b:59:80:d5:76:11:4a:85:d4:
         dc:0f:50:f5:f8:33:89:7f:99:05:ee:dc:0d:7d:59:2f:8e:8c:
         65:71:a4:e9:d6:c4:0c:e6:cf:89:ae:b6:a7:c7:98:2b:a2:ca:
         29:20:44:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqHuL8zhrnje6HZNWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDcxNTIwMjcwOFoXDTI1MTAxMzIwMjcwOFowLzEtMCsGA1UEAxMk
OTc5OGM4M2ItNjg1YS00MGUyLWFjZjctYjgxMzY4YTg0NWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJtq1ovJrV7iXhd0n1qJ3OIN9rX7UZISZB9Q
6r6gKpSlMiCtYpPKa5YLVUvQXSKDehOUM53jH+WbNPl4FsCxJnPGxJQI3VGuO8jM
0CJGEUTJVvhwhFrDS9DXf1at5Shf7MzE8RVlqJN1ubt8BqS9YYdxYej985Aixekj
ZKNmVc5hBsRLjVG4zt1eGyVd4Lw7xZUr2jehNSDHIVQYhtTArA4f4dnybMf1CgIt
syBbPsLhtlLahgrdKuS08BJsutNFE+TkHH3Dq2GwysKRMUOkkdtGA0N2B58Gnijv
s4/rCtu34ny73U7DnlF0nfaDvW/KboMNafcyyb6Zo9SxNMcZ2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK0s7rwWe3UgHm49B5HPMmu++nYMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvY2YzMDNlZjQtYWQyNy0z
ZTUyLTk0NzgtNmZmOGI3OGMxNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACKKV6+F9yhY5fmUmDF08C6i3vrZdEyP38Pr90nZaAdPNMbp3GZRSmOE
2vsWVRd0TOGSBMOcHNCTxMX6HZ5245tFuJ//86HlpUzD172SsYZkbPZWNyHdEvSo
vJrWdxMGmVSEWj+IL3tCbQ6t3ts4dKdgsLhKbimNHm8VPV5caseQreO9/xceqOGn
+q5bnOrresC56jVZD7IcnpQRallziIPsbphMviYILeDk1tE9XKZQXWo/e2aKf4D5
oX0JT0tcC6w0o/w8n26O8D+qQHIAfhtZgNV2EUqF1NwPUPX4M4l/mQXu3A19WS+O
jGVxpOnWxAzmz4mutqfHmCuiyikgREs=
-----END CERTIFICATE-----
Generated at Mon Jul 21 08:35:47 2025 by rpki-client