Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ef6f7ed6-f61c-38c9-b510-f4c647c5b871.roa
File:                     ef6f7ed6-f61c-38c9-b510-f4c647c5b871.roa (raw, json)
Hash identifier:          EanDYTuVGt1oAzqq7+vZFqNSzZHEGwGFmrIbq7rRmTw=
Subject key identifier:   6C:FD:37:61:69:9E:94:13:B5:36:83:D6:37:DE:E5:4A:6C:5A:5A:55
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A9E65603BC9DE15B7537DFB80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ef6f7ed6-f61c-38c9-b510-f4c647c5b871.roa
Signing time:             Wed 23 Jul 2025 23:22:44 +0000
ROA not before:           Wed 23 Jul 2025 23:22:44 +0000
ROA not after:            Tue 21 Oct 2025 23:22:44 +0000
asID:                     7385
IP address blocks:        166.0.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:65:60:3b:c9:de:15:b7:53:7d:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 23 23:22:44 2025 GMT
            Not After : Oct 21 23:22:44 2025 GMT
        Subject: CN=36dd1d60-5dff-4f11-b19a-5a718cc27e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f3:d9:95:fa:1a:4a:7f:95:52:5a:37:9c:06:
                    1a:b6:90:21:18:1c:16:ed:80:00:c8:49:49:14:31:
                    04:07:a7:17:4a:54:28:e9:8c:ff:21:c4:08:5c:14:
                    4b:04:06:db:4a:9d:17:e9:38:d9:07:ed:0e:3c:ff:
                    f8:01:c2:9c:ea:a8:22:1c:2d:b1:3f:a8:f1:a9:dc:
                    dc:64:ed:ca:ba:96:64:bb:76:85:9c:fc:6e:5c:4e:
                    b9:37:e3:f8:88:17:d0:26:7b:92:0f:dc:44:21:80:
                    17:f2:ee:9b:36:db:e5:2b:62:75:d9:66:d9:12:3e:
                    2c:77:b6:64:7c:ac:77:cc:07:1a:5c:8c:14:08:ea:
                    ff:31:0a:a9:ea:2d:02:3b:d1:d1:dc:3d:e7:fe:17:
                    33:86:37:da:e1:3c:ef:02:53:ff:29:4d:cc:0d:52:
                    d3:36:77:e1:72:78:51:2f:27:fd:27:6a:05:6a:73:
                    fe:10:b9:83:40:d4:ac:a7:09:b5:91:5d:25:f0:9c:
                    72:1a:7a:68:94:8f:08:6f:65:2f:44:54:df:d4:28:
                    dc:9d:7a:9d:84:73:65:51:ac:8c:bd:ad:ef:8d:6f:
                    25:f9:df:10:51:f0:c4:2b:1b:45:55:51:08:9f:ba:
                    e6:21:cd:8d:ea:0e:81:a9:05:21:3c:ea:f2:26:1a:
                    44:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FD:37:61:69:9E:94:13:B5:36:83:D6:37:DE:E5:4A:6C:5A:5A:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ef6f7ed6-f61c-38c9-b510-f4c647c5b871.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:38:b1:ba:94:f3:37:a6:88:e7:8e:30:d2:8d:56:ae:8f:fe:
         3c:7b:45:ba:98:6d:f1:eb:36:14:46:e1:89:a2:fb:b2:5d:2b:
         b7:59:97:0d:a7:a7:ee:c7:99:34:d7:6f:33:c2:92:7c:c2:88:
         76:1d:70:17:e6:f8:f8:ab:82:5d:e9:2c:03:5f:a7:94:8e:f1:
         a2:af:4f:5c:25:d6:9e:64:77:fa:3d:b4:79:91:46:06:85:6e:
         b9:79:05:ef:97:77:b7:b1:52:63:54:f1:63:e8:88:78:78:76:
         f5:67:2e:a4:1e:8d:1b:ce:ed:c7:89:41:50:f2:c8:06:2e:6e:
         42:51:7f:70:2d:fd:63:58:46:8f:12:4d:47:30:bf:6c:ca:27:
         28:03:66:89:78:5b:25:fa:25:4a:54:3f:f4:ed:ab:84:6d:aa:
         47:de:34:f8:a8:d1:95:8b:7d:ed:33:b4:8c:f9:81:25:87:a2:
         1f:3a:c1:cf:d0:0c:0c:60:f7:ac:31:82:77:4b:dd:24:bd:83:
         b6:e7:d3:63:11:2f:83:00:37:9d:c9:d1:fd:46:45:95:01:f0:
         d1:ed:42:e2:62:18:79:39:99:17:e0:f0:97:f1:a7:d8:f9:85:
         78:e6:5d:55:98:5a:26:bb:0b:5c:0c:2e:2f:6c:f3:41:aa:25:
         e3:54:31:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 13:08:46 2025 by rpki-client