Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05add10c-9751-3a39-b5c5-d2148e5abb55.roa
File:                     05add10c-9751-3a39-b5c5-d2148e5abb55.roa (raw, json)
Hash identifier:          y4H1Zfnfij3EKEbmDQBrv6fHSb5K9O6oUitG3fYT/r4=
Subject key identifier:   6C:3B:E9:8E:E1:58:D5:45:F8:D1:B1:E7:94:9D:0A:61:0B:07:8B:EC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849ABB4977C196D1BBDBC2B5640
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05add10c-9751-3a39-b5c5-d2148e5abb55.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     401152
IP address blocks:        166.0.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:97:7c:19:6d:1b:bd:bc:2b:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=2543fc30-c51e-40db-9f34-e6a93609d9d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2f:29:97:98:bc:f3:40:4e:01:20:ba:2c:96:
                    c2:8e:14:e4:22:c2:6f:0c:d7:72:54:ba:cb:c6:34:
                    5a:7c:04:e0:8c:f5:17:d6:8d:0d:f4:19:cd:5f:5f:
                    1c:c5:a7:c3:9a:38:90:63:53:e2:ab:4a:09:e3:a8:
                    23:62:cc:8c:30:01:b0:ab:cf:91:d1:03:e7:65:09:
                    5d:b0:6e:f2:d7:9b:d8:26:38:9a:60:1c:d3:77:58:
                    e4:60:84:3d:b0:ad:41:04:0f:49:9f:f7:51:11:f1:
                    94:72:23:10:17:96:c9:a3:44:1e:b3:3d:22:f2:88:
                    25:83:76:a2:42:a9:0a:8a:f2:cb:98:20:21:66:52:
                    6f:38:5f:69:37:68:47:73:5c:64:74:2f:97:4b:85:
                    c8:4b:92:db:0b:a2:5d:03:02:00:8a:72:19:57:44:
                    c4:f1:3c:a0:68:0f:12:d8:54:d9:9b:f2:8b:da:64:
                    2f:d5:bb:11:46:f2:17:2d:15:78:77:bc:a7:10:d0:
                    63:4a:d5:0a:74:4e:ac:0d:96:54:32:3e:27:5a:8d:
                    65:31:49:7d:3c:fc:0e:81:81:2d:d3:6d:af:f1:b9:
                    ea:95:e4:dc:db:1e:3e:0e:2b:65:88:38:eb:bb:3d:
                    f6:71:96:e9:a6:1b:9e:97:89:ab:10:e5:57:f1:8a:
                    20:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:3B:E9:8E:E1:58:D5:45:F8:D1:B1:E7:94:9D:0A:61:0B:07:8B:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05add10c-9751-3a39-b5c5-d2148e5abb55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:51:be:f6:2a:5b:b0:8d:9c:5b:03:0b:4d:f5:4b:c6:1b:26:
         c6:f5:07:29:72:a7:a9:35:3d:ce:0d:40:23:7c:2b:e9:10:52:
         15:26:34:dd:8e:46:24:b4:59:1d:f7:e8:4d:7d:39:e5:0b:66:
         3e:61:36:64:6a:f1:46:65:27:87:8c:f0:c5:e7:af:de:82:0d:
         d1:9b:b3:04:de:e2:9b:e7:a5:8e:c4:81:28:e8:84:52:e9:f2:
         2d:bb:a3:aa:93:6b:ab:61:64:ef:8c:42:82:b3:a4:24:17:39:
         42:3a:55:14:cd:19:7a:14:90:9a:c8:e1:4d:dc:06:88:e9:ca:
         1e:23:52:2d:8f:93:54:ab:40:3e:1a:a1:00:ed:49:cc:86:19:
         c2:2d:ff:e9:e6:73:14:2c:ee:5e:c9:84:9a:47:c2:5b:b2:f9:
         d2:23:1b:28:b4:7b:85:de:4c:7e:61:94:de:e5:fd:5d:ba:91:
         40:f7:bb:d3:12:cb:66:39:82:3c:8e:1b:d0:a0:87:fd:40:f9:
         ef:6a:df:6a:ef:7e:3d:ed:de:6e:21:f4:d3:64:9f:e0:b5:6f:
         ef:09:54:3a:66:7d:c0:5d:8d:9f:9f:78:c7:15:8a:cb:83:43:
         10:09:84:01:0c:5f:79:9e:a4:dc:0a:3c:f6:e7:03:97:be:f5:
         66:e8:28:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:34:57 2025 by rpki-client