Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21e6778b-5823-360c-86be-9a87913016a0.roa
File:                     21e6778b-5823-360c-86be-9a87913016a0.roa (raw, json)
Hash identifier:          HfZUyDqf7FPxlBU5Ap3nlyrwT7MVr0JK4KIQ20kgDn4=
Subject key identifier:   FB:AC:25:A0:D0:41:C8:56:08:EB:F4:7D:76:A3:0E:A9:FE:A2:04:86
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848BBBB8017E392793B4C4D4600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21e6778b-5823-360c-86be-9a87913016a0.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     19318
IP address blocks:        166.0.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:80:17:e3:92:79:3b:4c:4d:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=eabae434-019f-4c33-b53c-54b65d5196e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:13:b6:ca:1d:e5:74:02:5e:23:e8:f3:04:fc:
                    46:42:83:ee:d5:da:08:28:f2:71:e1:2a:30:31:e8:
                    f4:8b:3e:da:02:3b:15:6e:87:d6:e5:7c:19:40:6c:
                    66:53:a1:c9:8d:17:ea:36:35:17:16:59:cf:10:dc:
                    fe:2b:d0:aa:03:41:18:30:27:ab:33:9d:80:c7:39:
                    af:4e:19:a8:81:f5:53:9c:c4:b7:37:ea:30:ac:b2:
                    59:62:67:3b:9f:ae:93:24:76:6e:0b:59:c4:68:00:
                    c7:b3:1c:d0:87:fa:e8:57:b0:2f:5d:eb:f5:ca:d4:
                    c2:c5:2d:d8:eb:85:e1:cb:db:1b:f6:e7:6e:92:b6:
                    e1:bc:ba:41:96:4d:6c:6b:94:8d:93:95:fd:1e:bb:
                    2c:be:13:f6:ab:b0:aa:83:87:29:c0:fc:2a:7b:69:
                    e7:2d:f6:20:a0:48:51:d8:d9:a2:a0:6b:a4:1f:00:
                    9d:b2:f2:0a:18:cf:7a:45:a1:35:94:f2:48:b1:54:
                    4a:b6:59:a7:93:d8:53:11:8a:2c:8a:a3:4d:b2:6c:
                    4d:05:c7:cd:25:0f:a0:b8:67:b0:39:b5:b6:6f:e5:
                    16:2c:e5:4b:ab:ca:38:bb:66:e0:3a:86:08:6b:33:
                    d9:2f:f1:f3:d6:3a:7c:bd:d0:11:4f:3f:93:12:50:
                    3b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AC:25:A0:D0:41:C8:56:08:EB:F4:7D:76:A3:0E:A9:FE:A2:04:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21e6778b-5823-360c-86be-9a87913016a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:8a:a0:b7:57:78:e2:2d:54:a2:f9:7d:64:45:57:43:30:15:
         e1:29:0f:17:02:60:e7:8b:e5:e1:c4:b2:dd:61:e0:f5:28:10:
         6a:37:d4:94:6f:17:e4:63:6a:d8:f6:8d:72:ee:f2:fc:eb:92:
         84:09:72:29:0f:27:14:c9:6f:6e:da:bd:e7:3c:a5:48:aa:d4:
         1c:d4:09:43:69:3d:79:28:96:a8:11:bc:24:c7:de:d3:ea:ed:
         66:6f:dc:af:b5:83:38:bd:c0:5d:77:43:27:2f:bd:ce:51:0b:
         c6:13:91:87:18:62:11:f3:fe:0a:ac:81:a2:64:21:1b:25:db:
         d9:47:9a:ef:35:15:1d:f6:eb:86:1e:07:70:18:0d:ec:51:e3:
         55:14:18:02:e5:87:b1:7c:0f:58:b1:c1:5a:e1:b0:77:2b:27:
         e1:eb:49:ef:58:20:d0:07:16:d6:79:f4:f0:4b:62:95:54:2d:
         a8:6c:b1:af:40:f2:4b:ca:65:4f:3e:3c:ed:94:ad:e0:f2:67:
         8d:01:ef:9d:96:70:e3:97:15:76:b0:15:ae:06:fa:7b:9c:e9:
         a6:fa:d0:28:59:90:f5:dd:72:48:b9:bf:ab:83:21:f6:76:7b:
         ca:a7:9a:62:6f:70:27:70:14:4a:22:70:9c:e7:7f:8d:98:19:
         59:31:08:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4AX45J5O0xNRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk
ZWFiYWU0MzQtMDE5Zi00YzMzLWI1M2MtNTRiNjVkNTE5NmUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxO2yh3ldAJeI+jzBPxGQoPu1doIKPJx4Sow
Mej0iz7aAjsVbofW5XwZQGxmU6HJjRfqNjUXFlnPENz+K9CqA0EYMCerM52Axzmv
ThmogfVTnMS3N+owrLJZYmc7n66TJHZuC1nEaADHsxzQh/roV7AvXev1ytTCxS3Y
64Xhy9sb9udukrbhvLpBlk1sa5SNk5X9HrssvhP2q7Cqg4cpwPwqe2nnLfYgoEhR
2NmioGukHwCdsvIKGM96RaE1lPJIsVRKtlmnk9hTEYosiqNNsmxNBcfNJQ+guGew
ObW2b+UWLOVLq8o4u2bgOoYIazPZL/Hz1jp8vdARTz+TElA7mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPusJaDQQchWCOv0fXajDqn+ogSGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjFlNjc3OGItNTgyMy0z
NjBjLTg2YmUtOWE4NzkxMzAxNmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEmKoLdXeOItVKL5fWRFV0MwFeEpDxcCYOeL5eHEst1h4PUoEGo31JRv
F+Rjatj2jXLu8vzrkoQJcikPJxTJb27avec8pUiq1BzUCUNpPXkolqgRvCTH3tPq
7WZv3K+1gzi9wF13Qycvvc5RC8YTkYcYYhHz/gqsgaJkIRsl29lHmu81FR3264Ye
B3AYDexR41UUGALlh7F8D1ixwVrhsHcrJ+HrSe9YINAHFtZ59PBLYpVULahssa9A
8kvKZU8+PO2UreDyZ40B752WcOOXFXawFa4G+nuc6ab60ChZkPXdcki5v6uDIfZ2
e8qnmmJvcCdwFEoicJznf42YGVkxCBY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:19 2025 by rpki-client