Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2cb7bebd-88f7-332b-af83-597c4f59f423.roa
File:                     2cb7bebd-88f7-332b-af83-597c4f59f423.roa (raw, json)
Hash identifier:          5q7PsX3U1gyCk+wXTiuUxCqGYmSeHZt2WIw6PDdf7ow=
Subject key identifier:   60:75:82:BB:DB:84:69:5C:A1:80:12:63:A9:B9:60:EF:EA:EA:68:A1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584835880349262B9DD0B10D7600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2cb7bebd-88f7-332b-af83-597c4f59f423.roa
Signing time:             Sun 15 Dec 2024 00:18:47 +0000
ROA not before:           Sun 15 Dec 2024 00:18:47 +0000
ROA not after:            Fri 14 Mar 2025 23:18:47 +0000
asID:                     15731
IP address blocks:        166.1.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:35:88:03:49:26:2b:9d:d0:b1:0d:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 15 00:18:47 2024 GMT
            Not After : Mar 14 23:18:47 2025 GMT
        Subject: CN=e66c75ab-fd5c-4bdc-89e8-ccf6f5726f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b9:05:76:67:df:61:1c:d4:09:48:d7:bf:b6:
                    9a:b8:37:f6:c7:c7:83:be:65:51:b2:b7:58:e4:65:
                    17:68:5b:14:97:d3:f2:38:ee:bc:0a:69:7c:c6:e4:
                    d9:4c:bc:5f:88:b0:67:4f:df:f3:f6:66:49:60:29:
                    2f:f0:00:2b:0d:8f:95:bd:dd:5c:df:cd:49:4c:82:
                    01:f1:68:d7:0c:b6:6d:7e:ed:c6:14:8c:3d:26:98:
                    80:fa:3d:37:83:29:b9:e0:ff:e8:df:cc:76:b1:b9:
                    04:f1:ae:a5:c8:a6:6c:03:20:d4:00:3a:74:f9:8d:
                    e8:37:df:24:80:48:ae:1c:71:7d:a1:61:80:ef:ff:
                    ad:ed:56:58:a7:1f:d0:bd:33:f0:71:c2:9a:1b:9b:
                    cb:b3:86:29:e7:01:01:25:9a:5b:8f:a4:a6:33:7b:
                    db:e4:e0:38:9b:06:30:ff:6c:a0:25:03:06:f3:9a:
                    5a:35:65:44:46:0c:16:43:38:7a:e4:3d:e7:91:a5:
                    e9:a8:84:a2:e0:a6:90:70:f8:44:76:e7:d4:af:34:
                    6e:05:16:6c:7a:20:89:9d:26:47:37:85:88:f8:2d:
                    fc:fd:fb:14:ee:bb:6a:c2:77:9f:55:06:65:5d:fe:
                    92:0e:7a:77:ee:1b:e2:25:68:02:69:8a:ec:b9:0e:
                    32:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:75:82:BB:DB:84:69:5C:A1:80:12:63:A9:B9:60:EF:EA:EA:68:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2cb7bebd-88f7-332b-af83-597c4f59f423.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:81:36:8e:e6:79:be:50:87:88:c6:b6:c5:43:f5:1f:2e:04:
         73:64:d7:5b:fb:19:d5:76:ef:04:78:2d:10:5b:b8:fe:d6:d1:
         8c:1f:4f:46:48:12:61:8f:cb:3d:9f:b3:af:a3:98:74:3d:86:
         97:99:2a:8a:0e:dd:f8:6d:08:bf:3f:69:12:af:7f:1a:8b:06:
         ac:85:07:97:b7:bb:37:cf:0f:d0:d9:8f:20:3c:e6:2f:58:42:
         0c:54:8a:34:55:29:c1:62:f9:8c:d5:2f:9a:3f:fa:1b:52:36:
         72:4d:ae:ef:f1:08:7b:e1:3b:84:0d:25:1d:4a:ef:09:81:7b:
         67:f3:68:d5:6c:1b:33:fc:81:03:15:9a:e7:c8:df:57:d5:19:
         ec:74:e4:15:3b:f4:ab:2d:a4:d4:7f:4e:15:74:be:af:c3:b4:
         fb:d9:f6:fd:0a:31:9a:13:9f:d3:b0:3d:95:6c:c0:9c:d5:0d:
         9c:73:05:a1:0b:fd:00:d7:5e:b6:bf:dd:8f:96:e6:a9:07:dc:
         20:1b:dd:74:2b:e8:54:35:db:57:79:e6:41:78:4a:54:2e:4a:
         b4:3b:49:7c:d7:ef:00:81:39:2f:ce:08:44:e4:2a:97:ab:a1:
         dc:33:07:ae:98:ce:11:b0:32:5b:d8:75:50:6b:95:d7:2f:27:
         70:7c:48:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:00 2025 by rpki-client