Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/46f6a2f4-325f-33da-b223-08db1a1149c1.roa
File:                     46f6a2f4-325f-33da-b223-08db1a1149c1.roa (raw, json)
Hash identifier:          YQbezkpdT3CrNhQkyFD5Iql/65stl6hkKLpqkPnWND0=
Subject key identifier:   5B:CB:23:A1:6E:0F:E9:51:BC:F3:DE:09:3F:E7:98:0A:F9:D1:15:2D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A8146451CD5E8E4F1617331C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/46f6a2f4-325f-33da-b223-08db1a1149c1.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     211440
IP address blocks:        166.0.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:45:1c:d5:e8:e4:f1:61:73:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=e392b078-606b-4258-bb47-af0e9dd96742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:41:a0:b5:d7:37:66:ef:53:d5:ed:b4:f1:b9:
                    2b:da:33:cc:50:3e:4e:fa:df:36:34:89:a2:73:8c:
                    77:8b:be:77:de:37:06:12:16:40:05:49:2a:05:91:
                    c3:d8:6c:0d:09:21:d1:bc:8c:f6:ae:eb:fb:33:bb:
                    7e:2c:44:ae:12:42:d9:c1:3d:57:45:9a:1a:a4:8f:
                    02:f2:2b:3b:ce:08:d3:5f:81:12:54:3f:a7:65:85:
                    07:57:df:b7:81:80:5b:da:97:bf:a1:ae:2f:8e:38:
                    f6:4b:a5:75:81:dd:44:29:9e:5d:3b:d4:5c:38:5d:
                    93:2c:76:f4:4b:30:fe:c8:2f:d2:c9:64:7b:b1:97:
                    8b:2b:8e:eb:b0:b6:2e:d0:78:99:c1:fd:1f:89:81:
                    d1:37:d0:a8:c6:16:f3:c9:80:a0:c8:d1:64:96:b9:
                    cf:54:7d:05:57:08:db:f1:b9:be:ae:d1:3d:72:39:
                    70:aa:2a:8e:c1:90:ef:a1:4d:4d:bf:f1:25:f5:e3:
                    08:10:79:5f:02:b6:88:2f:54:a5:60:a9:06:9a:2b:
                    13:6f:87:6e:f3:1b:25:1b:e4:70:cd:14:ec:f0:d4:
                    35:40:62:1b:a7:af:5a:ea:e1:fa:2a:b8:9d:4e:d0:
                    40:53:32:d3:e9:ed:e9:4d:b1:e5:8a:70:2e:30:f2:
                    5e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CB:23:A1:6E:0F:E9:51:BC:F3:DE:09:3F:E7:98:0A:F9:D1:15:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/46f6a2f4-325f-33da-b223-08db1a1149c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:26:06:e9:79:86:72:43:11:40:1a:1d:da:ea:62:40:9b:32:
         e6:c5:2f:4b:f5:6d:1d:e7:66:3b:f9:7b:e7:c6:30:ac:5d:47:
         d6:02:11:71:86:c8:5a:c8:51:7c:77:64:ce:c4:8f:68:9d:c8:
         5b:7f:cc:7f:6d:40:cb:6f:60:95:f6:7b:74:d6:9f:4f:cb:f8:
         cf:b3:75:ed:30:98:f9:af:e9:e4:b9:2a:cf:ef:56:f7:84:70:
         8b:ef:9f:1c:0d:64:66:cf:19:c3:22:b3:1a:16:45:d6:68:23:
         9f:0f:0b:dc:ac:5f:2d:07:0f:ff:18:e2:1e:3d:de:72:b7:37:
         3f:e8:f3:50:a6:5e:23:f1:ad:35:46:21:8d:5a:67:8b:fd:11:
         f4:2a:34:81:3f:18:02:5d:c9:c1:c4:b0:b2:73:17:e8:f2:1b:
         a2:04:87:c7:e3:ca:18:4d:6d:dd:5b:2d:15:33:23:1e:da:82:
         68:55:2d:31:3d:5b:34:d4:31:34:5e:21:dc:fd:79:cb:27:7a:
         5a:40:19:38:19:8b:e6:b0:3b:c2:4b:7d:bb:05:32:8c:6f:a9:
         6e:46:1c:7e:62:35:05:6d:39:85:de:88:bf:ff:2b:6e:b1:98:
         e1:f3:d2:db:87:b8:db:88:a7:8c:10:c0:57:f2:e0:8d:15:f6:
         f6:eb:f4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 04:03:27 2025 by rpki-client