Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4aad17b8-991a-3330-8668-fb4cb79ab027.roa
File:                     4aad17b8-991a-3330-8668-fb4cb79ab027.roa (raw, json)
Hash identifier:          aDQqO3XD/lNgK8JZzFNXw3TeZgADo/fZvwSnthBRN2o=
Subject key identifier:   28:8D:8F:F3:75:C5:00:28:05:6B:8C:3A:6C:E2:4A:FA:99:7B:68:74
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849B14A36AA0C6F7F6C652F8E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4aad17b8-991a-3330-8668-fb4cb79ab027.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     51847
IP address blocks:        166.0.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:36:aa:0c:6f:7f:6c:65:2f:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=7c3795c1-0c10-4360-be6f-2d4d12750210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:00:6a:4a:92:6e:41:d4:9b:ec:d3:a6:8e:ed:
                    1e:85:68:fa:9b:3e:76:39:fb:d6:48:33:a7:93:58:
                    d8:62:e8:4c:57:c8:02:bf:ef:85:e6:98:f3:c0:ff:
                    40:82:13:59:93:37:9c:ef:ac:37:0c:c7:a0:a3:52:
                    db:1b:0a:dd:d2:8d:1c:65:4f:94:37:ab:19:43:05:
                    c4:84:e1:ab:50:2e:44:71:89:5c:cd:23:8a:cc:18:
                    b5:a2:2d:7b:c0:17:2e:2a:ec:96:c6:cb:c0:2d:ea:
                    b8:6c:33:e6:cb:cd:48:35:af:4e:a5:76:b7:60:a1:
                    ad:9b:26:f1:93:9b:6b:8d:dc:54:8a:07:43:55:2a:
                    53:46:7b:e2:0b:c4:0f:e4:7c:d7:11:5b:47:47:7b:
                    13:2e:0e:9d:1f:04:4c:af:a8:57:19:52:3a:46:dd:
                    8a:e6:cc:f1:be:01:54:12:fd:b8:18:81:f3:ee:c0:
                    50:b1:a4:a6:33:7c:0f:d0:5b:87:fe:49:a4:05:7a:
                    2d:92:15:04:f2:87:d6:e4:fd:17:1d:f3:77:3e:9b:
                    60:78:af:cd:d2:13:4a:b5:9d:57:a1:61:7f:af:ef:
                    f5:a8:f5:3e:76:c4:4c:1e:50:97:a4:2e:2a:2b:d3:
                    98:56:c8:53:91:a7:1b:86:8b:12:da:56:0c:4c:7f:
                    13:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8D:8F:F3:75:C5:00:28:05:6B:8C:3A:6C:E2:4A:FA:99:7B:68:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4aad17b8-991a-3330-8668-fb4cb79ab027.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:95:91:ac:ff:a6:4f:5f:70:16:58:2c:de:1f:2c:73:df:3d:
         bb:db:a7:d7:01:7f:db:38:97:c6:a1:2f:5d:d6:5d:d7:d3:c8:
         d2:e0:2b:94:2b:37:51:82:ed:ac:28:6b:84:02:f6:a8:bf:df:
         f2:d0:a0:b7:37:f5:02:0a:f1:f8:df:24:d8:a0:5d:13:bd:a6:
         4e:71:89:43:f5:d0:70:98:48:80:18:e7:76:f0:1e:1e:13:db:
         fa:31:cd:d4:f9:ea:43:f7:2c:4a:4e:b2:b0:20:aa:2e:fa:2f:
         43:24:8a:37:7c:43:5d:e1:bb:0a:86:c9:70:b0:d6:0f:43:a5:
         01:0b:cf:f6:8c:4c:2c:cd:42:d3:c4:3b:2a:63:a7:a3:e2:55:
         a6:b4:6a:cc:6e:bb:0b:ee:5c:b4:31:f3:81:4b:d0:97:67:d3:
         b0:f3:9b:87:7e:95:0f:6d:34:f3:aa:da:cb:e0:90:6b:c1:28:
         72:ee:89:e7:a0:bb:57:33:eb:69:16:0a:08:b0:dd:b6:6e:6f:
         53:ce:67:d7:08:56:dd:aa:d5:fe:a3:d8:5e:4a:76:46:9a:ce:
         dd:00:c8:60:82:7f:a4:c0:5c:19:9c:3d:11:da:20:1f:ef:50:
         58:ea:1e:9c:ef:bb:cf:0a:03:5e:87:6f:30:9c:f0:57:50:76:
         2f:48:97:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:15:30 2025 by rpki-client