Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b79fdd2-34dd-3c2b-821c-e27dfa5c7bf5.roa
File:                     4b79fdd2-34dd-3c2b-821c-e27dfa5c7bf5.roa (raw, json)
Hash identifier:          NRgKrZsUbisWTckfsr3PHWgHqAySBpDad6HP1WdzaJA=
Subject key identifier:   31:88:F0:66:33:D3:4E:0B:1A:72:7C:A6:57:5A:36:E4:1D:B8:ED:E5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848116FF8CC463F550139619A40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b79fdd2-34dd-3c2b-821c-e27dfa5c7bf5.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     58061
IP address blocks:        166.1.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:6f:f8:cc:46:3f:55:01:39:61:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=9bae1f4e-8fe7-46d0-8d9e-0063bdc58a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:39:97:ec:42:99:25:34:24:cb:f6:01:50:
                    e8:07:48:1a:69:41:90:80:72:f9:54:ff:71:a4:e2:
                    d9:bb:85:2f:e3:7d:ca:32:52:96:0c:90:c7:11:c4:
                    8d:2a:9f:29:f9:14:c9:29:cf:0b:3b:86:5e:10:54:
                    d0:b4:e1:a3:41:ec:43:7b:ca:a2:08:9f:83:70:15:
                    18:e7:4a:54:fd:42:7f:35:8c:49:b1:71:65:04:76:
                    d9:b6:5b:7d:ca:6a:f7:0c:98:09:cb:fc:ee:ff:64:
                    0a:a9:26:bd:4d:8f:8e:39:29:50:4f:e4:da:11:f9:
                    55:1e:4b:ea:63:2f:2d:28:61:db:4c:10:8f:a7:3a:
                    5c:9b:28:cd:c7:72:74:e3:c9:26:28:a3:53:cd:4e:
                    5e:14:74:86:71:ad:e3:06:93:4d:da:bb:6d:db:7c:
                    06:85:76:c2:00:35:e6:98:75:aa:54:02:7c:60:30:
                    40:6b:e9:0a:58:81:ff:d3:35:f9:66:59:24:11:2c:
                    c0:40:8f:9b:87:d9:9f:b4:07:6d:8d:4a:02:ca:e0:
                    9f:56:08:c2:31:d5:a1:59:1c:62:43:68:63:69:0c:
                    81:3f:e9:f9:bc:16:05:7b:0e:b6:08:30:ac:a7:4a:
                    0a:06:e2:a1:52:8c:4a:ed:63:72:c8:7d:34:f6:4e:
                    d4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:88:F0:66:33:D3:4E:0B:1A:72:7C:A6:57:5A:36:E4:1D:B8:ED:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b79fdd2-34dd-3c2b-821c-e27dfa5c7bf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:1f:7c:55:9b:1f:d6:f6:13:61:63:68:b4:2d:d2:da:d9:f8:
         12:e5:d5:90:0d:f2:cd:c9:51:fd:f2:b4:54:70:b4:21:f0:87:
         86:d6:c2:27:c4:2d:8a:a3:81:34:8f:9a:35:17:10:3b:09:a7:
         88:9b:d2:fb:e5:ea:4d:80:3c:ed:31:e7:b3:ca:88:39:54:1d:
         4c:b9:3d:53:a2:94:42:67:c5:92:9d:06:45:09:cf:db:fc:3e:
         c8:5b:ca:08:c6:c9:45:45:5b:77:e5:cd:01:e7:95:f6:02:00:
         af:05:65:3a:3a:e5:02:33:c3:f9:8e:6f:34:06:04:8b:c8:95:
         ee:2c:2d:ae:56:64:86:f2:09:08:55:8c:cd:b0:7c:f9:1b:41:
         96:7d:11:c9:62:59:df:81:2a:22:d3:5a:6f:52:40:77:4b:d2:
         20:bc:eb:b1:f7:e7:0b:39:28:a3:01:2a:cb:cc:ae:11:58:4f:
         bc:79:75:91:87:49:4c:0f:e0:40:a3:c8:58:7f:02:fc:95:b7:
         bd:e7:f9:6f:21:29:3f:8b:5c:b6:66:51:e8:a2:87:6b:78:12:
         d1:91:f4:ca:8d:95:6e:6e:d6:78:96:ef:a8:c7:ba:0d:27:4a:
         ee:d6:72:6d:8c:06:4e:7e:75:38:0c:fc:c2:90:29:67:35:72:
         c8:18:5c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 17:53:41 2025 by rpki-client