Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55d4a070-057f-3ce4-aa26-33d908b4be57.roa
File:                     55d4a070-057f-3ce4-aa26-33d908b4be57.roa (raw, json)
Hash identifier:          NmdiRUpK3t1oTV+TKl7iTJ5CP9grBc2Lf94b9QSDfv0=
Subject key identifier:   4C:AB:1E:BF:40:63:00:96:34:5F:50:22:D5:AF:6B:98:5F:DC:03:79
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848F00C773B1673069A51758500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55d4a070-057f-3ce4-aa26-33d908b4be57.roa
Signing time:             Wed 19 Feb 2025 19:46:00 +0000
ROA not before:           Wed 19 Feb 2025 19:46:00 +0000
ROA not after:            Tue 20 May 2025 18:46:00 +0000
asID:                     62240
IP address blocks:        166.1.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f0:0c:77:3b:16:73:06:9a:51:75:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 19 19:46:00 2025 GMT
            Not After : May 20 18:46:00 2025 GMT
        Subject: CN=7af4bdd7-eb22-45f9-9551-3747b45dc091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c1:a9:9b:6a:79:6c:00:84:0b:32:ff:89:b0:
                    25:99:45:53:50:71:93:21:14:8f:aa:00:16:16:09:
                    a3:05:3b:cf:01:e0:7a:b8:92:42:b2:c1:e3:ac:e5:
                    06:e1:c8:13:82:8c:33:6b:82:a2:92:03:66:e3:c4:
                    51:cb:2b:91:4c:ec:93:23:e9:5f:cf:22:e1:0d:35:
                    07:12:f9:8a:e2:30:25:6e:69:41:a7:da:31:54:f2:
                    10:34:61:36:3e:40:fd:75:86:3c:5e:5a:76:49:33:
                    84:70:e7:d9:3c:f8:ec:96:1a:41:7f:ea:a5:31:d8:
                    4b:3d:91:7c:50:0c:d1:88:57:d4:84:09:a9:4c:3c:
                    a8:43:ed:c8:4d:e2:c7:37:d9:26:5f:54:9d:46:cd:
                    be:f6:36:8b:32:a1:14:a1:d6:cc:f5:ec:c4:dd:0d:
                    34:7a:45:62:82:6e:68:a1:99:05:82:88:e8:cb:94:
                    15:60:3b:1f:f8:ff:75:16:69:e6:85:ee:2d:50:ca:
                    c8:30:26:68:39:3f:3b:5a:06:46:b5:88:92:18:d2:
                    31:cd:85:12:f7:e8:d9:62:c2:21:54:a6:bb:3d:bf:
                    f0:ae:32:1a:20:bb:e1:0e:31:82:94:44:10:a9:ab:
                    e8:77:75:19:d3:4a:11:32:27:2a:21:ac:c7:23:13:
                    ff:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:AB:1E:BF:40:63:00:96:34:5F:50:22:D5:AF:6B:98:5F:DC:03:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55d4a070-057f-3ce4-aa26-33d908b4be57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:3d:b4:b1:65:1e:25:54:f1:79:ff:84:11:51:f1:1b:3c:6f:
         a5:3e:66:d2:6c:3c:6a:64:2c:25:24:8e:45:e0:f9:cb:e9:60:
         ff:d9:d4:bf:f9:4e:b6:de:72:e4:da:aa:73:0d:90:d8:a0:48:
         db:59:50:09:a0:f8:0f:fd:46:a5:4d:d2:8b:f0:f1:d7:87:2f:
         38:71:28:70:c1:6b:5b:b8:05:e6:9b:35:7e:99:13:0f:8e:27:
         fe:b9:2b:8b:b1:30:41:05:6b:6e:18:20:5f:3b:58:f3:d9:de:
         40:25:44:33:ab:80:46:0f:a1:fc:ef:fa:cb:ee:58:c8:a8:69:
         67:be:e4:48:4b:e5:e5:8f:43:d3:7d:f7:fb:0a:d0:99:c0:ab:
         84:32:8d:02:2f:72:e0:4c:d3:10:84:e7:40:5e:9d:03:ba:f9:
         d5:43:cc:af:95:20:74:12:bb:5a:23:da:30:4f:68:76:ad:63:
         59:ad:ba:ce:e2:d7:51:2c:a0:07:e9:f7:1d:67:a5:da:27:ba:
         57:91:3c:3c:15:74:1b:36:a9:5f:1d:42:b5:58:34:9d:63:61:
         14:71:1f:8a:50:28:01:d1:fe:67:52:a6:50:43:f6:85:2d:f2:
         ca:a3:09:c3:19:d6:7a:54:9e:97:a2:c0:6e:30:08:d4:43:92:
         26:00:ad:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:21:06 2025 by rpki-client