Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/569583b4-5124-3dd9-b1f2-4d1323b1c0d3.roa
File:                     569583b4-5124-3dd9-b1f2-4d1323b1c0d3.roa (raw, json)
Hash identifier:          0ZJgjFvd8Cv/2crP3OE3AvsFXxayc0HkHh9aOrlW6qQ=
Subject key identifier:   D0:7D:73:7E:0E:86:0E:D9:DA:3E:65:CB:79:94:1E:6F:55:0B:3E:29
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849CFFF81B15D6399535A150300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/569583b4-5124-3dd9-b1f2-4d1323b1c0d3.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     62240
IP address blocks:        166.1.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:81:b1:5d:63:99:53:5a:15:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=0268825b-355d-4f83-be0c-29c691bb4b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:85:a7:8a:2a:21:71:35:47:b2:f1:ba:dd:7d:
                    5e:b7:46:96:cd:9f:cd:fb:8d:ad:33:d1:6c:2d:b7:
                    7e:c8:6f:69:e7:30:65:0e:97:67:95:3f:82:cd:43:
                    f6:5f:16:42:dc:87:91:32:3f:c5:c7:8d:22:e1:ba:
                    94:cc:f4:8e:8c:9d:8d:39:ba:5f:98:80:c1:ff:8e:
                    ec:ac:aa:6b:2a:82:38:9f:85:03:91:31:9f:df:2e:
                    11:d7:61:f8:36:43:90:f1:f6:ec:96:a4:66:fc:f4:
                    ca:1e:b8:6c:d2:05:c3:b5:47:7c:cd:24:4a:8c:7e:
                    d2:d1:16:25:48:56:ea:5e:e9:d6:6c:e0:71:e2:c5:
                    bc:46:0c:01:16:da:de:02:28:02:00:9f:f1:1e:62:
                    11:35:79:2e:2d:22:ca:17:e8:15:20:be:1a:93:52:
                    0c:04:3e:f2:d8:bb:99:1e:37:cb:b3:15:d5:c5:b0:
                    44:13:bb:49:21:8e:95:73:09:ba:c8:6d:f6:6f:91:
                    0d:e4:67:49:a8:66:21:bb:73:a8:17:7c:a8:2c:65:
                    62:b3:06:58:77:2d:1f:e3:0e:c3:09:51:c7:72:3b:
                    7a:6d:4f:6f:02:0d:f2:dc:e4:5f:3c:a6:af:bf:95:
                    b4:4b:dc:3e:67:d5:77:1f:0f:47:27:4f:9e:f1:8c:
                    d2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7D:73:7E:0E:86:0E:D9:DA:3E:65:CB:79:94:1E:6F:55:0B:3E:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/569583b4-5124-3dd9-b1f2-4d1323b1c0d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:f2:9a:8c:3d:8b:09:39:50:5a:82:c5:64:5e:2f:21:18:87:
         ce:bd:c1:d2:d4:30:c0:59:5f:98:ae:bf:61:78:f5:3f:e9:10:
         70:f3:90:f7:12:e1:04:7d:ae:c8:12:a0:6f:cb:87:90:f6:d4:
         8e:d4:6d:43:7c:fb:3d:87:fc:5a:a9:8d:c2:46:35:83:95:fb:
         cc:44:3f:8c:3f:42:7d:50:b1:38:2e:b2:69:af:25:28:10:5e:
         2d:a4:18:bd:e7:52:e7:9f:89:e4:d2:41:7c:82:0f:c3:01:e0:
         cf:50:c0:01:a1:9b:34:75:57:fc:84:90:fc:8a:c2:b3:25:10:
         5b:a6:7a:fe:f6:8b:6b:06:ba:eb:ee:0c:90:69:14:7c:5b:8d:
         4e:95:30:28:1f:9b:f6:8f:77:a6:14:bb:37:94:85:7f:91:53:
         28:73:1f:92:8c:03:00:2c:d4:85:3a:6b:66:44:5c:30:f8:c0:
         d6:4d:df:43:63:1e:03:49:3f:58:23:56:a2:7e:d3:4e:f8:b3:
         61:a4:ef:6d:fc:83:f4:2a:8a:78:99:69:db:af:18:3c:d5:e7:
         88:5c:f2:7f:76:34:a8:cb:d9:ae:85:0e:f6:d1:b1:c0:fc:9c:
         30:56:9d:0c:e9:75:5f:87:9e:e8:10:a7:6c:1f:71:d8:64:df:
         d0:06:c4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:53:27 2025 by rpki-client