Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/63ac8536-6689-3d10-8aff-c28a1370b258.roa
File:                     63ac8536-6689-3d10-8aff-c28a1370b258.roa (raw, json)
Hash identifier:          evB9kzF0bACwsOi6Dt+5NecKC2oATPnj1BkiGTPzsDo=
Subject key identifier:   E8:3B:D4:F1:5E:B3:8E:2A:5D:8A:7F:9D:4D:73:CE:C2:02:2D:6D:36
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849CFFF83DBE9BE9C8D3E9EA680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/63ac8536-6689-3d10-8aff-c28a1370b258.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     62240
IP address blocks:        166.1.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:83:db:e9:be:9c:8d:3e:9e:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=b90571e5-4565-4302-9d5a-31cda47d4411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0d:12:9c:32:4c:f4:06:eb:4f:f5:04:08:05:
                    31:a9:65:49:8d:86:57:9b:60:41:d9:51:b4:40:a9:
                    22:3c:59:6a:4e:69:bc:6a:49:4f:72:01:dd:7d:05:
                    80:c2:6d:fb:37:b1:1a:82:2f:3f:eb:95:00:39:18:
                    7d:86:32:6a:6a:ed:aa:00:ca:ae:b8:61:03:ab:60:
                    a9:cd:4c:44:ae:bc:8c:76:81:f9:c3:81:9a:a9:af:
                    49:9f:1a:38:ad:ad:f6:a1:b7:4a:f3:ba:20:bc:7d:
                    3b:a0:35:6b:ae:7d:6d:5a:e0:44:cb:aa:6c:10:61:
                    5e:e6:20:f0:c3:a4:5a:9e:f6:6b:73:80:6b:e5:5b:
                    e0:60:87:44:90:4f:81:fd:e6:b1:b6:91:a5:39:be:
                    f5:f3:32:24:aa:8a:53:8c:7e:cb:d5:02:7e:44:9c:
                    2e:06:19:80:48:e7:e1:84:3f:d4:19:1d:d0:9e:1e:
                    9c:c1:6f:e7:27:36:b8:7a:a4:72:b3:a5:6b:a3:52:
                    da:1c:9f:36:d9:39:44:fc:4a:d1:94:dd:52:85:5a:
                    16:64:c8:51:22:16:69:8e:6c:a8:3d:fe:0d:a9:43:
                    f1:09:de:f3:a9:ba:37:2c:67:9c:02:74:ab:66:da:
                    a8:be:db:bb:a2:5a:ac:9f:63:04:a9:0d:04:3c:0b:
                    45:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3B:D4:F1:5E:B3:8E:2A:5D:8A:7F:9D:4D:73:CE:C2:02:2D:6D:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/63ac8536-6689-3d10-8aff-c28a1370b258.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:0a:cb:20:b5:2d:cb:1f:9f:33:db:d8:a7:4c:9f:92:5c:b3:
         b9:5f:d2:5c:2a:b7:8d:d2:7d:f3:92:cf:b0:ce:6a:4f:22:18:
         87:99:ae:94:88:af:4f:4d:53:78:ae:63:a8:a9:06:54:45:21:
         45:b4:a7:70:80:64:9a:48:23:db:20:ea:c9:bf:0f:f8:27:2a:
         d8:6f:3e:9d:d0:be:c3:d7:82:66:d1:9f:a6:f3:78:aa:27:c5:
         ef:2e:6f:b7:43:42:dd:0e:5e:a3:4a:37:13:85:50:c8:f7:b2:
         af:41:5a:ed:52:31:64:90:e4:4f:53:e4:72:b0:12:1f:d2:f9:
         cc:2e:7a:96:b0:9a:76:9b:97:a7:03:8b:d8:e8:66:83:e5:18:
         39:13:61:5e:00:60:ea:13:b0:94:65:4f:08:b5:35:37:a2:81:
         ed:97:5b:ed:a6:6b:82:9c:84:48:cd:eb:ff:d0:72:50:35:de:
         8d:89:6e:11:f9:e0:93:4b:4a:fc:05:78:44:15:05:5c:42:6c:
         6c:dc:82:53:ba:5f:c6:3c:61:15:7c:82:26:30:e0:11:53:4a:
         d1:8b:d2:36:ad:44:d7:c9:e4:dd:14:6c:2f:4c:ce:65:cd:41:
         bf:16:1c:e3:64:73:31:6c:58:24:26:54:cb:b4:9a:77:1e:cf:
         19:0c:72:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:31:43 2025 by rpki-client