Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6d1114f9-09c0-3e09-bce4-86238610632a.roa
File:                     6d1114f9-09c0-3e09-bce4-86238610632a.roa (raw, json)
Hash identifier:          kqFYS0WQs4RcQSFOGHoYdHdYzaerC6zTt03zmj/vUG4=
Subject key identifier:   A4:AF:5A:06:D7:19:E0:7C:CE:EA:61:59:B7:A4:B6:24:5C:61:5E:5D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858483D5205B6B0FB7F36A0E44500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6d1114f9-09c0-3e09-bce4-86238610632a.roa
Signing time:             Tue 17 Dec 2024 19:16:28 +0000
ROA not before:           Tue 17 Dec 2024 19:16:28 +0000
ROA not after:            Mon 17 Mar 2025 18:16:28 +0000
asID:                     7979
IP address blocks:        166.0.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3d:52:05:b6:b0:fb:7f:36:a0:e4:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 17 19:16:28 2024 GMT
            Not After : Mar 17 18:16:28 2025 GMT
        Subject: CN=06e1e8f9-b2b4-4202-b099-173a44a1e452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0a:7d:3c:a6:7b:c5:41:9b:72:eb:50:4c:20:
                    26:e0:13:c5:c6:ba:f3:4a:da:4a:d3:fd:fb:97:37:
                    1c:bd:a9:d2:36:ad:b8:de:ff:c9:ab:70:f2:4f:28:
                    28:ae:28:44:09:39:32:4e:f7:e9:0d:31:3c:7f:ee:
                    3e:d4:40:06:67:49:49:6a:16:24:b6:af:cd:c3:ed:
                    a2:55:36:6e:76:66:ec:b3:26:76:2e:19:aa:a1:82:
                    e9:6b:1f:df:d8:9b:57:72:05:a5:27:1a:10:f2:36:
                    a9:df:f1:10:e7:8d:3e:07:8f:cd:89:e4:6b:97:95:
                    81:bc:52:bd:34:7a:28:81:91:67:81:9e:9b:3f:08:
                    43:f6:da:aa:28:b2:97:d9:28:38:6c:52:60:cc:f4:
                    1f:39:8b:6b:96:80:73:bf:bf:e4:94:f3:54:1a:64:
                    98:49:13:a2:45:74:9a:24:e8:b8:37:7f:89:a3:91:
                    42:99:8e:e0:a5:37:e5:df:48:9b:85:36:d3:68:68:
                    7c:2e:3c:6f:e6:ec:e3:06:ad:de:c2:85:7a:7d:4c:
                    48:ba:35:b6:b7:30:fb:81:d1:68:53:60:65:d0:3a:
                    ad:7d:6f:8c:95:5e:94:9b:7c:d9:02:76:4e:52:bb:
                    7f:21:c5:22:a5:80:0e:d9:b1:53:11:f3:86:f8:a5:
                    3f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AF:5A:06:D7:19:E0:7C:CE:EA:61:59:B7:A4:B6:24:5C:61:5E:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6d1114f9-09c0-3e09-bce4-86238610632a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:9d:3e:60:e9:65:f6:3a:3e:3d:38:24:7f:bc:79:7f:9b:c0:
         6f:2b:71:a7:33:2c:30:11:de:be:89:13:33:e1:0b:87:cd:57:
         97:ff:4e:c0:9e:44:28:f4:c1:a4:d6:25:ed:a6:fa:da:ab:a7:
         30:bf:34:92:5b:68:ab:48:42:2a:8d:e9:08:70:9d:09:88:2b:
         5f:a7:c0:e5:b1:85:6d:bf:50:7f:8c:2f:ef:5f:69:b0:93:3b:
         ff:59:9b:34:c0:4d:7e:35:5e:62:6a:0b:9e:3a:62:a9:90:f4:
         14:b8:b6:f8:f3:23:3c:8f:6f:e1:20:19:ab:d8:dd:0a:3a:ef:
         25:82:cf:b6:c6:cf:47:7d:c2:ad:ca:c9:93:24:e0:71:57:38:
         c9:e7:04:88:e5:0c:93:8e:e8:5f:4a:12:2d:01:b7:67:14:4d:
         18:34:95:7b:57:46:bf:58:50:98:45:d0:83:ac:57:3b:ed:8f:
         10:47:d1:54:a1:d3:43:c6:ba:aa:ba:b8:3a:9a:a5:2a:91:f0:
         57:ef:b9:81:5a:84:7a:c0:29:52:04:53:dc:5d:58:77:14:8f:
         eb:8d:cf:41:62:c9:4c:c6:ad:e8:bf:ac:7a:6d:08:24:40:bf:
         e2:58:b7:6b:49:1e:74:85:a0:ba:a8:62:54:1d:9d:b1:0a:50:
         64:bb:7b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:29 2025 by rpki-client