Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/764a6e9a-be88-367c-96ad-34dac58cb3d1.roa
File:                     764a6e9a-be88-367c-96ad-34dac58cb3d1.roa (raw, json)
Hash identifier:          Yvnrh+Ry1+fz/FwzbplB5N4U30Jp4htdYsx4B5PUmMQ=
Subject key identifier:   08:06:42:98:8D:50:ED:1D:AB:CE:DC:65:D4:3F:B9:A5:C6:29:2E:7C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849CFFF824F1BC4E06898329780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/764a6e9a-be88-367c-96ad-34dac58cb3d1.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     62240
IP address blocks:        166.1.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:82:4f:1b:c4:e0:68:98:32:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=f7fdd73f-0955-4d44-9d4a-26d852baa247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:00:9c:d6:d6:79:13:a7:9c:cc:a6:7f:f7:d9:
                    d5:3e:4d:b8:11:e0:8b:58:83:6c:65:ca:81:09:ca:
                    b3:6b:5e:de:37:1a:1f:04:d0:bd:57:bb:31:67:e4:
                    ee:c4:92:dd:56:d6:76:1a:ab:e3:05:71:2e:8f:61:
                    a9:99:10:d3:d3:72:6b:b8:c1:48:28:dc:c0:6c:11:
                    91:76:e4:1b:cb:07:85:49:0b:46:eb:4a:2c:ae:f5:
                    50:b2:8f:cf:31:51:52:46:7c:ed:84:c7:2b:ad:6c:
                    ab:ef:c6:02:23:71:91:d3:1d:ce:3f:f3:cc:95:6e:
                    ac:52:85:bd:3c:1c:0d:96:f6:59:d7:03:70:ea:59:
                    00:75:26:c8:a3:8b:4b:eb:d5:da:37:ea:64:e7:0e:
                    03:a9:fa:0d:9a:24:d7:10:2d:d8:b7:c2:ed:fe:88:
                    92:af:7a:b4:4f:79:8c:38:f7:fb:13:b3:7b:31:38:
                    39:36:bf:b5:c5:88:91:3d:da:37:6d:65:17:57:fb:
                    9d:16:84:95:3e:6c:59:e0:b2:a0:06:f0:be:c8:c7:
                    fb:86:11:fd:90:b4:f1:3a:72:4d:18:46:21:41:e4:
                    67:80:ff:49:43:2e:76:b3:ed:d4:b2:34:57:05:35:
                    f4:46:87:81:5d:05:96:4d:61:ab:1c:8b:db:86:17:
                    b0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:06:42:98:8D:50:ED:1D:AB:CE:DC:65:D4:3F:B9:A5:C6:29:2E:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/764a6e9a-be88-367c-96ad-34dac58cb3d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:56:39:08:b4:7b:cf:0f:c9:b7:c1:94:29:c8:f2:30:08:35:
         dd:c8:af:cc:d7:62:ef:73:fe:da:b5:9e:55:41:37:41:2d:98:
         5f:ea:57:55:ff:23:77:e4:da:6f:03:50:37:fb:4b:e2:13:fb:
         95:a9:9f:0a:f0:2e:09:57:46:2e:56:52:6d:ae:14:c6:33:77:
         a1:2f:6f:35:ce:0c:29:1c:8d:3a:0c:c9:73:1a:0a:71:3d:54:
         a3:df:aa:03:90:60:52:44:01:f9:1b:32:de:f6:f3:f1:3b:c0:
         08:77:9c:15:7c:0c:82:e2:cd:38:4e:64:77:42:a1:b0:77:dc:
         0e:bc:13:e0:b5:30:18:a3:ed:c7:c6:e0:27:d5:04:e8:ce:f9:
         b9:7d:e2:fa:ff:2a:32:8e:b8:e3:40:3b:ba:1f:e5:5c:cf:48:
         20:57:44:64:43:c4:65:3d:82:56:ea:57:a2:3f:fd:f8:fe:f5:
         dd:e9:11:bc:e5:d9:1f:9a:2b:05:d2:a0:ee:53:b6:ea:be:a0:
         aa:6b:0c:2d:7d:3c:79:1c:da:31:e8:fb:95:83:ab:7c:c6:95:
         54:45:9c:e2:2a:20:77:e3:f1:17:fd:3e:e6:ba:8c:7e:a4:d8:
         11:c8:29:e6:fe:4e:51:bc:de:34:e5:20:49:0b:e2:65:e9:e0:
         6b:79:17:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:25:24 2025 by rpki-client