Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7bb78988-d99a-3017-bae2-b408196ca687.roa
File:                     7bb78988-d99a-3017-bae2-b408196ca687.roa (raw, json)
Hash identifier:          zKn0/j9P437K+ljkIyj6HY+drQKF6PlbEmyY0u/38n4=
Subject key identifier:   83:F2:AF:F8:37:6B:FE:FF:B6:5C:C0:67:2C:81:3E:39:06:6D:39:F1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848D211390B74B341A1185A46B8
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7bb78988-d99a-3017-bae2-b408196ca687.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     22773
IP address blocks:        166.1.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:39:0b:74:b3:41:a1:18:5a:46:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=948e8b71-3e3c-419c-aae5-3d0584e924c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:62:c5:75:c4:f3:87:73:73:c0:1e:90:72:82:
                    a2:59:88:4f:7b:03:26:61:f7:ad:1c:2f:68:33:f4:
                    a2:cb:45:0d:b3:29:23:21:72:7d:ac:ec:9f:d9:81:
                    c5:28:ce:99:25:2f:56:13:15:ef:66:50:2c:de:4e:
                    9a:91:98:52:60:4e:cc:42:9d:95:d4:94:b6:0c:f0:
                    6a:80:4b:75:2d:c0:4f:ef:cd:9d:47:b9:81:3e:3e:
                    87:4e:1b:83:50:16:b1:a3:d4:57:71:94:50:26:ff:
                    05:c9:53:0c:f3:2d:83:92:d7:6b:34:fd:08:af:1f:
                    d3:c7:37:56:6b:9b:a3:ff:c5:11:5f:e3:0b:4e:94:
                    e9:87:b3:83:8a:0f:5c:ff:37:e2:26:59:ab:1e:79:
                    f3:03:05:e8:0a:2e:ff:c7:04:60:16:63:34:a6:0f:
                    2c:dd:c6:55:13:4d:fc:3d:76:0a:85:58:d1:59:10:
                    51:c0:a7:54:a8:8c:4a:7b:e0:8a:93:c9:f9:77:2b:
                    45:72:c7:db:88:9e:72:92:85:6a:8c:6e:4d:61:ab:
                    b7:d4:bf:67:85:a7:41:aa:e9:2b:bc:fa:93:22:97:
                    86:1d:d5:78:d7:9c:96:3a:6b:3a:eb:be:c4:9b:5b:
                    3f:ed:38:34:d8:a1:7e:51:0f:30:68:ae:59:19:9f:
                    54:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F2:AF:F8:37:6B:FE:FF:B6:5C:C0:67:2C:81:3E:39:06:6D:39:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7bb78988-d99a-3017-bae2-b408196ca687.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:7f:8f:49:d9:6f:3f:6a:39:62:18:db:d9:ba:9d:bb:29:47:
         f8:d1:bb:5c:df:87:0b:b6:71:5f:e5:ef:1b:52:57:7f:76:80:
         7f:0a:03:cb:d8:ba:52:1f:35:8c:e7:2b:bc:fd:e1:ec:d3:78:
         1f:62:42:4a:fe:f3:96:3b:a6:87:f9:f0:43:4f:83:80:78:4e:
         26:37:b5:5b:00:66:ab:e2:6b:60:ee:11:a0:10:41:51:aa:53:
         db:a5:e6:bd:2a:af:26:0a:ee:ab:90:c6:6a:08:64:0f:a4:04:
         fd:9e:f3:98:8d:a3:4a:59:a0:c5:e3:f9:1b:03:fa:2a:06:52:
         ae:11:4c:37:43:68:05:7d:c5:41:ed:6c:83:2a:65:13:79:03:
         fe:39:36:3d:49:35:00:9e:2e:bf:96:e0:f2:b2:70:e0:a1:ba:
         26:00:72:98:ed:b9:39:7a:c0:8e:fd:e7:49:a7:a4:72:29:b5:
         63:98:94:33:9c:17:75:4c:8b:bb:26:78:4e:1a:e5:f8:60:e5:
         ed:d2:79:de:09:ca:9e:9f:80:60:2f:93:b5:2a:f4:f0:77:07:
         77:41:dc:ee:b0:3d:73:b1:9d:f5:b6:31:68:8e:63:82:c1:bc:
         a9:e1:f8:59:d5:d9:60:6f:ca:ae:72:3e:ae:be:04:28:2c:db:
         2b:ab:9e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:06:48 2025 by rpki-client