Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7e0aab37-12ba-3ded-a6cb-087dde572bc4.roa
File:                     7e0aab37-12ba-3ded-a6cb-087dde572bc4.roa (raw, json)
Hash identifier:          RA6Z164iDMvyjb9NtFDC0i7pz1XO2yUwxtlvpgfJaqk=
Subject key identifier:   A9:D5:18:11:2A:68:42:42:E9:1D:62:DC:DF:E4:61:D9:10:9B:C8:A6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849D85F90C3A25E7886B9F5C9C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7e0aab37-12ba-3ded-a6cb-087dde572bc4.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     26383
IP address blocks:        166.1.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:90:c3:a2:5e:78:86:b9:f5:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=b4963c74-c03d-4b38-9492-4ffc24527b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4c:90:f7:ab:11:6e:70:76:58:cc:d1:8f:69:
                    42:42:bc:01:7b:3c:87:3d:01:23:16:cc:2d:61:3d:
                    db:55:f4:70:da:ed:20:3f:cd:61:10:74:70:c5:f2:
                    c4:5e:d3:7e:fa:35:c0:35:4d:ad:e6:11:e1:d6:34:
                    54:98:96:19:d5:57:25:44:0e:b4:ac:8b:38:53:b1:
                    09:fb:db:63:ee:ad:90:da:51:e2:9f:9c:fb:ab:8d:
                    98:95:88:f1:61:05:bd:df:69:33:e3:fa:ee:63:b2:
                    a7:82:b0:39:a1:81:43:b7:64:0f:d2:03:a1:c5:28:
                    3e:49:93:ca:57:22:b8:f1:40:74:a5:4e:72:dd:6d:
                    46:fa:b9:28:34:9b:f1:55:e2:18:64:2d:97:7b:e6:
                    28:3a:7d:8e:4c:be:5a:37:a8:59:01:a9:b5:36:12:
                    b6:da:50:8a:45:8f:5a:af:41:a0:c6:66:d2:7a:a4:
                    9c:98:5f:0c:c1:b0:02:2b:ad:34:1a:b0:70:97:b8:
                    42:49:c2:f5:01:28:71:d6:b6:61:b8:53:67:7f:f4:
                    2e:45:f1:94:45:01:39:3f:70:b7:0a:6b:f4:c4:68:
                    7f:25:25:56:c0:fb:5c:c1:c2:29:b5:59:8c:42:b7:
                    2f:c0:b8:bd:01:39:33:7b:ea:65:23:76:54:35:ed:
                    cb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D5:18:11:2A:68:42:42:E9:1D:62:DC:DF:E4:61:D9:10:9B:C8:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7e0aab37-12ba-3ded-a6cb-087dde572bc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:d4:98:fa:55:c6:74:bc:d6:49:fd:43:ad:aa:2e:ed:27:cf:
         88:39:48:ea:9a:01:ec:e4:91:5e:bc:15:1d:b1:7e:e2:2f:13:
         ef:f4:0b:e1:40:2c:4b:b2:43:91:6e:1a:ec:61:42:1b:13:f7:
         9a:6d:77:59:c4:c4:f7:9a:26:27:8b:94:86:89:0f:9d:f8:53:
         0f:7b:2e:cc:24:27:70:8e:0e:ca:df:85:32:2f:30:ef:30:f4:
         53:47:8e:61:b0:ab:9e:63:f1:3c:42:07:e0:33:26:6b:bd:fe:
         77:5b:1e:16:c0:3e:f3:b4:aa:0d:cb:f1:05:ee:e2:3f:27:67:
         f7:c9:df:27:f2:83:22:ae:b1:ca:8c:e2:c8:d8:2b:6a:4e:bd:
         a2:47:a0:11:f8:ee:50:e8:8c:aa:0d:08:cc:71:13:26:c6:3e:
         f3:65:92:6f:23:ae:9e:20:c4:0f:20:39:82:c4:2b:92:cf:c2:
         8e:04:f3:13:c3:e6:e0:73:fb:d8:07:be:ab:13:aa:99:79:d3:
         04:7e:fd:55:89:83:7b:e2:e2:1b:8d:8a:c0:69:73:57:65:e8:
         f8:ef:b4:5d:45:2c:9f:35:f1:1c:1c:69:f0:70:24:ad:0d:80:
         75:c7:84:66:c4:d1:62:41:a9:2c:22:93:d8:5c:48:1c:be:a3:
         39:9a:db:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 18:39:38 2025 by rpki-client