Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7fbeab76-fe97-35d9-8c5c-296da75b54f4.roa
File:                     7fbeab76-fe97-35d9-8c5c-296da75b54f4.roa (raw, json)
Hash identifier:          ov8cfY9LNdnJoXAlcRLADDB8/xItZm6DTTryKt+Vq0g=
Subject key identifier:   94:50:CF:60:C3:06:A1:3C:3A:E7:D7:DE:DA:42:F2:1C:80:C4:6B:F5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849F3A5542BCCCA09EF55498300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7fbeab76-fe97-35d9-8c5c-296da75b54f4.roa
Signing time:             Fri 23 May 2025 19:28:22 +0000
ROA not before:           Fri 23 May 2025 19:28:22 +0000
ROA not after:            Thu 21 Aug 2025 19:28:22 +0000
asID:                     7385
IP address blocks:        166.0.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f3:a5:54:2b:cc:ca:09:ef:55:49:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 23 19:28:22 2025 GMT
            Not After : Aug 21 19:28:22 2025 GMT
        Subject: CN=2c643165-bd76-496e-8b0d-211ea009438d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2e:69:8f:db:14:af:59:6d:20:36:a4:82:18:
                    01:38:f4:39:ef:20:1c:68:1e:91:6e:c6:74:68:16:
                    44:34:92:d8:ab:47:45:b2:f9:91:c2:f7:f1:22:94:
                    bc:37:3f:38:01:17:0c:c5:e4:fc:c3:1c:3b:f6:84:
                    eb:6f:53:bc:23:7b:55:3a:01:99:30:41:c5:ed:5c:
                    47:eb:45:be:cf:d8:cd:38:44:04:77:03:63:42:f8:
                    16:73:0b:42:21:c8:f5:b7:b7:6b:55:2d:37:3e:46:
                    74:d5:20:37:66:0c:20:1b:72:52:ed:17:37:6d:6d:
                    4b:8c:3d:4d:31:a2:15:d3:f9:1c:b7:20:11:a2:0c:
                    58:89:ea:ec:6d:58:16:38:80:31:37:53:88:32:58:
                    88:c5:26:1d:0d:d5:aa:9a:f4:be:6d:54:c3:d2:3b:
                    8f:5a:d3:5c:75:93:f2:f7:60:eb:78:bd:5f:b5:3c:
                    16:4e:ec:3a:3e:82:66:85:57:0e:65:55:73:05:58:
                    35:28:67:e3:05:a0:a6:ee:c1:c7:23:35:3e:1e:53:
                    d1:ba:fc:5a:4d:11:08:3e:71:32:8f:48:e9:b2:8b:
                    47:67:01:72:02:b3:3b:59:bc:ac:bc:5b:6a:df:ee:
                    4f:38:de:aa:03:16:24:b0:3e:07:b8:47:dc:c1:83:
                    52:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:50:CF:60:C3:06:A1:3C:3A:E7:D7:DE:DA:42:F2:1C:80:C4:6B:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7fbeab76-fe97-35d9-8c5c-296da75b54f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:4a:4c:bb:59:3d:63:96:91:46:82:f1:8f:19:1a:b8:39:69:
         60:6e:d8:9c:c5:59:08:3a:b8:20:1f:ac:3e:08:ce:e4:e3:55:
         96:c1:bf:30:be:91:24:f0:4b:dd:13:a4:a1:24:d3:aa:39:36:
         24:39:7f:40:f1:5a:72:47:b1:6f:40:28:b9:47:30:16:00:54:
         1c:c9:aa:7f:cf:aa:4c:9d:d2:91:6d:d3:30:cb:3a:f0:63:03:
         cb:2d:41:3f:3d:7c:83:5f:e4:76:17:6d:e8:7a:17:7f:d2:3f:
         90:28:72:b1:6c:ef:49:1e:9a:26:45:7f:61:80:bd:9f:fc:2c:
         bb:e4:0c:00:f7:2f:cf:cb:ab:70:34:25:bf:58:3c:b1:3c:40:
         96:8d:6c:37:9a:bb:97:47:f6:26:cc:35:bb:cc:df:c7:58:b3:
         9d:49:79:9b:b0:28:38:8f:58:a4:f7:7b:a2:c1:a7:42:50:f8:
         86:bd:d8:0d:a0:0a:44:c7:18:e4:20:14:70:e3:ac:93:23:1e:
         73:4e:da:a1:7c:9c:56:59:25:b9:9b:75:27:28:2e:95:e9:07:
         0a:a3:6b:64:75:e9:f8:86:98:63:f1:c7:7f:a4:ea:31:31:b7:
         27:b2:d8:c7:4f:ae:27:d0:05:c0:d5:64:c1:74:09:14:7a:68:
         9e:88:64:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:29:03 2025 by rpki-client