Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8965ba3f-4f6f-3007-a500-413a690aba15.roa
File:                     8965ba3f-4f6f-3007-a500-413a690aba15.roa (raw, json)
Hash identifier:          brqVXmjLmQ68l/nmTmC35KwiAOZFOcRTpjSO6PBrt5Q=
Subject key identifier:   3F:8B:1A:F8:5B:8E:FE:1E:42:3C:33:B8:AF:A9:27:19:32:E2:CF:29
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848D7A64A4D47674CF9F7DB1200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8965ba3f-4f6f-3007-a500-413a690aba15.roa
Signing time:             Tue 11 Feb 2025 02:00:39 +0000
ROA not before:           Tue 11 Feb 2025 02:00:39 +0000
ROA not after:            Mon 12 May 2025 01:00:39 +0000
asID:                     7018
IP address blocks:        166.0.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:a6:4a:4d:47:67:4c:f9:f7:db:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 11 02:00:39 2025 GMT
            Not After : May 12 01:00:39 2025 GMT
        Subject: CN=b488a15f-5c69-49cb-a178-39dec917a58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c5:94:68:51:29:85:b3:92:b8:48:d3:ce:cc:
                    f8:62:c0:07:93:8e:f0:e0:6a:e1:d9:a4:cb:2a:31:
                    10:5a:4e:da:23:b7:31:7e:c9:5e:82:c6:0e:2d:5e:
                    9b:f4:36:38:28:4a:c3:62:9c:44:e1:b5:c1:9c:35:
                    32:af:db:0f:67:a6:9e:3a:68:b6:91:97:5a:24:19:
                    43:18:6b:71:c9:6a:03:1d:c8:64:8e:09:64:bf:9f:
                    43:38:e2:b5:41:6d:10:58:35:6b:7e:85:b7:5b:fd:
                    a3:1b:7b:ce:58:fe:16:8c:d6:5d:ef:e8:e7:12:1f:
                    cb:da:7e:f3:7f:fb:32:4a:8b:df:f9:80:99:17:40:
                    78:cc:86:69:b1:46:de:fc:0f:e5:1d:2a:c4:92:c2:
                    6a:fe:b5:29:85:3e:bd:c2:49:46:50:5f:58:23:79:
                    83:fd:88:99:79:0f:56:e0:ee:36:6b:67:99:0b:62:
                    fd:40:51:70:4d:05:45:27:b1:35:7a:b5:80:9d:2e:
                    3a:a5:b9:ff:a9:13:9d:b4:a9:ab:53:fb:b0:c8:a8:
                    1c:9f:e4:cf:4b:8c:af:cc:95:8b:f6:0d:51:22:44:
                    0b:77:91:99:7e:fc:d6:cd:03:df:72:eb:af:79:3b:
                    ca:44:3e:fd:d3:66:8c:c5:b3:b8:ea:5d:97:b0:76:
                    8f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:8B:1A:F8:5B:8E:FE:1E:42:3C:33:B8:AF:A9:27:19:32:E2:CF:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8965ba3f-4f6f-3007-a500-413a690aba15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:38:58:73:a0:4c:f4:d8:d5:07:91:69:4b:56:e2:62:14:19:
         c6:ab:7e:e1:b7:b8:86:e0:f4:77:4e:82:a2:1d:cc:ca:9e:17:
         06:98:9c:6a:65:d0:63:46:29:49:6f:87:0a:cf:dc:d7:01:d1:
         5f:3c:a8:28:fa:a0:79:27:72:f5:d8:24:b1:11:4d:cc:ca:aa:
         37:f5:4c:1e:2f:c0:3c:dd:97:dc:6b:3c:48:15:89:ff:82:81:
         0a:2b:5e:29:4a:e0:13:98:ae:bc:18:ed:c5:6e:1d:c1:d7:03:
         e3:4a:d9:c0:84:c7:48:e5:10:9b:e6:f1:a7:6e:5a:52:17:01:
         ac:35:d6:05:fa:70:98:f8:d1:49:68:20:6f:67:5f:14:40:1d:
         25:ea:a6:91:98:49:d8:4c:ca:74:ee:1c:f9:68:01:a7:b2:13:
         21:3c:47:78:ff:13:3a:aa:24:d0:8e:48:8c:85:03:4d:bb:34:
         55:5d:4a:9a:02:15:ed:19:5f:f2:6d:21:69:70:ee:ea:9a:b1:
         0b:c1:df:4e:cd:4b:60:c4:38:80:d9:b1:c4:4c:c7:4a:4e:31:
         6d:1d:d8:af:a4:35:bb:06:22:d3:31:fb:20:71:27:12:9a:5b:
         97:39:96:f0:9d:d2:ce:26:cf:37:c1:af:1e:ee:77:a4:10:e0:
         6a:7b:b3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:36 2025 by rpki-client