Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c3d11c0-0670-3c72-a69d-a24294f9fdb6.roa
File:                     9c3d11c0-0670-3c72-a69d-a24294f9fdb6.roa (raw, json)
Hash identifier:          2mJzCX+9cInhuQiljjFNHf24tROujQ71OyPIdN7lHPQ=
Subject key identifier:   3D:74:C7:7D:6E:50:B3:FD:8F:62:E1:01:CD:42:89:8F:1D:22:B0:68
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858491D7171389AA80FF038275780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c3d11c0-0670-3c72-a69d-a24294f9fdb6.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     7979
IP address blocks:        166.0.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:71:38:9a:a8:0f:f0:38:27:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=fa863328-51ea-42ed-9451-140d59ceda2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fc:dc:80:7e:98:d4:8e:85:6d:2c:8f:ea:e9:
                    1e:83:6e:06:1d:2b:78:ae:f2:1b:17:de:74:d9:88:
                    2c:72:f6:1f:f8:9d:e4:d4:29:77:34:15:2c:32:04:
                    89:66:50:1d:8e:00:23:c5:93:09:31:02:97:9d:b6:
                    84:bf:a0:f5:2d:f5:b1:d2:9d:84:12:14:1d:ea:6c:
                    3a:4c:d8:7d:a0:61:fe:b5:8b:ae:0a:ce:da:b0:c5:
                    3f:30:17:6f:79:81:12:53:b0:1f:65:02:d0:79:b2:
                    f3:2d:08:3f:a4:29:6b:a3:86:64:cf:21:40:45:f5:
                    50:26:9e:b1:c6:3e:f5:40:14:21:e9:f3:04:44:5d:
                    1d:e9:5e:9a:8b:9b:c6:5a:f9:88:d9:15:b6:99:6c:
                    5a:f2:ce:5d:c3:62:f6:32:2b:54:72:ee:09:32:0d:
                    92:8c:9f:80:94:4f:fa:06:f1:30:76:7b:dd:28:8f:
                    96:fa:33:1f:c5:95:be:2c:06:70:08:26:fe:da:89:
                    14:69:3d:b5:0c:d3:91:d6:ff:8d:e1:4f:26:01:ad:
                    83:5a:b7:84:20:8f:21:d4:e7:ce:24:68:39:82:5b:
                    9b:b9:77:d9:d5:4e:49:bf:11:4e:f4:3c:78:95:75:
                    0d:80:43:39:08:2b:b0:b6:dd:1d:88:b8:28:cc:55:
                    0a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:74:C7:7D:6E:50:B3:FD:8F:62:E1:01:CD:42:89:8F:1D:22:B0:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c3d11c0-0670-3c72-a69d-a24294f9fdb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:1e:19:9b:23:96:24:ee:bc:70:1e:17:85:dc:b9:2b:27:da:
         80:76:1d:46:09:54:db:e9:4c:be:97:29:32:d5:f7:e0:31:f3:
         ff:e9:7e:80:df:04:f4:96:19:78:58:ba:bd:17:a0:6c:af:6f:
         59:2d:53:c4:62:65:dd:16:f4:03:1b:bb:dc:ad:6e:31:cd:74:
         a3:4f:8a:e4:39:41:3b:d7:81:13:45:90:ab:5e:dc:19:47:0c:
         03:d9:34:e2:be:3e:c9:b2:a7:a3:62:0c:71:46:17:11:83:dd:
         9f:88:9d:d6:d3:d1:56:39:77:71:86:12:fd:58:e1:5f:7d:c2:
         6a:58:73:cd:56:ef:c1:e9:73:63:de:65:33:9e:b1:0a:01:6a:
         9d:79:2d:b4:66:c3:da:3f:09:7b:05:72:59:c6:aa:0e:af:b1:
         07:e7:f3:26:da:e1:56:23:ed:5d:dd:32:c1:af:50:5e:5d:2e:
         44:59:08:16:75:d6:37:87:fe:18:e2:36:68:c7:d2:b1:74:84:
         a6:04:2f:f2:f1:b7:47:aa:b6:15:8e:47:54:af:18:b8:d3:64:
         5c:8c:20:28:75:f3:c2:97:66:18:57:17:10:0a:aa:c4:4e:a2:
         65:30:18:d7:a1:2f:3a:a7:91:6d:f9:be:9c:73:ca:32:8e:02:
         4f:b0:dc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:01:58 2025 by rpki-client