Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebec4b3a-32e4-34a7-b693-8e7d1aeffd9b.roa
File:                     ebec4b3a-32e4-34a7-b693-8e7d1aeffd9b.roa (raw, json)
Hash identifier:          kmmwxg7gc8gTIDMFdVZsXGq7A2qmueBt9deSylsq2q0=
Subject key identifier:   03:B3:E3:F6:99:82:93:BF:E5:02:AF:A3:CA:67:A4:1A:7C:96:60:4A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858483F80335F9AB28A23BD4F6140
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebec4b3a-32e4-34a7-b693-8e7d1aeffd9b.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     62240
IP address blocks:        166.1.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:33:5f:9a:b2:8a:23:bd:4f:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=3ee3e42d-cfb8-4357-bd07-37a2d781ae62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2e:3f:94:1a:4a:ae:4b:78:f7:96:a0:57:84:
                    57:38:56:28:c1:97:8a:53:98:be:24:96:4d:11:d4:
                    37:f9:f8:ea:47:cc:df:8b:da:39:7e:49:78:33:c9:
                    3e:cf:ba:b0:54:5f:e5:d9:0c:c1:37:ef:03:84:72:
                    a9:dd:57:6b:14:62:f4:46:13:32:54:56:95:e7:66:
                    1e:cf:1b:ef:05:dd:b8:66:2f:44:45:1a:7a:26:9b:
                    20:9d:24:76:1e:f7:31:ec:44:ce:2a:82:e4:61:57:
                    3d:ea:60:83:0c:9c:75:17:c4:be:05:49:c1:9f:d8:
                    e7:5f:94:87:ef:9d:9c:fd:e9:f2:ad:ac:88:14:33:
                    8c:2a:f7:96:b0:48:43:0e:6d:45:f8:dd:b5:a9:8a:
                    c8:68:7b:ba:88:a3:86:dd:6c:11:1c:96:e8:ac:7f:
                    06:ee:05:c2:4f:ca:e4:84:b3:e3:d8:32:4a:4c:23:
                    ae:8d:aa:b7:0c:7f:bc:93:f1:2e:4e:1d:7d:03:6e:
                    39:5b:1e:23:4f:57:12:99:fb:0a:7a:b8:f7:61:44:
                    79:8e:df:49:03:fc:6e:82:87:aa:74:c1:39:6d:f4:
                    ae:a6:1e:10:72:3c:a5:9b:e2:53:f0:4e:8e:cd:ff:
                    78:80:df:02:94:55:f7:26:66:ee:af:91:21:e0:7a:
                    c5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B3:E3:F6:99:82:93:BF:E5:02:AF:A3:CA:67:A4:1A:7C:96:60:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebec4b3a-32e4-34a7-b693-8e7d1aeffd9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:cb:ce:fc:42:95:03:9a:81:21:3a:0c:4e:20:1d:47:83:53:
         4f:69:9a:99:79:af:e6:72:a5:c9:72:da:08:03:a6:e8:12:2b:
         e3:ca:33:31:c3:68:f9:ff:a8:78:88:f7:66:d9:4e:4b:74:a5:
         ea:d3:7f:b9:72:89:99:75:f9:3a:e8:30:1b:40:99:cb:9a:10:
         ed:03:55:03:74:e8:68:8d:82:d5:4f:4a:bf:eb:bc:e0:58:71:
         41:0f:7f:2d:83:82:0f:a3:ce:e0:42:9a:50:8f:a9:20:c7:e9:
         47:ce:49:55:ea:21:aa:02:ca:fc:86:8d:9e:85:9e:b9:79:4c:
         1e:64:bd:25:2b:2f:68:4f:a7:39:aa:66:49:ea:a3:92:6f:f0:
         fd:e6:f3:05:cf:84:6d:bb:6f:c9:70:c7:21:4f:09:2b:a5:75:
         1c:fa:ad:a0:50:5e:2a:8e:1c:cb:48:4a:61:96:31:e0:9c:df:
         96:d1:d5:0a:5c:9c:76:01:6f:31:24:aa:ae:c3:40:d6:cf:86:
         62:50:d6:a6:39:0e:be:6d:87:a8:58:eb:c6:e2:af:49:4a:79:
         5f:f7:1e:0b:67:35:f3:9b:b3:df:8b:ed:18:b5:9e:eb:ab:e7:
         29:36:77:54:46:ae:59:26:8c:40:c3:f6:2d:66:d1:ee:b4:00:
         6e:0d:c5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 7 11:19:13 2025 by rpki-client