Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f4565ec0-167b-33ec-aca8-4742426ac108.roa
File:                     f4565ec0-167b-33ec-aca8-4742426ac108.roa (raw, json)
Hash identifier:          GogULEYqtQcJc+Xk4L/1UnZf4ITZg81jpJ1/A5yEOFs=
Subject key identifier:   01:A2:3D:F7:AB:F9:8D:9D:E4:B1:03:24:2A:D3:30:58:50:E7:67:B3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849287E63742F2012E9F1111C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f4565ec0-167b-33ec-aca8-4742426ac108.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     62579
IP address blocks:        166.0.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:63:74:2f:20:12:e9:f1:11:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=7dda2fee-d404-4816-a3c2-6826834a2846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:07:55:2f:d0:7c:56:fb:37:ab:7f:92:f2:25:
                    14:66:59:ff:27:bf:26:cc:26:b1:18:fa:ec:ab:cd:
                    90:db:c1:a5:c5:42:9b:66:25:9c:b1:db:e0:fa:a5:
                    00:79:c4:3f:a4:51:ac:81:a6:f7:93:fc:2b:e9:e5:
                    f0:bb:53:89:0c:67:40:5e:b0:10:cf:f0:9a:b0:07:
                    43:f9:7f:12:e2:8c:75:20:fb:d5:a8:72:1b:ca:17:
                    90:e3:f3:f3:35:9f:35:5e:21:4f:ab:90:0a:55:15:
                    9e:93:99:1d:fc:c7:36:c5:e0:6d:cc:ca:07:cd:f1:
                    84:34:a6:b6:f6:62:57:8b:c1:7d:49:8d:2d:36:66:
                    3d:5f:6e:48:a3:00:22:5f:a8:e9:fa:41:12:8a:71:
                    83:41:05:25:7f:b1:70:84:52:fb:7d:6e:b6:48:2e:
                    96:43:5b:91:a3:25:68:1d:71:f4:41:4f:e3:29:b6:
                    19:f7:a8:8b:2d:3e:b7:99:b9:89:4d:45:eb:19:f9:
                    dd:a6:0d:33:cb:28:e7:2d:16:f3:45:b2:1a:60:a9:
                    04:76:16:78:4e:e2:13:29:f7:ab:5e:88:12:6e:b8:
                    53:0c:00:e6:42:2e:4c:72:69:09:9e:42:c3:d2:7e:
                    20:b5:c8:90:8d:f9:28:a9:3b:84:cb:0b:61:66:5b:
                    66:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A2:3D:F7:AB:F9:8D:9D:E4:B1:03:24:2A:D3:30:58:50:E7:67:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f4565ec0-167b-33ec-aca8-4742426ac108.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:15:f9:4d:3a:e6:7b:7f:7c:dc:37:24:f3:ad:8e:34:0c:66:
         84:58:52:95:ba:e6:4e:24:ee:83:6b:0e:4c:05:80:6a:7e:ac:
         9b:97:c0:a7:5e:70:b1:a9:c8:e4:a7:44:b6:16:8a:f9:df:5f:
         cd:05:96:cc:3b:80:0c:68:22:9a:20:5c:f3:6c:3b:21:16:12:
         1f:8e:a2:2b:a4:72:d0:07:4b:2c:db:d4:87:bc:1c:5e:9c:ab:
         33:86:33:da:12:5b:a9:cd:3b:1d:15:af:51:fc:3b:0c:01:07:
         34:df:48:4b:70:93:1f:91:1d:33:33:83:db:f3:99:04:b9:05:
         53:7d:dd:f5:bb:7b:b9:2c:20:67:76:18:ae:50:d7:b9:30:d3:
         b7:91:08:5d:ee:8e:58:65:d8:fd:31:29:2c:8d:e2:8a:5b:86:
         82:43:47:97:4d:cb:81:5d:3e:84:ed:81:8a:63:5c:cd:45:b0:
         c6:04:39:cc:a5:46:c3:66:33:da:51:cb:b7:05:e9:04:32:12:
         f9:54:e3:0d:7b:23:fd:ee:44:36:ae:93:7a:87:32:a9:c7:48:
         84:16:d1:49:a4:1f:41:f5:2f:48:63:90:42:e3:c0:c0:1d:8c:
         ff:09:ee:00:65:e1:85:70:ec:7f:9e:f6:aa:a1:55:75:91:de:
         24:4c:ae:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:56:25 2025 by rpki-client