Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f5451afa-f77f-311a-9c8d-23addd686ed8.roa
File:                     f5451afa-f77f-311a-9c8d-23addd686ed8.roa (raw, json)
Hash identifier:          FTsD1UHolNkqdH86wAJ07BpRticfih0E3BH7IA2p4EY=
Subject key identifier:   4E:60:B1:6F:FA:70:D5:3A:0B:C5:94:82:8D:95:4B:36:D7:5B:81:36
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848D641141752D43435989C7068
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f5451afa-f77f-311a-9c8d-23addd686ed8.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     58061
IP address blocks:        166.1.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:14:17:52:d4:34:35:98:9c:70:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=aa5f7ae2-7948-4880-a860-1331422a508c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2f:79:65:53:b5:b0:e9:0d:e5:3d:b0:88:90:
                    8b:ba:e1:d2:41:08:19:6b:19:53:a7:7a:3d:c5:85:
                    fa:25:13:17:ba:5c:f8:25:ed:99:2f:02:70:96:da:
                    e9:e8:6c:f3:ab:25:a6:83:ac:46:38:69:93:a1:ee:
                    2f:fe:68:8f:e1:6d:47:fe:ec:38:e7:43:b1:e6:ff:
                    45:58:fd:03:b7:80:9b:f9:1f:9a:49:82:8d:76:e9:
                    98:a9:24:ff:ac:88:d2:8b:ca:84:2d:c4:98:46:43:
                    ef:e1:76:bb:2c:47:3c:03:7d:c6:47:b3:b7:4f:08:
                    73:23:41:2d:18:a0:eb:11:3d:b8:a0:66:60:08:01:
                    b9:c4:60:f1:8f:0c:fb:9f:3c:b5:92:b9:b2:d4:39:
                    c3:4c:2b:13:f1:09:78:57:b6:4b:38:aa:9a:b0:01:
                    ef:5b:63:7f:2f:d2:04:83:d6:30:2b:83:16:d7:14:
                    6f:98:cb:d3:75:ec:26:4f:04:52:58:4b:3d:79:e7:
                    5b:1f:34:29:ee:f2:cc:17:91:a9:a9:a0:6a:9e:96:
                    ef:94:05:d6:27:1a:dd:5d:48:6c:97:2e:d2:0b:a0:
                    25:2b:bd:69:3c:7a:ab:f7:9d:8f:5a:94:7e:8b:6a:
                    71:65:e9:24:97:3a:8d:b9:01:1d:b8:07:be:d8:cc:
                    43:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:60:B1:6F:FA:70:D5:3A:0B:C5:94:82:8D:95:4B:36:D7:5B:81:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f5451afa-f77f-311a-9c8d-23addd686ed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:9a:5a:9f:09:4c:ff:93:db:93:ac:e5:2e:06:1a:4f:be:a5:
         3e:e4:7a:2b:9e:29:b6:08:9c:8a:da:00:4a:c3:2a:8b:76:eb:
         f7:e9:0e:38:63:9c:2a:d6:a4:cd:96:9b:ed:0c:7b:c6:b2:8a:
         e1:cf:87:d3:1c:0e:04:84:5c:7e:a0:07:16:fa:33:ab:0c:59:
         84:43:e0:39:60:fd:15:65:3b:a6:5f:97:0c:4c:d9:53:c7:ba:
         ee:a7:2f:b3:f8:66:15:04:06:f6:73:e1:8f:0f:37:21:ae:4e:
         1d:46:57:f4:19:e3:24:dc:de:d8:c6:17:98:42:ef:da:eb:42:
         80:d6:a6:9c:f3:24:3f:a7:4b:44:9d:9a:bb:55:f5:47:e9:97:
         35:5e:f8:09:a5:b2:64:ed:c1:ec:41:cf:0b:89:30:1f:6f:5c:
         53:f1:21:d8:08:53:8c:8c:81:0f:8e:ff:94:4a:57:39:02:3b:
         5d:fd:29:be:22:8b:6e:e7:36:50:20:1c:8f:9a:89:d9:cc:78:
         69:0e:5d:57:5d:ec:b5:ac:c1:35:eb:2d:d1:4a:be:c5:13:f6:
         20:a0:3d:40:7b:f8:df:13:a7:a0:94:1c:f3:d2:bf:62:58:8f:
         c3:c8:81:62:a2:e6:a5:b3:4b:d5:df:5a:31:27:d2:17:d7:63:
         80:1b:f5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:10 2025 by rpki-client