Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/493177e8-c7f9-3298-b3b7-bbe78bdc9d07.roa
File:                     493177e8-c7f9-3298-b3b7-bbe78bdc9d07.roa (raw, json)
Hash identifier:          cxGLBeGN5piJutgcX5ocw3fyw1Z9oNFvJe6RNNq7gCo=
Subject key identifier:   E0:B9:D7:31:34:D9:CD:E0:5C:2F:D2:EA:D6:EF:BF:DF:05:09:C8:2A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A682601CFD90BB9E33AEF6506
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/493177e8-c7f9-3298-b3b7-bbe78bdc9d07.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     41745
IP address blocks:        166.1.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:01:cf:d9:0b:b9:e3:3a:ef:65:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=937e3f4d-b38a-4d40-a6c6-bc1212136cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0d:84:61:5c:2e:50:72:b5:20:c4:1e:49:2c:
                    78:5b:13:74:e3:0b:98:b5:2a:61:58:24:98:53:cd:
                    76:ca:3f:cc:e1:cd:a0:3c:44:56:8b:0a:c5:75:f7:
                    64:35:b2:99:6f:1f:c6:9a:6e:71:d9:95:ec:39:17:
                    aa:8f:be:8f:58:a0:22:e2:dc:ab:58:71:6c:49:c0:
                    9f:33:79:8e:35:b5:a5:1b:f6:3e:8c:57:9f:ef:38:
                    6f:6e:88:15:b0:48:f9:93:23:58:20:a8:76:4e:6f:
                    09:24:b5:7a:ea:d0:58:5a:94:68:ad:5b:54:e2:79:
                    a0:cc:f8:97:d1:b8:09:fa:6a:62:51:c9:19:81:5d:
                    0a:a3:e1:a8:77:49:eb:20:ff:7d:45:aa:13:84:bd:
                    e0:98:4d:1a:ad:74:0c:83:cd:86:d5:6f:84:97:c0:
                    f4:5f:0f:0f:35:f5:76:ad:05:e5:45:15:4a:ee:50:
                    8f:c7:6e:f0:90:e6:9b:38:48:84:63:93:52:50:20:
                    83:7d:cc:e9:cf:2e:70:80:35:7a:f7:e7:21:8f:eb:
                    66:57:8e:cd:66:ad:b8:4d:74:16:62:f8:d1:30:35:
                    2b:1a:bf:59:07:86:ba:d0:bb:a6:5b:6a:1d:61:37:
                    4a:54:47:ab:18:ab:35:31:7c:d6:9e:81:8e:90:d6:
                    c3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B9:D7:31:34:D9:CD:E0:5C:2F:D2:EA:D6:EF:BF:DF:05:09:C8:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/493177e8-c7f9-3298-b3b7-bbe78bdc9d07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:c1:79:2a:1e:6a:6c:14:6d:c7:fe:bc:7f:2e:49:0e:21:02:
         13:ea:8b:07:dd:7c:c0:6c:ae:73:2c:31:23:08:53:16:28:7b:
         fa:70:a1:a9:5b:3e:18:c9:4a:2a:9a:f1:36:e6:b5:d0:40:d7:
         6b:33:25:25:1e:7d:b4:30:96:82:bc:1e:27:c2:fa:2b:d8:55:
         5d:34:6c:6c:99:d0:b8:bc:2c:d8:2f:b5:22:2a:20:8d:60:23:
         5e:a5:1f:8d:c2:9e:a1:c2:9a:92:1e:8b:7a:6a:82:43:55:10:
         e5:3d:09:0f:ab:ad:2d:6c:61:2b:a3:ad:96:28:74:eb:72:de:
         42:4f:c4:04:df:cd:2f:24:d6:c8:b2:d9:50:67:f6:02:78:08:
         86:8a:e7:53:84:0e:d1:13:9d:f9:c2:23:c7:83:d4:26:f9:15:
         6b:b9:c4:c6:7d:ef:a8:ee:b4:1a:8e:b6:91:97:33:0f:0d:ec:
         e8:70:2f:d4:af:b1:63:cb:d2:99:0a:7d:11:68:3c:a3:ca:65:
         79:b5:92:9a:bc:14:4f:14:bd:3e:f7:25:79:7d:46:07:27:02:
         b2:a6:68:ca:83:28:55:bf:6d:e4:7a:b5:20:8d:ed:32:01:b0:
         05:b3:dd:77:a6:a0:d2:14:a4:ac:03:15:bd:14:60:27:d6:a0:
         12:ba:5a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:54:57 2025 by rpki-client