Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/569583b4-5124-3dd9-b1f2-4d1323b1c0d3.roa
File:                     569583b4-5124-3dd9-b1f2-4d1323b1c0d3.roa (raw, json)
Hash identifier:          kl142WloLvXm9BNRnMbAZVSsAdJHcrcYY61b91eHmoE=
Subject key identifier:   77:63:64:B7:15:B9:E4:B9:66:9E:64:5B:EE:2B:22:4E:41:BB:64:8A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AB0BB81442EDBF5F1D3ED2380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/569583b4-5124-3dd9-b1f2-4d1323b1c0d3.roa
Signing time:             Wed 30 Jul 2025 13:00:40 +0000
ROA not before:           Wed 30 Jul 2025 13:00:40 +0000
ROA not after:            Tue 28 Oct 2025 13:00:40 +0000
asID:                     62240
IP address blocks:        166.1.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b0:bb:81:44:2e:db:f5:f1:d3:ed:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 30 13:00:40 2025 GMT
            Not After : Oct 28 13:00:40 2025 GMT
        Subject: CN=66e5fdc3-7b44-49e7-8732-427a96e81098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7e:bf:3e:db:db:80:b6:bf:a3:17:ea:e1:93:
                    a2:f6:50:49:39:a4:43:19:3e:5a:27:f5:3f:83:4c:
                    4b:9e:b2:0b:63:62:aa:19:a2:f7:d1:84:6e:25:fd:
                    25:95:36:b7:82:4b:d0:e6:3f:74:d5:9f:f3:01:4f:
                    5f:4d:25:31:c2:ff:2c:3e:82:72:78:65:90:36:bd:
                    c8:25:a7:be:35:2b:e5:f1:93:5c:33:d1:bb:50:fb:
                    a8:9f:4b:33:4a:73:40:35:31:e9:63:2b:67:fc:2a:
                    b4:b8:6f:7b:fa:fe:cf:58:08:01:c2:0a:7c:09:37:
                    00:ca:41:a6:13:3d:bb:95:c8:96:2f:ee:90:5a:ea:
                    0a:0a:41:af:9d:12:e8:fb:4c:0c:38:ff:90:d1:c4:
                    05:4b:3d:b5:0f:63:44:fb:18:02:9b:98:5f:35:e6:
                    de:ce:fb:d6:cb:15:07:89:24:cd:dd:8f:c6:1d:a5:
                    54:f9:a4:3b:8d:71:19:e7:86:63:26:a4:ab:ed:05:
                    35:14:c4:3e:e8:27:90:0c:c8:61:58:27:0d:1b:62:
                    96:9c:7e:e2:40:97:3c:19:f8:75:0f:ad:9e:6b:8b:
                    37:e9:82:20:c4:df:0e:3a:c4:4d:6b:ef:fb:ab:ca:
                    d6:77:68:66:d7:7c:6b:83:c0:5a:92:43:27:a1:ed:
                    6a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:63:64:B7:15:B9:E4:B9:66:9E:64:5B:EE:2B:22:4E:41:BB:64:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/569583b4-5124-3dd9-b1f2-4d1323b1c0d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:dc:38:57:cd:c4:ad:b6:90:0d:b3:a2:75:23:ff:07:f6:c0:
         74:1e:32:2b:76:16:5a:e9:d0:26:a5:7b:e8:3f:a9:08:4c:43:
         c6:67:7f:02:5c:0e:e0:2e:14:5d:d4:69:ca:d8:8f:33:08:c6:
         8f:3d:6c:3e:72:7f:ca:5d:f3:6a:e5:c4:c7:77:0d:d7:ae:f7:
         ff:7b:86:c8:0b:0e:31:17:d3:52:a4:cc:a4:a7:e5:f3:51:73:
         b7:a4:f6:51:47:0e:f4:74:8e:57:7a:2e:b2:2e:64:72:f1:f9:
         e4:cb:89:a3:d7:cf:e7:a5:93:be:5f:32:33:ff:8b:4f:82:3e:
         f8:90:3b:df:37:31:c6:1c:bc:ac:31:4b:17:a5:3f:8e:5f:56:
         c0:a3:00:61:09:a0:d4:28:e8:ee:f7:57:4c:03:70:8e:80:de:
         4a:dd:77:16:07:88:a0:04:2d:c3:1c:32:bf:4c:4a:92:30:9c:
         86:a1:15:57:38:b0:15:8b:de:b6:5c:26:91:69:0c:b0:15:1a:
         84:d9:69:ff:61:d9:06:6e:6e:37:b9:da:3e:73:81:03:92:ed:
         15:6c:7d:e8:ee:d7:c9:cf:71:e2:24:c1:d0:be:35:27:92:a1:
         bb:59:1d:7b:e8:da:4d:5d:9d:04:0c:ff:14:e4:ba:50:24:6b:
         a2:ba:39:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:19:04 2025 by rpki-client