Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5cedcc46-e6f4-34c2-a956-24832938ee89.roa
File:                     5cedcc46-e6f4-34c2-a956-24832938ee89.roa (raw, json)
Hash identifier:          mqSmJ/bkCD5bderFDcsT6UIWMltCkidRXPwTdVlw1Xk=
Subject key identifier:   72:BA:16:D9:F0:8F:AA:FB:C4:A3:E0:09:F5:BB:A5:C8:7A:64:18:93
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A9900D04404ACA60F503BB740
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5cedcc46-e6f4-34c2-a956-24832938ee89.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     401152
IP address blocks:        166.0.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:d0:44:04:ac:a6:0f:50:3b:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=006c630f-aeb5-4344-9757-3a56223334f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:dd:43:bb:13:59:3c:2d:5c:e6:c8:9b:c2:6d:
                    aa:3b:9a:61:1f:c9:1f:e3:3c:1a:c6:a0:7f:ea:0a:
                    df:44:7c:0d:b6:6a:10:bf:23:ec:ba:3f:fd:ca:4f:
                    e4:d1:d4:6e:1b:d2:ec:ff:03:8a:b0:38:80:78:3d:
                    6a:2e:db:b8:02:e0:cd:a2:41:fc:d4:15:ed:ae:cd:
                    d3:3c:17:b1:cc:9c:76:e4:99:3b:98:ef:bb:af:76:
                    37:f9:47:d2:08:4e:7b:4f:b2:93:0d:2b:55:12:db:
                    3b:2f:a0:34:b6:05:a8:8e:4d:b7:48:92:01:42:5a:
                    28:b9:f6:82:d6:1b:12:93:e6:49:2c:89:90:28:4a:
                    14:3b:64:52:cb:ab:92:98:33:8e:ff:db:db:0d:26:
                    cc:e8:f1:ce:b7:83:f1:31:a0:2d:6c:b0:75:ff:39:
                    4b:1a:f9:14:68:f0:4f:53:7d:ef:af:2e:28:0f:68:
                    8a:e0:f9:16:10:82:4b:6a:d3:4e:b3:00:f8:a2:de:
                    52:a3:09:97:6b:ac:4f:7d:f7:3e:fa:0a:71:7e:09:
                    e5:e8:f3:78:8c:96:c8:b2:04:b6:77:98:fe:e6:67:
                    f9:59:ec:15:09:24:80:3c:8a:6c:75:a1:b0:ed:52:
                    af:55:fe:f9:d8:97:3f:ac:b9:71:d7:41:67:5e:75:
                    43:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BA:16:D9:F0:8F:AA:FB:C4:A3:E0:09:F5:BB:A5:C8:7A:64:18:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5cedcc46-e6f4-34c2-a956-24832938ee89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:a2:6b:ef:39:c8:66:e9:d3:a6:ef:48:67:ec:34:5d:22:d7:
         55:c8:a7:8d:44:28:3b:94:a2:90:44:ba:e8:7c:49:37:72:e5:
         d0:c8:e7:83:3c:f5:0e:eb:e2:89:1f:03:da:e5:77:40:09:55:
         81:5b:ad:7e:8b:76:5d:a5:22:17:5e:5c:2c:22:bd:38:4b:50:
         a1:d5:1b:72:48:38:c7:76:ff:fc:2f:06:77:1d:d8:07:58:c3:
         bd:0c:da:a9:3f:4c:3b:9d:81:7d:42:12:4a:42:0f:96:52:4b:
         33:86:58:e6:b8:d2:86:61:bf:9b:d0:35:32:71:77:c9:f5:94:
         d4:83:f0:5f:47:50:b1:87:fb:1b:bb:37:9a:ca:80:ec:76:62:
         b2:60:f0:a3:24:1c:26:cd:db:20:74:33:ec:bd:43:fe:79:e9:
         7c:78:b0:44:f2:a7:b5:30:bb:9d:23:05:1f:46:fe:81:ea:87:
         53:f1:ad:15:59:5b:2d:6f:a8:57:ee:c3:43:f9:03:f4:31:55:
         c8:52:41:8d:ba:89:92:e5:48:d6:13:bd:e2:1c:5a:02:0e:6b:
         3b:87:b2:46:a5:d2:f8:d7:ae:22:c2:67:b0:c5:45:f7:01:6e:
         65:cd:fb:a4:cb:c1:29:49:5a:b1:82:55:22:16:3b:5d:4c:13:
         64:92:0e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:27:16 2025 by rpki-client