Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/653fbdb3-de41-3a04-b83c-6b0d02274ea6.roa
File:                     653fbdb3-de41-3a04-b83c-6b0d02274ea6.roa (raw, json)
Hash identifier:          bRLOGTdO9FcdN4tKRePGiMvBBD6Z8NaoPjvUw98+gn4=
Subject key identifier:   2D:04:A2:DF:F3:11:7A:A7:57:A0:4D:D6:03:2C:E6:49:0D:C3:0A:0E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AB0BB76A2D176287418195140
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/653fbdb3-de41-3a04-b83c-6b0d02274ea6.roa
Signing time:             Wed 30 Jul 2025 13:00:40 +0000
ROA not before:           Wed 30 Jul 2025 13:00:40 +0000
ROA not after:            Tue 28 Oct 2025 13:00:40 +0000
asID:                     62240
IP address blocks:        166.1.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b0:bb:76:a2:d1:76:28:74:18:19:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 30 13:00:40 2025 GMT
            Not After : Oct 28 13:00:40 2025 GMT
        Subject: CN=196d509e-8f75-4e60-b02e-07af135e5565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:95:5e:19:ec:71:98:83:f6:57:0e:50:3c:81:
                    95:b9:5b:33:0c:76:59:d5:6f:99:92:45:e7:5a:a0:
                    52:a1:a8:b9:07:8e:00:97:2f:c2:64:ab:7a:f4:eb:
                    b5:54:a0:0d:d1:b6:77:ca:b0:f1:dd:2a:32:cd:d1:
                    3c:1e:56:0a:32:91:c5:cf:2c:97:20:6a:2f:87:e6:
                    d1:ed:3c:bf:79:de:74:90:e1:56:73:ca:26:48:3b:
                    9c:c3:5e:b7:e2:f2:d9:bb:67:2e:de:5b:9f:a1:9a:
                    8c:8a:e0:b9:a3:4e:d9:de:36:d6:65:1d:ea:b2:8d:
                    cd:68:44:9d:ef:24:6f:ee:27:b1:76:2c:98:39:9b:
                    19:83:57:cb:e3:ef:40:f6:a9:02:ab:01:f2:9b:7c:
                    1c:2f:3f:5d:4e:d4:32:68:d9:03:68:53:f5:eb:7b:
                    8e:2a:1f:45:e7:f1:cd:20:b5:d4:c6:70:64:60:8e:
                    27:94:80:05:21:c3:ff:b1:b4:0a:0c:12:e8:3d:22:
                    86:dc:a6:06:01:af:d5:8f:9a:1b:c8:98:3c:3c:7b:
                    f6:69:ab:3d:93:93:20:bf:f9:2a:62:1e:5e:c4:e5:
                    26:50:e6:7b:5c:19:d7:80:9b:81:85:b7:d2:95:cd:
                    40:cd:96:84:1b:7e:d7:c1:7d:c2:0f:01:e8:7f:0e:
                    a7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:04:A2:DF:F3:11:7A:A7:57:A0:4D:D6:03:2C:E6:49:0D:C3:0A:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/653fbdb3-de41-3a04-b83c-6b0d02274ea6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:bb:a6:5b:d7:c2:9f:7b:ac:bd:db:bd:84:94:41:09:ea:78:
         95:c2:ee:9e:6b:b5:57:a2:bf:f8:db:15:9c:78:3b:48:c6:4a:
         bf:24:70:ea:46:91:fe:d6:df:76:86:4d:b5:7d:bb:13:d7:67:
         bf:f4:bc:fe:93:53:24:31:61:46:ff:24:64:6c:e0:a8:10:3c:
         fc:5b:08:f0:71:de:92:ef:0e:fb:df:64:cb:c8:17:b9:a2:bb:
         dc:3e:53:73:0c:34:47:1a:e1:de:ed:a9:e9:e5:b9:a6:b0:2a:
         0a:96:8a:41:3d:c5:e8:e7:37:9e:61:6f:33:29:24:45:11:cb:
         43:3e:8d:7f:8e:ad:32:87:15:07:d8:e2:d4:76:ab:69:a8:a9:
         83:f3:01:6c:6b:24:9d:3a:5d:2a:4f:d1:f8:85:a9:40:2a:22:
         5b:b4:63:97:87:58:1a:63:f4:ed:fe:d2:a6:41:fd:35:2e:1f:
         62:78:c9:da:b1:50:b1:42:93:e9:a6:40:d6:a8:14:e1:30:38:
         55:50:e0:e5:85:21:81:7a:71:6c:c9:3f:c7:36:a6:c4:de:94:
         c1:6b:9b:47:c4:a6:79:f7:d7:24:43:dc:b0:39:bf:62:39:d5:
         e3:63:ea:f8:ce:e8:fb:e9:6c:1f:e9:4d:a8:35:38:98:53:bd:
         82:0e:da:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:01:45 2025 by rpki-client