Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8a7ccec7-451f-3009-869b-4d5a1c85ef5f.roa
File:                     8a7ccec7-451f-3009-869b-4d5a1c85ef5f.roa (raw, json)
Hash identifier:          ayG/T/PirEWTXF1sRau8uFtl78ycC36QkhIHMJTqYyo=
Subject key identifier:   87:F2:71:4B:5A:12:F3:A3:C5:9B:E3:87:50:99:37:83:F2:9F:A4:6E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A2EEAC3D4C52368B429A1C800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8a7ccec7-451f-3009-869b-4d5a1c85ef5f.roa
Signing time:             Sat 14 Jun 2025 01:00:49 +0000
ROA not before:           Sat 14 Jun 2025 01:00:49 +0000
ROA not after:            Fri 12 Sep 2025 01:00:49 +0000
asID:                     8881
IP address blocks:        166.0.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:ea:c3:d4:c5:23:68:b4:29:a1:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 14 01:00:49 2025 GMT
            Not After : Sep 12 01:00:49 2025 GMT
        Subject: CN=c1471caf-d473-400d-a13a-e56396885c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f9:4a:6b:5e:20:17:9c:60:59:8c:bd:88:08:
                    8b:1c:3f:3f:10:70:fa:a5:f9:dd:b4:18:f4:0b:0d:
                    ca:2f:53:e1:2f:fa:f9:7c:78:62:64:d6:ed:9e:07:
                    bd:ec:43:18:d8:be:41:73:31:9f:ed:8d:01:83:e9:
                    b7:bb:56:0c:39:e2:0f:29:12:cf:40:2e:d3:33:56:
                    aa:d8:bf:b8:f7:de:3a:fe:87:d6:66:18:bc:d3:81:
                    79:58:c0:ce:20:22:bd:90:06:c8:b3:7a:17:11:ec:
                    f0:a5:8e:30:46:cc:af:ff:3d:00:9c:de:21:e1:f0:
                    43:4e:1e:7f:95:8a:2f:21:9a:8e:b5:81:99:5d:49:
                    23:25:81:79:e3:09:bd:c5:eb:31:8c:73:5c:70:f4:
                    23:fb:e1:58:a7:74:c5:84:ed:0a:5b:d9:db:96:42:
                    92:1a:33:20:44:20:45:3b:ae:c4:d0:4a:1e:4d:8c:
                    85:0d:0a:13:fd:16:fe:03:3b:a3:7f:ff:da:5a:bd:
                    5d:9f:f7:4b:1c:be:6c:70:ba:1b:32:ec:09:81:6e:
                    0f:16:ed:1c:8c:b7:e8:06:22:2e:f0:98:46:99:d9:
                    df:55:0f:f7:52:73:f8:a8:33:dc:c3:74:2b:f0:2f:
                    2a:6c:d1:55:5f:dc:16:20:f6:71:86:62:8f:e9:5d:
                    9e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F2:71:4B:5A:12:F3:A3:C5:9B:E3:87:50:99:37:83:F2:9F:A4:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8a7ccec7-451f-3009-869b-4d5a1c85ef5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:fa:00:58:31:7f:86:7d:29:65:22:a9:7b:db:c7:21:c2:ac:
         d1:f3:0b:a8:4e:81:7d:7d:73:83:fa:2c:88:db:95:a6:8a:fb:
         cc:95:90:9e:1e:1d:94:a2:a5:c8:c5:d8:ca:af:b9:e3:9c:0c:
         0a:e0:ba:ce:61:c2:3d:a7:f7:eb:c5:62:55:0b:28:13:46:19:
         a9:7a:32:fe:28:45:de:21:a5:20:94:2e:16:db:b7:51:27:57:
         59:6e:8d:df:32:09:96:da:32:7b:e6:24:7f:f3:29:2e:63:58:
         a3:31:8a:cf:63:bd:20:33:f3:be:85:ff:96:2f:04:48:f3:23:
         1e:73:b5:f7:e8:f4:26:00:fe:3e:17:1b:0d:ce:a2:55:61:17:
         d6:a3:28:de:17:13:c8:c8:6c:48:e9:c5:8c:ca:09:f0:6d:3a:
         6c:51:2f:72:f8:0d:a6:b6:e4:84:65:82:15:98:86:bd:4e:ba:
         e8:67:18:b0:91:cb:6c:43:7b:bc:db:e9:41:8d:80:1c:d4:7e:
         1c:f5:af:d8:8d:20:0e:c0:cc:3e:3f:f0:83:ea:1d:57:ac:9a:
         81:31:b8:18:27:8e:97:33:01:93:cd:c2:d6:71:5a:07:f3:0c:
         85:b0:e6:f7:43:f7:b1:5f:f7:54:56:6e:44:05:bf:0f:22:5e:
         56:18:36:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:51:12 2025 by rpki-client