Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a6b65c0e-b9a1-314f-9fe5-f9189e590005.roa
File:                     a6b65c0e-b9a1-314f-9fe5-f9189e590005.roa (raw, json)
Hash identifier:          n91FCyo1tyvwWZ/UmDMH3ocoGir+yzAmNRjHgpDCIpI=
Subject key identifier:   60:BD:33:10:1A:6C:9F:93:EB:3E:A2:EE:4C:0B:DC:37:59:71:11:1D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849A4BB7D45DC67C3A69D933D60
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a6b65c0e-b9a1-314f-9fe5-f9189e590005.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     58061
IP address blocks:        166.0.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:7d:45:dc:67:c3:a6:9d:93:3d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=0ddcd4d7-a200-41c6-9c14-bbb4f6704878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:99:7c:2e:d6:7c:08:c5:26:7e:3f:17:27:2b:
                    11:9e:53:cf:7f:cb:28:0a:df:e4:78:e1:c8:5f:17:
                    f1:e2:c4:51:8f:be:b5:bf:0b:77:ac:0b:c6:53:13:
                    9c:71:43:dd:73:a9:f4:3a:90:30:b8:b2:8a:61:9b:
                    94:25:ca:28:cc:9e:bc:a8:c1:7e:5b:de:8c:c5:75:
                    2a:c0:b6:bb:83:a4:eb:45:d2:18:59:85:af:22:f9:
                    0a:a2:7e:9f:a0:ea:65:0f:d7:21:c1:fb:ed:d6:2c:
                    09:4b:c2:08:06:eb:ea:9e:7f:cf:a6:8a:40:d6:2e:
                    bd:0c:d8:96:88:1d:02:01:aa:f0:f5:43:89:43:29:
                    a4:f3:62:19:c1:7c:66:97:14:59:b9:db:dc:4f:87:
                    19:34:9b:e4:5b:f7:48:46:af:24:cf:0b:16:9c:7a:
                    51:18:61:11:63:58:cf:7c:4c:c2:40:26:32:49:05:
                    f2:d3:db:c6:be:57:15:dc:19:e2:65:42:fc:af:79:
                    0a:cd:e2:0a:0f:a0:9c:2e:c4:cc:9c:ae:c3:9b:8e:
                    58:32:36:4a:fc:22:7b:ba:e7:d8:b9:94:d3:e0:ff:
                    9b:b1:12:84:77:b8:33:16:a7:e9:c0:10:3f:a5:17:
                    63:f7:a5:0b:34:b2:41:c3:1e:3e:2b:98:77:57:bc:
                    00:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BD:33:10:1A:6C:9F:93:EB:3E:A2:EE:4C:0B:DC:37:59:71:11:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a6b65c0e-b9a1-314f-9fe5-f9189e590005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:59:90:9b:f8:0b:9f:d2:d8:db:c3:c3:37:16:56:43:f0:eb:
         f1:e9:00:14:1f:59:08:06:ab:c5:94:36:bb:8d:eb:3b:31:f9:
         fb:53:18:1a:ef:e4:83:f3:4a:f4:b3:28:45:03:4b:63:15:87:
         a7:89:43:08:4a:53:c2:e3:aa:db:47:a8:64:ba:36:b6:3d:89:
         0a:6a:b8:28:fb:6d:d7:50:f4:73:06:6d:58:11:29:16:b6:85:
         76:08:32:df:f7:63:57:50:a5:5d:87:e5:ca:59:32:d6:f1:62:
         f1:31:09:8a:0a:48:db:99:72:83:0f:88:99:64:54:10:ca:65:
         24:1c:a5:fa:19:df:e9:f8:d1:34:73:11:9a:ab:3b:3a:b5:2e:
         80:3e:ba:e2:73:f7:58:38:5c:a0:60:68:23:be:62:f0:8b:85:
         8f:bc:d1:6b:cc:2a:8c:59:f3:40:59:a6:f6:9b:fb:19:de:d0:
         fc:7c:36:4f:2c:cf:fa:23:86:f3:1f:65:2f:64:0a:28:aa:f1:
         1d:5f:db:7e:96:bc:dd:18:32:68:ad:b1:31:dc:f4:d8:f7:c6:
         0b:ca:ec:3a:bb:12:af:31:d2:18:92:1a:95:48:70:68:46:b0:
         a5:9a:ac:fe:9f:3e:9d:8c:c6:9f:ab:99:fb:70:e2:74:4d:1e:
         4c:6a:80:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:54:36 2025 by rpki-client