Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a82ada52-0dca-3dd7-ad29-cd834dbada96.roa
File:                     a82ada52-0dca-3dd7-ad29-cd834dbada96.roa (raw, json)
Hash identifier:          8JneNpM9ifPU37hh4eiK97vovw6miNnBF7gMBzbS9u8=
Subject key identifier:   59:36:E4:49:C5:0B:57:E9:D2:17:3B:8E:0D:9B:A5:C1:70:0F:45:11
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A794DFF91D39CB81E18B67700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a82ada52-0dca-3dd7-ad29-cd834dbada96.roa
Signing time:             Thu 10 Jul 2025 16:30:44 +0000
ROA not before:           Thu 10 Jul 2025 16:30:44 +0000
ROA not after:            Wed 08 Oct 2025 16:30:44 +0000
asID:                     213823
IP address blocks:        166.1.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:79:4d:ff:91:d3:9c:b8:1e:18:b6:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 10 16:30:44 2025 GMT
            Not After : Oct  8 16:30:44 2025 GMT
        Subject: CN=799eb9c0-3fbd-47d9-861e-abfd0c0196b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3f:85:fd:01:7f:88:ef:9d:e7:4b:64:4f:e9:
                    ef:43:ef:ee:78:34:29:43:f5:7d:b1:2c:21:86:71:
                    1c:57:36:14:ab:04:0b:57:7a:35:3e:ef:2a:0e:19:
                    74:cd:69:d4:b0:93:22:81:37:60:f2:25:cd:02:82:
                    c2:a6:48:86:ae:0f:2a:78:b2:28:d4:c5:e8:46:3f:
                    39:6d:4a:f0:57:e8:e9:0d:64:48:26:1e:85:5c:c2:
                    88:ff:84:02:0b:30:3e:52:86:df:99:6a:3d:33:33:
                    f3:d6:40:c3:1f:ac:ce:32:dd:ae:ba:5f:ac:5a:0a:
                    ae:1f:67:74:8c:46:88:c3:85:bd:8c:af:ab:2e:85:
                    ea:45:9e:6d:d6:69:0b:c4:7e:be:d7:d4:71:20:f4:
                    7d:b1:04:37:04:f7:36:16:86:0c:d9:37:2b:26:66:
                    c0:7a:53:35:c6:29:f6:7a:ac:3b:c1:2b:ff:6a:46:
                    ad:b8:f6:7f:80:2d:6f:3a:19:cd:a8:75:f2:5d:59:
                    27:a7:1d:7a:a1:06:80:11:7e:fd:a9:d1:a3:50:41:
                    aa:f4:51:13:92:54:99:65:ea:4d:6d:75:0c:11:8a:
                    8d:15:1f:90:d0:c6:d1:b9:38:31:74:95:de:76:bf:
                    8f:18:95:3f:87:f5:93:1c:89:91:59:ca:44:f1:85:
                    60:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:36:E4:49:C5:0B:57:E9:D2:17:3B:8E:0D:9B:A5:C1:70:0F:45:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a82ada52-0dca-3dd7-ad29-cd834dbada96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:d0:4d:cf:b3:64:a5:54:2f:bc:05:35:e0:f9:48:6f:33:b6:
         cc:53:82:8a:d4:df:2f:fa:cf:43:0f:24:78:d4:56:f0:9c:7b:
         57:b1:62:eb:f6:fe:6d:56:10:10:ad:ef:40:47:aa:96:ab:db:
         59:c0:30:aa:e1:f2:34:65:a0:e8:71:95:15:93:87:fd:b2:54:
         92:66:81:5d:fe:02:93:6a:81:4f:64:db:89:97:a0:fe:70:9e:
         a8:6e:15:e5:80:14:f9:11:19:49:70:ea:dd:4c:9d:22:ab:5a:
         29:ad:9b:2e:5a:ed:ac:6f:e2:41:26:42:8e:cb:3b:de:da:4c:
         a5:1a:a7:1f:41:0c:97:ee:7c:96:73:9b:5e:88:4a:47:42:c0:
         1c:ae:e0:f7:af:17:09:05:9f:c3:59:00:6e:57:63:e1:11:54:
         62:64:6d:af:e9:98:6b:f1:27:af:73:9f:54:47:9c:f5:21:e5:
         d5:8d:8f:3a:56:a2:c9:e7:f3:d1:23:41:35:54:09:82:ea:00:
         9a:9f:2d:d4:41:1a:c5:06:ee:57:2c:19:1e:41:63:17:53:81:
         f9:32:6d:3c:ab:a2:96:de:30:43:06:25:9b:9b:41:e2:fe:00:
         cb:ab:34:1f:00:e4:64:d6:39:38:e9:a4:d3:3a:d0:7a:d8:01:
         f4:2c:d6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:56:47 2025 by rpki-client