Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ad69c835-8597-3bc4-916a-08947806dc3a.roa
File:                     ad69c835-8597-3bc4-916a-08947806dc3a.roa (raw, json)
Hash identifier:          up5MCrhaiBtBUKqM3x1NIYLgZ92Q4BdEerkKHQnUZ/k=
Subject key identifier:   5B:57:65:6A:0C:50:72:6D:19:6D:79:8F:9D:78:9C:27:CC:65:56:E1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AB2212A1865B981A48DB6BC00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ad69c835-8597-3bc4-916a-08947806dc3a.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     58061
IP address blocks:        166.1.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:2a:18:65:b9:81:a4:8d:b6:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=d24ab4d4-0811-4ec9-8f28-6f076988b066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:64:c4:11:37:57:da:05:c4:e0:71:eb:f0:a5:
                    55:e4:27:58:1f:e1:78:e6:c3:04:ea:41:af:16:fa:
                    99:2f:8f:29:6e:ab:43:7c:f2:2e:19:9b:2a:81:a9:
                    de:b0:2a:c6:bd:bb:d8:d1:18:10:97:b3:40:de:c6:
                    0b:f9:be:9a:b5:eb:e6:ff:cb:07:fa:87:7f:5f:3a:
                    b8:08:85:b2:a8:d6:3a:c4:98:d3:19:ff:7c:65:92:
                    25:a8:10:e9:8e:6a:f8:77:f0:76:99:23:7a:d7:97:
                    f8:b0:b4:57:4b:ca:d5:76:06:8c:49:18:61:3a:a1:
                    2f:55:d4:e9:b5:11:99:ac:13:74:91:7d:98:bf:25:
                    e1:63:21:12:57:cb:f2:dc:6e:47:f5:39:bb:c4:17:
                    51:53:99:68:59:71:06:8c:90:f1:83:23:36:b0:7c:
                    6e:aa:0a:8f:62:a5:2c:6f:9c:5e:65:3f:b8:b8:52:
                    2c:39:d8:e4:12:4f:45:44:94:8f:0c:c6:9e:37:0d:
                    59:70:1e:95:d9:2e:8f:af:7e:89:54:08:38:6b:f9:
                    cc:ca:29:71:b7:ab:f6:d3:08:94:8d:71:64:55:71:
                    00:ed:cd:f4:83:d2:c3:62:bb:7c:5f:bf:f3:fb:bd:
                    ab:bc:fd:8d:aa:5f:d3:fc:c9:db:7e:68:ce:f0:37:
                    19:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:57:65:6A:0C:50:72:6D:19:6D:79:8F:9D:78:9C:27:CC:65:56:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ad69c835-8597-3bc4-916a-08947806dc3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ac:af:ae:dc:50:d7:11:bf:1b:a6:7d:ea:2f:58:de:e2:51:
         ee:d2:6d:4f:53:08:ce:79:75:b9:eb:fe:d7:a2:4e:64:da:74:
         3e:1e:ff:df:74:41:db:0b:c0:a2:d6:36:84:38:d9:51:16:12:
         91:5a:f5:e0:70:31:6e:4f:80:6d:b7:6a:3d:9a:90:4d:48:82:
         7e:ec:cd:3d:d4:e4:8a:b0:af:30:df:19:5a:ba:86:94:e8:07:
         f6:32:41:b4:07:81:27:ff:a0:ee:40:55:24:13:28:84:65:d7:
         49:de:74:47:7f:ac:d6:ad:b2:05:4a:09:a7:fe:8b:e0:2c:4d:
         37:b3:83:58:c8:66:ff:57:02:a5:79:65:7c:74:5f:44:f1:4f:
         4e:68:0e:11:65:b2:60:3b:8f:ef:20:61:54:99:71:f1:d8:64:
         7b:8f:80:0f:ae:21:81:94:e9:ee:f7:6f:9c:c0:47:f3:75:eb:
         b5:37:25:ac:49:ab:6b:db:0f:8a:c4:be:c4:e9:25:30:3e:f8:
         3a:c9:91:e5:69:89:3d:89:78:72:6e:d3:3c:15:f2:b3:13:de:
         b6:7e:6b:d7:4a:f6:54:63:73:ff:b0:4c:76:e5:7b:22:7f:3a:
         d6:5d:7c:4c:b8:df:fb:d7:66:ac:3a:23:69:e2:ed:26:07:e2:
         4e:2d:4f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:04:33 2025 by rpki-client