Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/37fbaa82-e014-3250-b289-7d0f92614775.roa
File:                     37fbaa82-e014-3250-b289-7d0f92614775.roa (raw, json)
Hash identifier:          npJQWZ3gdph0Vc6W92xHlM3jgx5JZZxM2X97ZLuwrz0=
Subject key identifier:   64:44:A7:81:CC:E5:3E:8A:10:59:20:B8:73:EA:0E:72:C1:E4:B9:0D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B92DD419F7A11FF665A71DE00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/37fbaa82-e014-3250-b289-7d0f92614775.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     58061
IP address blocks:        166.0.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:41:9f:7a:11:ff:66:5a:71:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=6969d4b6-214e-41dd-8e2b-7f47567a6847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f6:99:a5:b3:d3:9e:06:96:5d:fd:6e:3d:e7:
                    19:dd:1d:65:7e:cc:cc:c8:d2:63:ea:fd:d9:16:b4:
                    a1:87:87:3d:41:a7:ab:1f:20:f0:86:74:1b:8d:77:
                    83:c9:a8:60:1e:b4:1f:b3:a7:00:99:d4:83:87:8c:
                    a9:a1:e9:71:0e:d9:8b:e0:5b:68:f5:a9:81:42:bf:
                    e1:fc:c2:a0:ce:fd:11:c7:2e:8d:b5:d4:ea:c0:24:
                    36:7b:e9:f8:1a:5c:40:e8:f2:31:e7:1f:2d:d1:b8:
                    6e:65:5e:c4:c3:13:47:ce:0f:df:98:75:df:4a:5d:
                    5c:eb:23:dd:78:ea:06:6d:08:0a:a8:38:a8:18:27:
                    42:e1:bb:63:2a:21:e0:a8:a7:14:8b:f6:ae:71:1d:
                    ab:91:72:18:dc:c4:18:f4:3e:92:4c:e2:78:6e:bb:
                    39:1c:12:86:6f:f6:1f:82:ac:a9:39:7f:cf:e7:af:
                    4d:06:86:7d:28:b0:44:35:2a:22:05:92:3e:c9:1f:
                    8d:cc:a7:d5:d6:cf:94:1a:19:a6:69:36:85:64:05:
                    46:38:d9:08:f6:70:c5:27:5c:ad:ca:18:29:2e:2f:
                    f6:b5:fa:03:2f:e7:62:53:c9:70:21:d7:66:cd:d9:
                    2e:7b:4e:36:45:36:c4:14:af:34:aa:94:a1:46:b6:
                    bd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:44:A7:81:CC:E5:3E:8A:10:59:20:B8:73:EA:0E:72:C1:E4:B9:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/37fbaa82-e014-3250-b289-7d0f92614775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:02:dc:20:b9:92:23:9b:a8:e6:ec:20:9a:e3:7e:b4:bc:27:
         6e:0e:f2:39:02:a2:18:0f:fe:17:c5:17:4d:a6:cb:3e:74:0e:
         d1:d7:51:4b:49:c0:5b:3d:d7:60:a3:c4:42:98:2e:91:b8:1e:
         4b:00:50:d2:6c:62:00:31:1d:35:1e:6f:30:33:1a:fb:c3:71:
         82:cc:a4:93:52:a4:59:35:cb:52:bc:67:fd:47:be:9b:e7:1a:
         25:7c:07:47:cb:de:c7:b6:22:e9:ec:c0:bc:fe:a5:7c:0f:30:
         28:28:96:75:45:05:7d:ff:3e:c0:c1:37:c2:a5:45:ff:b1:42:
         ca:48:5d:3e:74:92:33:01:1c:fc:04:ab:d5:56:bf:71:cd:83:
         e7:b0:f5:14:ea:51:67:43:bf:4b:65:be:11:e9:84:6f:48:fa:
         b7:d3:38:f2:42:87:32:d1:04:f8:cd:cc:f2:8e:01:94:79:03:
         2b:58:bd:30:a0:02:ef:73:68:6f:41:d9:e4:b7:1a:e7:40:83:
         21:75:03:41:5d:a0:1b:3b:e5:59:3f:f4:b7:77:f6:9e:b4:96:
         8c:79:13:5d:fc:13:cc:34:53:ed:8c:78:e5:b4:ec:1a:3d:6e:
         70:ee:c2:a6:bd:ab:4f:5a:68:d7:1b:56:62:b0:4f:2f:28:5e:
         98:e3:2b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:29:06 2025 by rpki-client