Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38850835-0634-3c54-9b32-7aa47763622a.roa
File:                     38850835-0634-3c54-9b32-7aa47763622a.roa (raw, json)
Hash identifier:          VrC56vmSU2yK1V17U/Ivp+HKT7wEhy2qv7kyviul3no=
Subject key identifier:   97:64:89:B4:81:4F:93:B0:5F:36:F9:60:BF:FF:4C:EE:EE:BF:70:6D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849CFFF81CE11CA6E924E14D5C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38850835-0634-3c54-9b32-7aa47763622a.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     62240
IP address blocks:        166.1.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:81:ce:11:ca:6e:92:4e:14:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=90c03480-cdb1-45cb-9e06-2aa49724270a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1f:c2:3d:df:69:07:fd:20:b3:de:87:76:21:
                    11:0b:2a:08:46:a2:cb:23:03:d9:e0:20:e3:6c:29:
                    42:98:76:18:8c:91:ca:45:07:94:fd:dd:ab:cc:85:
                    08:1e:4f:5b:1d:7e:34:e6:69:f8:6f:d4:30:dc:5b:
                    82:2b:b4:52:6b:09:d9:7f:a0:36:94:85:d5:b4:57:
                    7e:97:c2:cd:6d:9d:92:76:00:3f:b6:11:1c:89:68:
                    2a:58:ad:13:89:70:f8:ee:bb:31:85:c6:82:2c:df:
                    02:e7:e4:97:b1:59:a3:87:d1:54:09:62:22:fc:1f:
                    c1:b1:3e:1d:01:3d:a6:72:27:bb:0a:b9:2a:21:5f:
                    c2:e7:7e:08:55:62:78:bf:b6:7a:1c:1d:ad:5a:68:
                    1d:56:76:99:7a:08:b1:38:88:09:60:6b:99:91:b7:
                    42:54:23:be:3e:19:b1:4b:ca:c5:46:56:4e:65:0c:
                    fe:cb:58:95:74:9c:e6:4a:84:9d:00:76:1e:71:c2:
                    53:5d:92:8c:e3:63:eb:57:26:64:35:9e:5e:dd:69:
                    38:f1:cb:da:28:12:5a:0b:12:79:d1:c5:f2:eb:6d:
                    43:18:39:cc:49:2d:40:55:44:15:e2:cd:a3:a7:69:
                    16:ca:cb:67:2e:63:42:f9:c9:60:6e:37:6d:98:82:
                    a6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:64:89:B4:81:4F:93:B0:5F:36:F9:60:BF:FF:4C:EE:EE:BF:70:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38850835-0634-3c54-9b32-7aa47763622a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:9f:f8:91:f2:0a:97:e3:e4:db:75:a7:19:8b:33:d5:56:a9:
         8d:49:07:24:d3:2c:ff:56:7d:d6:80:26:07:79:ad:19:02:c3:
         ab:44:5a:55:03:6d:82:98:bd:bb:b5:39:df:ee:d2:cd:69:56:
         1b:30:15:fd:88:99:bf:be:10:4f:42:ae:94:43:6f:bd:3f:7d:
         39:e8:01:c6:f9:f3:78:67:97:68:1f:9e:29:88:c0:1b:bc:fa:
         08:09:8b:1c:8c:10:88:40:79:3e:64:9c:d6:93:36:64:18:85:
         54:8c:19:2e:b6:ef:28:9e:e2:75:5a:60:5d:48:62:54:4a:c1:
         12:fe:ef:23:7d:6e:a8:e3:0b:44:96:59:d2:51:42:25:91:56:
         3a:48:f7:60:33:e8:d2:6b:4e:5a:1d:5d:4a:97:76:ab:f3:2a:
         73:db:96:e7:ae:e2:a2:75:fb:63:99:9b:57:7e:43:ba:50:b8:
         56:61:de:d3:a9:72:0e:fe:85:0a:b6:6f:00:6e:11:14:b4:41:
         4c:0c:5c:43:f7:c5:2e:bb:6e:f9:ff:4c:f0:40:61:d3:e3:41:
         05:d1:09:fd:a2:83:f0:03:6d:68:65:30:cf:a8:43:0b:36:08:
         8f:2d:06:43:41:26:95:24:02:7b:94:ec:50:7a:7f:49:31:6a:
         00:c7:59:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:13:00 2025 by rpki-client