Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/63797bee-c802-39a7-9de4-823f9e329acb.roa
File:                     63797bee-c802-39a7-9de4-823f9e329acb.roa (raw, json)
Hash identifier:          nAaSt8AU86b4Ga/cetJrWYzZI7JGBD3kwtX94jJ8Mkc=
Subject key identifier:   FA:A3:E0:20:AA:E8:39:91:FF:0A:AC:DA:5D:CF:2E:24:E5:71:88:D1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849B57A22087225C0669B6A3C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/63797bee-c802-39a7-9de4-823f9e329acb.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     58061
IP address blocks:        166.1.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:22:08:72:25:c0:66:9b:6a:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=112f4f0a-08c9-43a4-a3a2-3772b342b291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6c:b7:f5:e7:7d:92:93:af:20:81:32:f2:a4:
                    b9:af:c5:1a:32:ea:ce:85:56:8e:cf:a6:80:2f:4b:
                    e7:b8:d1:bc:75:fa:f9:8c:cd:b9:bc:ad:0e:ee:ae:
                    d4:e4:24:55:69:19:80:61:42:48:99:95:e7:2e:5f:
                    bb:79:d6:4b:b0:84:87:3f:ac:94:99:3b:fc:ed:25:
                    e7:e4:0e:3b:f2:4d:a9:ef:b3:48:c2:8f:22:34:d1:
                    6f:b9:1f:8f:66:65:ee:25:db:c6:39:1a:e7:60:e2:
                    f3:6b:a8:3b:3a:5c:d1:f5:06:a5:0c:37:eb:90:ff:
                    02:e8:56:41:b5:0f:56:42:b9:85:46:b3:ae:77:8b:
                    74:4a:c9:87:a7:5c:08:5a:d3:96:a8:f3:2e:72:01:
                    74:11:3c:38:b6:1f:28:b4:4c:f1:69:63:83:52:c3:
                    02:4f:7a:fa:79:c8:2c:76:bd:62:3f:3c:7e:e7:a0:
                    f8:db:cf:f1:81:6c:2e:c4:6b:4f:98:46:55:35:9a:
                    e2:a2:c8:25:55:37:2d:9a:85:55:d0:38:b6:db:02:
                    0a:fb:b4:50:c6:d3:ed:f3:42:f0:3f:99:df:bd:dd:
                    a5:8c:19:f2:90:d8:e3:fc:c7:78:43:9d:22:f4:2c:
                    0b:d7:90:97:2d:3b:7e:d4:47:63:bc:cc:b6:32:f4:
                    c0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A3:E0:20:AA:E8:39:91:FF:0A:AC:DA:5D:CF:2E:24:E5:71:88:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/63797bee-c802-39a7-9de4-823f9e329acb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ab:68:e4:16:c8:b7:56:7b:b2:ab:6b:1a:a7:65:ff:c0:69:
         e3:2d:9b:a9:bf:f7:e7:d3:90:b6:3b:e2:9e:be:46:6a:d0:1d:
         73:51:77:c6:72:c8:63:94:f9:ba:e8:04:df:1d:d1:16:07:c9:
         d9:7c:bf:64:e6:3b:d7:14:74:c4:7c:92:cf:02:25:0b:1e:a8:
         1b:0c:85:da:15:38:1d:ee:20:da:15:06:12:64:d5:d8:cf:66:
         cd:86:b7:48:8a:7d:c0:e6:ff:7c:b2:4d:83:4b:de:ac:af:15:
         d8:30:03:07:3b:0c:4d:6b:31:37:56:32:24:8a:0e:6c:47:58:
         ae:e2:f9:1c:aa:12:94:61:6c:b1:d3:90:d9:84:58:b9:b1:cb:
         8d:2a:3f:53:81:08:c0:01:25:51:a2:dd:7e:78:d0:b4:43:4b:
         11:f0:8b:df:27:61:31:9f:cf:d7:3c:1b:a7:93:3e:81:3a:ef:
         17:ae:b3:51:d9:19:9d:c2:0b:dc:61:7e:ac:25:6a:32:fe:6f:
         f8:87:a6:39:f6:85:07:42:8e:41:9f:82:0d:21:68:c6:fd:fb:
         db:ed:58:58:9a:6a:65:06:b1:dd:40:bf:3d:37:eb:43:aa:51:
         5c:80:64:46:4b:77:81:a4:18:d8:27:15:8f:d6:21:be:7a:6a:
         5f:f3:ae:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:56:23 2025 by rpki-client