Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7fdae813-7133-3cd1-adb6-2ab99f143261.roa
File:                     7fdae813-7133-3cd1-adb6-2ab99f143261.roa (raw, json)
Hash identifier:          0ujNmdiA4ueIZ+MYtrbIYC+UHv7u+pi1QE4hHjOaX2A=
Subject key identifier:   E2:D0:3C:D7:C0:FA:9C:D4:35:2C:A6:CE:AA:B2:00:45:8A:02:D3:A0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849CD34BEF4F39846903B87DA80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7fdae813-7133-3cd1-adb6-2ab99f143261.roa
Signing time:             Sat 10 May 2025 01:00:47 +0000
ROA not before:           Sat 10 May 2025 01:00:47 +0000
ROA not after:            Fri 08 Aug 2025 01:00:47 +0000
asID:                     401152
IP address blocks:        166.0.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cd:34:be:f4:f3:98:46:90:3b:87:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 10 01:00:47 2025 GMT
            Not After : Aug  8 01:00:47 2025 GMT
        Subject: CN=dc28c3e1-cda6-451b-b83d-66fa8e016dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8b:46:70:57:b6:6f:b7:dc:89:73:8f:23:cf:
                    bc:92:86:d2:eb:27:ca:50:81:ab:ce:ce:67:20:ad:
                    e3:79:2f:b7:f2:b3:b7:b5:01:0d:c0:bc:87:b0:2f:
                    e4:80:eb:5d:68:56:04:0c:29:14:69:70:fb:cd:e3:
                    49:bb:4f:43:be:0a:67:e0:41:5f:7b:92:a3:75:4c:
                    99:79:7b:04:88:18:7d:46:61:6d:2a:39:55:34:cf:
                    2d:b1:56:e3:20:5f:e0:3b:70:57:05:4a:7a:ee:8d:
                    27:99:c6:06:11:fa:b3:79:d7:59:8a:38:a6:e2:f5:
                    c2:63:96:b7:b8:b8:a2:f1:91:fe:d6:20:86:74:b1:
                    c3:de:86:fe:d1:e4:e3:64:fe:35:57:5c:da:74:86:
                    87:a0:70:b9:8f:a4:50:63:47:3f:94:a1:bb:27:b5:
                    f5:8f:83:4b:47:71:35:a9:fc:6f:fb:11:9b:65:f9:
                    b9:8c:c4:c2:18:04:f5:ca:a8:b2:e1:06:f3:fe:b8:
                    2d:a8:6b:8e:d6:9e:d7:e5:15:9f:9c:35:77:35:23:
                    ea:40:cb:05:ba:86:9f:b8:3e:54:6a:95:0f:60:ed:
                    4e:43:d3:7f:05:f9:6e:42:65:35:dd:68:ba:e0:2d:
                    d6:56:5e:90:53:2a:6d:25:c0:8c:65:8b:70:6d:3b:
                    3a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D0:3C:D7:C0:FA:9C:D4:35:2C:A6:CE:AA:B2:00:45:8A:02:D3:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7fdae813-7133-3cd1-adb6-2ab99f143261.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:08:14:10:ec:13:60:60:03:0e:3a:80:a6:85:33:3d:f5:a4:
         47:29:2a:65:5a:67:e8:09:ec:50:87:02:e8:aa:ab:a9:41:92:
         12:da:07:a2:ef:bf:1b:b0:e5:26:ff:b5:3b:7d:46:1f:e0:60:
         40:96:f8:17:1a:95:e2:03:9d:29:f9:76:00:34:28:84:02:8b:
         8c:72:43:59:3c:26:9c:f5:fa:85:cc:3d:74:f9:5a:b9:c2:37:
         16:69:95:ab:95:71:e5:a9:49:37:33:41:96:bb:02:08:bd:2c:
         a0:b3:8c:a8:b3:ab:ef:a6:5d:67:61:30:8b:4c:63:1c:a0:82:
         f0:f9:c0:d7:49:6e:3e:31:81:50:bd:be:fc:84:50:8e:fc:b0:
         74:9d:a6:01:18:55:f2:c1:e7:b4:69:6b:28:5b:8b:d5:dd:28:
         e5:2c:f0:7e:8a:97:d3:fa:ee:e2:3e:9a:e4:e7:35:4d:59:e8:
         e9:48:d3:34:d9:61:07:b5:80:b2:f0:66:41:67:91:48:ab:22:
         de:89:4e:2b:ed:03:4f:00:8c:ee:6c:13:4a:b3:34:d2:ea:6a:
         ae:da:68:90:93:79:30:79:79:87:71:18:a4:39:e4:62:c4:c0:
         24:a9:d2:16:47:62:8b:22:83:20:b3:82:32:86:fd:e4:ac:4e:
         49:66:4b:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnNNL7085hGkDuH2oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDUxMDAxMDA0N1oXDTI1MDgwODAxMDA0N1owLzEtMCsGA1UEAxMk
ZGMyOGMzZTEtY2RhNi00NTFiLWI4M2QtNjZmYThlMDE2ZGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoItGcFe2b7fciXOPI8+8kobS6yfKUIGrzs5n
IK3jeS+38rO3tQENwLyHsC/kgOtdaFYEDCkUaXD7zeNJu09Dvgpn4EFfe5KjdUyZ
eXsEiBh9RmFtKjlVNM8tsVbjIF/gO3BXBUp67o0nmcYGEfqzeddZijim4vXCY5a3
uLii8ZH+1iCGdLHD3ob+0eTjZP41V1zadIaHoHC5j6RQY0c/lKG7J7X1j4NLR3E1
qfxv+xGbZfm5jMTCGAT1yqiy4Qbz/rgtqGuO1p7X5RWfnDV3NSPqQMsFuoafuD5U
apUPYO1OQ9N/BfluQmU13Wi64C3WVl6QUyptJcCMZYtwbTs63wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOLQPNfA+pzUNSymzqqyAEWKAtOgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvN2ZkYWU4MTMtNzEzMy0z
Y2QxLWFkYjYtMmFiOTlmMTQzMjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB0IFBDsE2BgAw46gKaFMz31pEcpKmVaZ+gJ7FCHAuiqq6lBkhLaB6Lv
vxuw5Sb/tTt9Rh/gYECW+BcaleIDnSn5dgA0KIQCi4xyQ1k8Jpz1+oXMPXT5WrnC
NxZplauVceWpSTczQZa7Agi9LKCzjKizq++mXWdhMItMYxyggvD5wNdJbj4xgVC9
vvyEUI78sHSdpgEYVfLB57Rpayhbi9XdKOUs8H6Kl9P67uI+muTnNU1Z6OlI0zTZ
YQe1gLLwZkFnkUirIt6JTivtA08AjO5sE0qzNNLqaq7aaJCTeTB5eYdxGKQ55GLE
wCSp0hZHYosigyCzgjKG/eSsTklmS6U=
-----END CERTIFICATE-----
Generated at Sun May 11 15:24:34 2025 by rpki-client