Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/97b16883-cc37-3fd3-9334-ee06ff467950.roa
File:                     97b16883-cc37-3fd3-9334-ee06ff467950.roa (raw, json)
Hash identifier:          7gfeUa8rjXCqlzL7YpKN+m585FgP+6Hx9Vq+GMrz+Q0=
Subject key identifier:   25:77:90:25:7B:57:1F:4E:96:D4:06:11:1D:3D:0E:83:E8:2B:1D:44
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849CFFF7924E9BA764A58CC3200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/97b16883-cc37-3fd3-9334-ee06ff467950.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     44477
IP address blocks:        166.1.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:79:24:e9:ba:76:4a:58:cc:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=a7bc4e0b-9e7a-4ead-a7c5-fb1820538ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:af:29:0a:be:c3:7a:e6:5e:8b:e6:4b:61:16:
                    5a:fa:49:4e:3e:e6:3f:92:cd:2a:bb:27:c2:d2:83:
                    42:4d:2f:ba:c0:d3:8c:2a:8d:2f:b6:54:0d:5f:6b:
                    9d:8a:cf:ad:8e:20:4c:d9:15:cf:41:1e:22:b3:dc:
                    c3:39:0c:36:00:00:97:88:be:fe:ac:aa:a5:4a:31:
                    b2:27:2e:4c:3e:44:ff:0d:ba:77:fc:c6:36:67:6b:
                    77:c4:27:41:0d:2c:b0:ee:9b:ad:1d:ef:5f:1f:bf:
                    cb:d6:02:d2:60:e6:cd:27:73:4b:07:2e:01:e8:5d:
                    88:f4:db:02:7b:6a:50:94:43:6b:15:d9:1f:4a:63:
                    a3:c4:9a:9e:d0:39:52:69:f9:7d:f9:d2:d8:4e:64:
                    ac:dc:ee:52:74:65:87:7c:b0:1e:68:87:2e:56:ed:
                    8c:76:b4:da:8c:58:7e:5c:9e:01:26:a1:68:d9:b1:
                    c4:ce:16:80:16:de:02:c8:cd:df:41:a9:bd:87:00:
                    89:3f:8f:a9:09:74:4f:cf:e5:bb:23:b1:27:3d:dc:
                    5b:8a:6b:6a:34:39:60:f8:79:fd:1f:f6:c5:06:0d:
                    45:36:06:da:16:c7:dd:0b:57:d1:d7:6e:fc:7c:22:
                    e8:c7:65:be:3a:09:eb:f2:22:85:33:a3:93:e5:fe:
                    af:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:77:90:25:7B:57:1F:4E:96:D4:06:11:1D:3D:0E:83:E8:2B:1D:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/97b16883-cc37-3fd3-9334-ee06ff467950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:7e:38:05:30:6b:64:1a:c9:4d:58:5f:9e:71:d0:94:c7:2c:
         f6:d0:35:58:23:a7:e9:de:e0:d1:cf:d7:e8:b7:dc:b4:d5:e9:
         99:59:34:fd:77:e8:d4:b3:85:18:ba:78:4b:70:1f:d5:8b:c0:
         b3:e5:68:ec:87:99:ce:f0:45:48:59:cf:70:be:ca:f7:a0:6d:
         54:86:fb:c2:e5:4c:dc:2f:3f:c6:83:71:98:5d:20:b9:b2:17:
         b4:b2:d7:ec:1c:69:f1:6a:91:22:a0:59:14:a3:77:ba:dc:a9:
         d0:fa:a2:8f:8b:70:f1:7d:68:ef:32:84:18:f0:fb:f0:3e:58:
         ab:fe:7d:25:8d:84:ec:02:4a:21:c2:85:88:06:50:bc:4e:5b:
         34:ff:7d:e4:46:12:ea:62:38:92:8a:01:87:53:a6:1d:fc:23:
         f1:e0:ae:72:72:b4:0b:4f:02:66:22:d8:09:46:94:fc:95:d7:
         f5:1f:95:cb:68:b2:ae:97:09:c1:2e:1a:84:e3:00:76:e0:33:
         3c:57:ba:7b:1c:ab:61:9e:2f:40:e8:2a:ab:f9:ee:37:e9:c7:
         2f:54:77:dc:ce:30:ba:5d:aa:3a:24:f1:8e:81:e6:45:ec:dc:
         a5:d0:bf:04:e6:e1:f3:af:10:f6:c5:49:32:84:e2:1d:cb:db:
         05:91:71:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:34:22 2025 by rpki-client