Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec3aced2-c1bc-3346-b0f6-35cc595b961c.roa
File:                     ec3aced2-c1bc-3346-b0f6-35cc595b961c.roa (raw, json)
Hash identifier:          S0Vn8cGCqvFBWyUgH3jOdK/8sxlJQrP2RC1ZcnWPM+I=
Subject key identifier:   36:43:32:FA:FD:ED:D4:02:11:4A:B5:E1:48:65:14:33:FB:C6:7C:7B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849CFFF7D3DD4BF1531CD480DE0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec3aced2-c1bc-3346-b0f6-35cc595b961c.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     62240
IP address blocks:        166.1.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:7d:3d:d4:bf:15:31:cd:48:0d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=777cd12e-48f3-4f84-82ae-0bac8168934f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6c:b7:78:bc:9d:3f:c7:78:87:2d:22:93:83:
                    ad:ea:ee:c8:1a:0e:35:a0:72:7f:73:d9:13:cb:c3:
                    89:f6:27:6b:8e:ab:e3:26:bc:24:1d:92:85:61:b0:
                    8c:e2:91:63:01:e7:cf:cf:12:66:7e:78:c5:8e:44:
                    3f:65:bf:be:b4:25:95:9f:31:ea:2c:35:4b:ff:2a:
                    4b:36:34:de:6f:74:e2:3f:5a:cf:4e:b9:37:4b:dc:
                    f8:10:a4:f9:92:c0:be:b2:3e:b1:34:74:31:a8:cf:
                    12:c8:fe:03:40:d2:93:0b:17:f4:e9:ab:2e:82:37:
                    2b:5e:ea:5f:1a:0e:dc:a4:82:75:ab:af:dd:ac:d3:
                    67:16:f1:ce:24:50:58:3d:92:df:ac:95:a7:c0:c5:
                    88:68:85:c2:97:e1:89:0e:44:e6:fa:a8:4d:7e:2f:
                    a7:ce:3f:36:a9:d0:a5:98:dc:d1:6e:8d:d2:a2:6c:
                    df:e8:3f:8c:2e:f5:92:42:34:d4:38:6f:05:3a:a8:
                    76:f2:e1:c9:05:a3:01:cf:69:b1:81:5a:ea:7a:39:
                    80:ad:22:49:e8:0a:2b:a1:85:7a:0e:70:26:6c:16:
                    09:2e:d7:75:9c:62:3c:06:79:83:5d:84:a6:a0:fb:
                    bc:90:f0:94:09:99:68:db:bf:a0:8b:62:d7:c8:39:
                    bb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:43:32:FA:FD:ED:D4:02:11:4A:B5:E1:48:65:14:33:FB:C6:7C:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec3aced2-c1bc-3346-b0f6-35cc595b961c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:06:5e:a2:11:02:7c:3a:e9:c9:18:11:20:d2:6a:fc:d1:2f:
         45:46:57:6d:00:8e:20:40:8a:96:97:9a:b4:23:c9:f3:1e:dd:
         36:91:af:c8:d7:b9:12:fc:85:83:0d:9c:dd:be:6a:84:48:44:
         97:c2:4c:df:5e:af:58:7b:b9:03:b4:7f:2f:3d:36:c9:28:74:
         58:f0:65:25:66:18:c0:3e:b2:f2:03:6c:25:f9:c5:7d:66:80:
         d1:b5:f2:c2:80:fd:5f:cf:9a:42:af:2f:4c:96:e3:2b:61:00:
         a1:1a:57:0b:02:74:e2:fb:11:f5:a4:d8:63:da:0d:b7:26:95:
         ff:03:77:e7:31:21:54:5e:07:52:00:fd:a1:8b:a0:a9:80:25:
         83:f8:14:02:f2:ee:db:31:94:02:37:a0:f7:64:dc:60:72:eb:
         b6:a4:d1:86:99:83:8d:62:49:dd:f6:f9:ca:13:f2:e2:ef:ed:
         2b:96:90:03:97:e0:fc:0f:29:1a:50:58:00:ba:5b:57:85:fa:
         e2:ef:32:ad:52:49:44:72:68:ef:61:fd:9e:ed:26:75:9c:36:
         7d:e1:09:24:8a:77:89:7a:a1:0d:0c:78:f4:90:07:85:2b:45:
         72:41:0f:36:69:dc:9a:76:46:9c:c1:eb:a9:a3:69:df:bb:0b:
         df:fc:74:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:10:00 2025 by rpki-client