Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f96e326e-d21e-3d65-9a54-8f133cae9f34.roa
File:                     f96e326e-d21e-3d65-9a54-8f133cae9f34.roa (raw, json)
Hash identifier:          Mhmj5kYQX0aA7VKB3kJv0TIGQaiX+qf8I98ZXakW4aQ=
Subject key identifier:   D8:43:7C:7F:F1:B7:9E:F1:6F:60:59:AA:F6:0F:96:E2:F6:95:93:48
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849B57A219AF149705E47311480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f96e326e-d21e-3d65-9a54-8f133cae9f34.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     58061
IP address blocks:        166.1.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:21:9a:f1:49:70:5e:47:31:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=6253f627-4b38-425e-a24c-921e51fb70d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c9:72:ad:a9:ea:2d:fa:2a:ed:c7:66:b3:9b:
                    a6:1b:05:d9:07:43:8b:73:a1:36:bc:4b:92:81:3e:
                    aa:86:f8:79:88:2f:af:50:a1:f2:27:d9:5d:38:57:
                    b7:f5:00:46:74:31:89:5f:fd:89:c5:6e:f4:5a:96:
                    d3:36:74:d7:fd:0f:17:f7:4c:23:ce:6e:5d:c2:cb:
                    c1:db:7d:fb:17:c0:93:0b:39:6c:62:38:fa:18:e8:
                    15:c8:92:8b:57:f7:27:44:a8:92:c8:a2:fe:7a:6a:
                    38:a7:16:47:6e:b6:41:4b:98:86:95:89:b5:7b:69:
                    01:57:db:26:db:9c:d7:a5:76:d0:91:45:3d:e7:e9:
                    d4:80:fd:43:f9:a3:3f:c5:d5:40:96:56:65:84:1a:
                    bc:d9:37:16:46:80:6b:6a:e3:93:19:39:04:d7:58:
                    df:fd:4b:3a:fe:6d:38:b4:78:b9:0b:82:82:1c:12:
                    aa:78:b5:66:17:cf:a4:5d:56:e6:74:e3:94:b3:c2:
                    8d:df:ed:8d:dc:38:42:5b:c6:a7:39:4a:23:d9:d0:
                    3a:8a:e8:c4:b7:8e:15:02:60:e0:22:b9:c9:46:64:
                    ad:96:fa:eb:fa:8a:d5:78:9f:ab:ee:fb:3a:dc:e1:
                    88:86:05:37:9c:e5:ef:a8:73:a2:17:0d:88:1f:b0:
                    b9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:43:7C:7F:F1:B7:9E:F1:6F:60:59:AA:F6:0F:96:E2:F6:95:93:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f96e326e-d21e-3d65-9a54-8f133cae9f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:3e:d6:b2:94:b4:b2:8b:2a:44:61:f9:8e:b2:8c:e3:ba:88:
         67:c0:bc:d6:4c:60:f9:80:bf:7f:76:a1:7b:59:fa:d7:30:df:
         4d:84:22:15:f0:c8:21:2f:43:92:2a:60:ee:3f:13:0b:b3:a0:
         f6:2e:94:51:a0:88:74:18:23:00:f7:fa:92:15:21:a9:47:6d:
         c8:7c:09:18:4b:0d:cf:63:60:24:b2:52:7b:33:5b:5f:4a:26:
         68:7b:28:a1:a5:28:52:aa:d7:5a:c3:26:ff:67:a7:94:1b:af:
         60:53:66:ea:6d:7b:86:44:09:51:91:fd:24:62:6d:c7:8a:0e:
         75:95:41:1f:34:4c:9f:8c:38:bb:0c:28:b8:7b:3f:3e:3f:59:
         53:47:6d:fb:75:02:45:1b:f0:ab:66:fd:a9:38:46:2f:ef:56:
         b8:95:dd:d9:f2:6c:d1:9c:76:1e:23:92:7f:93:02:0f:94:a7:
         9d:26:f2:22:a5:9c:23:50:07:29:d9:20:43:d0:69:3e:2b:15:
         80:cc:48:75:55:12:72:04:d2:29:17:a2:97:a0:f0:4d:09:2d:
         51:68:16:66:c8:2a:f6:de:68:60:f0:2a:30:e5:27:4b:92:66:
         c7:52:40:87:e1:35:7b:78:ec:a8:41:74:cd:e2:c5:96:78:ae:
         55:f1:2d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:27:02 2025 by rpki-client