Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/b4fa7e98-9955-34c8-bb12-1922134062f8.roa
File:                     b4fa7e98-9955-34c8-bb12-1922134062f8.roa (raw, json)
Hash identifier:          7Mz2PJMIyowRLRH/6hY4xI7kCXNGXXM02c+UNfvJO0c=
Subject key identifier:   9D:2B:CE:DF:A1:BC:43:79:40:6D:19:C5:FE:C6:72:B4:CB:2E:F5:17
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285849CE9A5D33C1AE9A19D44C0E80
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/b4fa7e98-9955-34c8-bb12-1922134062f8.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     30103
IP address blocks:        166.108.96.0/23 maxlen: 24
                          166.108.98.0/23 maxlen: 24
                          166.108.100.0/23 maxlen: 24
                          166.108.102.0/23 maxlen: 24
                          166.108.104.0/23 maxlen: 24
                          166.108.106.0/23 maxlen: 24
                          166.108.108.0/23 maxlen: 24
                          166.108.110.0/23 maxlen: 24
                          166.108.112.0/23 maxlen: 24
                          166.108.114.0/23 maxlen: 24
                          166.108.116.0/23 maxlen: 24
                          166.108.118.0/23 maxlen: 24
                          166.108.120.0/23 maxlen: 24
                          166.108.122.0/23 maxlen: 24
                          166.108.124.0/23 maxlen: 24
                          166.108.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:5d:33:c1:ae:9a:19:d4:4c:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=05661a76-b729-4661-b113-3f5da910e1c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ba:63:af:4a:52:7f:6e:01:05:0e:53:bc:fe:
                    c1:e4:6a:fc:95:51:21:23:f3:b5:ca:c1:f5:b7:25:
                    f4:fd:f6:cb:48:7a:53:34:16:d8:6a:12:96:f5:26:
                    b5:ab:5e:30:30:df:6e:43:93:78:68:ba:60:92:5e:
                    10:38:5c:4f:9f:e1:a1:de:31:46:15:9e:c7:28:37:
                    50:14:a9:73:c0:5f:24:41:9a:e2:04:e0:08:d8:d2:
                    db:aa:63:42:bf:60:11:1d:84:6a:62:50:ff:32:3c:
                    52:13:bb:6e:4d:b3:a7:a6:bc:c6:1d:ee:c7:fe:6a:
                    d2:c1:e4:74:a9:bf:f4:6f:86:30:fb:57:57:6b:cd:
                    c4:b5:7b:81:3e:ce:32:9d:65:a3:cf:cd:0f:df:b2:
                    d0:bb:a0:d3:ac:40:f5:1a:58:6e:19:32:13:89:d5:
                    46:be:e1:8a:03:21:e5:f1:52:63:18:69:5e:90:ab:
                    20:53:9c:44:09:64:76:3b:50:2a:a7:2f:30:f1:06:
                    dc:70:b6:33:58:a9:96:90:2a:51:cc:5b:db:8f:14:
                    4e:5e:4d:4d:f2:e7:00:9e:80:be:17:c3:d0:7b:b1:
                    1f:e8:85:82:33:10:af:72:53:8c:7c:aa:55:4a:2f:
                    c6:57:4f:08:05:f4:3a:bb:66:dc:ef:20:69:32:ce:
                    59:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2B:CE:DF:A1:BC:43:79:40:6D:19:C5:FE:C6:72:B4:CB:2E:F5:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/b4fa7e98-9955-34c8-bb12-1922134062f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.108.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:41:65:75:df:8b:9b:02:ff:d2:51:b8:08:1f:1d:fd:46:b4:
         a3:cd:e0:5f:6a:e2:61:03:20:7a:e3:5f:f8:02:50:c1:df:3a:
         b2:5a:b1:67:de:99:39:3e:92:01:87:7a:57:4e:24:53:64:59:
         7a:9a:5a:bb:d7:0f:74:78:41:cc:fe:a1:5e:92:11:c1:8c:05:
         47:73:b0:d6:92:52:e0:1d:73:e4:31:73:49:fa:b6:65:f8:42:
         de:20:2d:a2:9b:12:e0:57:ae:20:1b:73:e1:09:30:cf:04:04:
         05:18:7e:00:40:d2:83:67:fc:20:3e:bc:f0:f2:cb:f2:0f:a3:
         f1:aa:31:6c:b0:8f:f7:84:b3:58:35:bc:e0:2e:28:0f:3e:36:
         9a:74:e9:13:39:5e:70:6b:0d:64:26:0a:e5:0d:31:7d:3c:a0:
         bf:61:29:1d:d4:b3:b0:78:51:8f:2a:d9:51:86:28:02:87:23:
         cb:31:6f:f4:53:dd:3d:cc:02:13:8a:ed:15:4e:77:11:21:c5:
         56:95:15:d3:80:0b:bc:f5:aa:16:7d:58:0a:e6:f4:de:e8:35:
         31:a8:98:4c:77:5c:69:2a:d1:a7:a3:3b:20:44:cd:45:de:b4:
         e1:2a:bf:24:3e:5a:3d:e6:e0:3b:5d:28:9c:a9:a1:4c:80:6a:
         bd:5e:1f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:29:35 2025 by rpki-client