Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1128574c-9ab1-3f9c-b9dd-8856a433def5.roa
File:                     1128574c-9ab1-3f9c-b9dd-8856a433def5.roa (raw, json)
Hash identifier:          l2U9zz2+swbxAopvC3qXvFE09dINdI1WAleX2JZvzao=
Subject key identifier:   84:34:97:E0:D5:45:D5:72:E0:F9:96:F7:89:5B:3D:6C:88:3C:A0:60
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845A15E086DB4ACEC01D21672C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1128574c-9ab1-3f9c-b9dd-8856a433def5.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     62240
IP address blocks:        166.1.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:08:6d:b4:ac:ec:01:d2:16:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=ffae1c23-d272-4900-b237-3ee27a6c6c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e3:c0:13:ea:ce:33:17:07:d8:1a:b3:5e:14:
                    bd:fd:19:18:0b:27:5c:81:96:f5:47:5a:7c:e6:d3:
                    70:41:0c:4c:a9:c1:00:f8:89:e6:55:d6:9c:49:2b:
                    13:e5:f6:f6:b9:27:1f:6a:0e:d0:dc:d1:0c:eb:90:
                    c1:08:eb:40:43:b2:28:e6:65:c7:c6:fe:5c:cf:96:
                    c5:30:2c:4b:f7:e2:73:38:62:a5:1d:43:6c:f1:9c:
                    47:06:d8:a2:99:1f:9a:6a:15:5b:09:0b:e7:a3:b8:
                    8c:e4:81:4d:e8:39:45:be:97:44:22:06:25:a4:fc:
                    ee:bd:a0:9b:66:b3:22:f9:85:27:06:89:6e:30:8f:
                    b5:01:24:ce:f3:48:ec:c0:ee:6a:e0:b3:44:d2:1a:
                    b5:f3:0a:cd:9d:9b:0f:61:49:db:f9:4f:1d:0d:19:
                    97:b6:05:1f:81:a4:57:02:db:25:5e:48:40:c5:55:
                    43:27:06:47:9e:c7:25:27:4e:1b:cd:91:4f:3b:c6:
                    f1:b0:06:33:e7:fd:3f:72:e0:d3:45:e9:47:dd:48:
                    5b:8f:c2:65:40:5d:c4:2b:44:9b:c3:3f:3d:83:a5:
                    fa:a5:d9:a7:5e:8e:2d:d3:af:e4:44:95:96:b2:42:
                    b1:13:ef:60:66:7e:60:4c:8e:d5:1a:3d:68:be:4f:
                    65:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:34:97:E0:D5:45:D5:72:E0:F9:96:F7:89:5B:3D:6C:88:3C:A0:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1128574c-9ab1-3f9c-b9dd-8856a433def5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:11:51:9d:0e:bb:c7:a4:4c:fc:ed:8f:89:04:28:fe:74:58:
         04:01:99:74:a0:e3:3a:1d:38:59:fa:f5:da:ea:18:67:a1:e5:
         09:a0:78:dd:03:9f:2b:73:29:96:a3:34:9a:95:79:6f:f5:06:
         a1:9c:e7:46:d6:02:ea:cd:f7:c4:80:99:ce:eb:7c:29:f7:42:
         b0:47:37:fe:97:2b:20:fb:22:d6:a5:00:87:db:64:b1:86:a7:
         2e:0a:d1:61:c9:7a:88:a5:77:1e:81:5f:e5:18:51:30:69:95:
         16:b5:13:87:3c:ee:52:8a:05:6e:4f:7c:ce:e8:72:0f:3b:bb:
         b6:e6:32:f2:45:bd:ee:ca:11:10:a0:cf:51:4b:24:78:b8:1b:
         5f:b9:45:b9:ba:04:27:ac:44:70:54:fd:d7:0b:45:4f:4d:15:
         c2:4a:67:d9:11:e4:d1:e9:1f:5d:0d:33:bc:62:20:52:4c:74:
         47:6e:7e:5b:62:dc:0b:da:f6:49:4e:d6:8c:e8:28:6c:0b:b5:
         e2:5e:a5:d6:38:bb:ea:de:97:25:57:80:d7:f6:7e:7d:fd:eb:
         23:c9:d1:8c:dc:6e:20:f6:c3:59:d9:3a:81:36:2c:ed:cc:ec:
         b3:72:9c:44:9d:b7:c8:b1:8f:40:1a:54:57:97:cf:06:f2:1f:
         ee:ac:a8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:32:16 2024 by rpki-client on console-ams.rpki-client.org