Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28ee6e1d-7405-3476-94c7-9b33c7f1f55c.roa
File:                     28ee6e1d-7405-3476-94c7-9b33c7f1f55c.roa (raw, json)
Hash identifier:          KbBTR0xYfijb2pIUh+FMYbIBron+D9zOq+tNvRFrqig=
Subject key identifier:   6C:B9:8B:AD:AA:FE:B6:83:53:DC:EA:A8:41:96:6F:49:BC:00:80:B0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847600B9C81EB2E32826D3AC780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28ee6e1d-7405-3476-94c7-9b33c7f1f55c.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     62240
IP address blocks:        166.1.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:9c:81:eb:2e:32:82:6d:3a:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=59fbcbd3-d39e-4d55-a5be-aadbc66158cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:23:b0:db:10:65:51:36:34:8b:72:77:04:7d:
                    c9:92:23:51:a5:a1:46:07:99:68:8a:db:53:2c:c2:
                    08:17:54:c9:9a:52:fb:45:c2:ab:32:2d:c3:b3:df:
                    03:48:4c:bc:f4:a1:2a:68:48:3d:0d:6f:f1:38:24:
                    cf:3f:ca:b9:60:df:a2:76:7c:c7:73:38:4b:09:65:
                    60:1c:63:a1:5a:8a:df:f0:2f:cf:3b:14:c5:cc:61:
                    9f:8c:17:0f:d9:12:97:37:0e:dd:bc:02:7f:09:61:
                    dd:1e:09:ec:81:a5:3e:f3:19:0b:2b:4f:9a:fd:d7:
                    65:6c:04:71:00:ec:0c:62:2a:46:cb:39:74:11:6f:
                    14:79:c5:e3:94:2d:73:44:8f:67:a8:29:b8:a7:91:
                    49:04:86:b1:a5:c2:04:69:7b:50:6a:e7:ef:0a:a9:
                    20:3e:e6:f4:1b:e3:fc:d1:da:db:39:f8:51:62:87:
                    75:fb:57:28:05:a6:72:79:b0:f0:a2:67:8d:e8:74:
                    ab:b0:95:87:8f:3b:fb:9b:5f:6c:69:82:53:8f:b3:
                    e7:4a:b6:44:a8:14:9c:20:2d:28:1e:c0:1c:83:b7:
                    be:d0:bc:87:9a:9b:df:15:6d:09:a1:07:95:27:be:
                    79:c6:ce:f1:e6:cb:66:56:09:03:50:72:3d:f7:29:
                    b5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B9:8B:AD:AA:FE:B6:83:53:DC:EA:A8:41:96:6F:49:BC:00:80:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28ee6e1d-7405-3476-94c7-9b33c7f1f55c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:54:36:6f:b4:a4:b4:eb:14:17:0a:cc:67:bb:21:31:b9:6b:
         89:3f:f6:62:b0:70:3e:d7:e3:48:4d:d4:f0:8c:76:3c:11:ca:
         5e:ca:a0:0c:7c:56:1e:4d:59:ba:1f:1e:06:5e:58:a1:bf:cb:
         2a:c2:c2:6d:cb:5e:c4:24:d0:fc:dc:68:9c:fa:17:0f:19:12:
         80:76:71:46:08:f3:7b:30:65:ce:f7:4a:0d:f2:8e:d0:4a:93:
         de:33:30:a7:93:3e:75:b9:23:6d:1b:7e:cd:0c:55:55:80:f8:
         a0:01:5d:21:16:9b:81:02:e0:51:a8:c2:47:51:2b:cb:13:7e:
         d1:75:d1:a9:cb:19:86:d8:c0:cb:66:5e:5f:53:01:37:10:d0:
         a3:9c:18:2b:5d:a9:1f:2d:e0:7a:e3:0a:a9:aa:c9:36:d3:32:
         84:71:ff:71:7d:45:51:ed:94:b2:94:ec:07:e6:1c:5e:a1:58:
         fe:66:b8:73:f9:86:c7:c2:23:05:27:50:9e:8d:81:9b:7a:1e:
         ab:e2:e6:9f:26:10:af:8a:fa:99:d0:ea:e3:67:27:27:8b:c9:
         a9:62:7d:c3:74:90:9a:88:fc:79:0c:f2:b0:b3:a3:dc:fd:6c:
         3d:6e:2a:ff:9f:9f:f7:12:ae:a5:c9:25:ed:c5:c2:2e:3b:cd:
         45:1c:53:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:34:44 2024 by rpki-client on console-fra.rpki-client.org