Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2ebf9ebe-5748-3ec5-ba70-06bcf0d7884c.roa
File:                     2ebf9ebe-5748-3ec5-ba70-06bcf0d7884c.roa (raw, json)
Hash identifier:          6EO0XMU5uE3TTQ/ldVOMysFYhhXx/p/0rsZihgOgok8=
Subject key identifier:   27:A6:CA:2F:D5:BD:2A:13:A3:DB:2A:C2:64:DE:2C:8F:86:DC:1E:63
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847504F76AB2AC092D1D77F4FC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2ebf9ebe-5748-3ec5-ba70-06bcf0d7884c.roa
Signing time:             Mon 23 Sep 2024 21:44:44 +0000
ROA not before:           Mon 23 Sep 2024 21:44:44 +0000
ROA not after:            Sun 22 Dec 2024 22:44:44 +0000
asID:                     202656
IP address blocks:        166.1.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:4f:76:ab:2a:c0:92:d1:d7:7f:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 23 21:44:44 2024 GMT
            Not After : Dec 22 22:44:44 2024 GMT
        Subject: CN=1102c4ef-a337-41d4-bb42-3c20806e9d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:46:38:0c:88:23:87:7f:a2:2c:99:c3:ee:8d:
                    74:0f:7c:c9:bf:ed:64:48:c3:20:53:31:82:b6:b6:
                    be:39:d6:78:15:1d:ce:92:63:62:27:13:bc:df:51:
                    90:96:75:f1:1f:27:cc:be:88:f8:80:a2:64:a4:7f:
                    85:07:e9:43:89:ef:14:b7:7a:02:25:bf:ee:65:cd:
                    6e:e0:e4:a2:ff:f4:76:bf:6b:ee:8e:72:8b:2c:33:
                    cd:7f:a2:92:6e:c3:81:59:8f:17:2b:ab:b5:d3:1a:
                    42:84:c9:e2:78:81:60:68:bf:d6:30:ec:fe:b9:48:
                    79:98:4c:40:1d:bb:00:44:82:58:86:a0:e7:9a:f7:
                    06:52:77:e7:85:35:fa:a7:7a:e8:f3:9a:ac:82:a0:
                    10:24:2c:e7:78:5d:51:ea:a0:56:24:c9:a4:5f:7b:
                    26:26:8a:00:ed:c3:38:24:71:9e:d3:05:fd:23:b9:
                    bd:91:1c:3b:b8:e3:96:f2:d3:81:54:f7:08:5d:49:
                    1b:40:65:ff:67:c6:33:ca:47:ec:2a:72:f3:d9:84:
                    0d:25:5b:78:9c:cf:d3:6e:b0:2f:fd:90:f7:99:63:
                    1b:b2:cb:dc:3b:28:b2:a7:36:a9:27:12:5e:af:d2:
                    18:35:12:de:80:b4:5c:f3:bd:ea:77:45:d6:c2:bf:
                    d3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A6:CA:2F:D5:BD:2A:13:A3:DB:2A:C2:64:DE:2C:8F:86:DC:1E:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2ebf9ebe-5748-3ec5-ba70-06bcf0d7884c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:5d:d4:99:7d:85:79:c3:d1:60:fb:fd:1f:4f:16:77:b4:38:
         ec:42:fd:d5:e7:47:35:41:91:2d:69:46:79:9d:be:d8:e9:79:
         0d:23:60:cd:42:7f:d7:b1:88:25:f7:b6:8c:5d:0f:d8:b8:92:
         f8:9d:b5:d9:da:67:90:69:50:0b:ed:fc:ab:1b:0e:d3:f7:78:
         a4:ad:c5:b8:13:5a:1c:a9:34:4c:89:c7:4d:74:f7:e4:8e:0f:
         31:c0:4b:62:7e:02:ed:eb:df:9e:52:86:7d:52:04:b2:84:6f:
         19:b5:27:63:18:2a:fe:eb:e0:34:9f:4b:4b:5a:d4:09:14:43:
         e3:20:37:07:77:e3:fc:5a:23:17:e5:59:70:e7:bd:37:b3:c3:
         c5:31:f7:fd:b5:f7:8d:90:72:a5:1b:e9:1c:e7:e5:88:43:24:
         d6:17:55:d5:6b:52:59:8a:80:4d:4f:6f:ed:77:95:62:5e:94:
         fe:69:eb:e0:6e:8f:9b:1b:db:35:c4:32:c9:f7:c8:47:f5:27:
         41:57:56:fb:39:26:ec:d5:4e:16:3b:62:ac:79:2f:3c:0b:ef:
         eb:5d:c1:1d:86:4b:6f:29:5d:b7:04:69:d0:21:65:c2:22:92:
         2c:db:01:6c:79:ea:d1:26:ee:00:c4:78:da:f4:ba:14:b6:ac:
         49:e5:fb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:17 2024 by rpki-client on console-fra.rpki-client.org