Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d6548ae-061d-358e-a16d-456fd94c8543.roa
File:                     3d6548ae-061d-358e-a16d-456fd94c8543.roa (raw, json)
Hash identifier:          1zZdVTwERKOdx2b42VxuKL3wURQ60qkfxsl3zgaGDSM=
Subject key identifier:   F1:BB:EA:18:8D:3C:57:E6:85:36:5D:43:DE:E5:E1:07:12:CA:86:5E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847B101688465C6C8155B7D9B00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d6548ae-061d-358e-a16d-456fd94c8543.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     52112
IP address blocks:        166.0.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:68:84:65:c6:c8:15:5b:7d:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=074b189f-774e-4e11-b469-afa10e2a917e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2f:bf:9e:ad:15:f3:aa:13:8b:85:0c:3a:dd:
                    a1:67:92:1e:1a:bf:0f:e8:5a:37:b8:9b:10:a3:66:
                    cd:72:5c:8c:a8:52:fe:73:17:d4:90:31:88:d2:9d:
                    a2:e8:0e:39:2a:d8:4d:c0:c9:2e:76:62:fc:09:39:
                    df:43:07:93:0b:c0:ef:60:08:90:1c:53:71:67:f8:
                    5b:c9:03:fd:e7:2e:bc:63:96:ed:a1:b6:55:bc:89:
                    a4:56:06:45:2a:bc:ea:b9:58:b9:c3:69:4d:ac:2a:
                    2e:73:67:0f:35:d6:56:10:e0:07:6b:d7:30:e9:46:
                    2e:7a:3e:6d:97:24:83:f4:5d:60:fc:d2:90:e4:69:
                    15:b1:c0:d1:8e:34:45:8d:74:31:47:87:f7:5d:54:
                    8a:76:64:83:61:8c:b0:0f:11:b7:e9:26:7f:d6:ea:
                    05:b8:b0:ed:1d:86:e8:b3:d6:98:9c:71:d9:1c:e3:
                    32:5a:7d:f5:22:f9:76:63:8c:3e:98:08:b4:1e:5e:
                    dd:a7:dd:02:ef:26:fd:22:84:1a:f9:74:6e:da:e8:
                    26:11:8c:26:dc:45:33:af:09:30:80:81:74:8b:1e:
                    a6:bc:12:58:0e:f4:a5:9b:40:47:14:33:32:a4:de:
                    4c:e3:31:99:5d:89:e6:ca:26:98:8b:67:5d:8b:e1:
                    73:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BB:EA:18:8D:3C:57:E6:85:36:5D:43:DE:E5:E1:07:12:CA:86:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d6548ae-061d-358e-a16d-456fd94c8543.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:a4:7e:8b:ad:79:0b:e2:41:6b:96:16:a1:fc:e4:14:f5:73:
         06:64:e9:04:04:e9:f1:ea:42:9d:f4:36:b1:53:9b:54:00:45:
         cc:17:e8:42:d2:3b:cf:c6:17:04:1a:aa:14:27:3f:a0:9e:d9:
         f4:9d:77:e3:75:47:79:a9:f0:ea:ac:8a:33:80:78:84:2a:c3:
         ee:40:25:43:db:f5:34:0b:82:69:13:c2:62:68:f4:05:85:af:
         ac:74:76:3e:51:19:87:39:b2:f3:b2:d5:43:7c:8c:f5:c6:39:
         d6:1d:94:72:23:b0:be:b2:29:03:33:d1:7c:46:e1:13:f8:9b:
         0d:a5:b1:a7:23:b5:2e:59:77:a7:9e:42:a7:5a:93:59:ab:fd:
         f7:a7:13:85:4f:ff:4c:28:5f:aa:19:9c:10:53:86:93:34:ba:
         9d:e9:2e:20:d1:4c:08:67:71:4e:7e:c7:b1:33:f4:40:ea:de:
         a6:85:ec:81:83:e9:8a:c7:9f:f6:7f:2f:54:a3:ea:c2:30:5b:
         68:0b:68:10:14:04:6f:f4:d8:0f:54:3e:78:c3:d3:c7:17:c9:
         ca:1d:ef:47:00:35:3b:38:bf:f7:51:92:37:7b:75:61:a1:d8:
         2a:20:3c:ff:30:22:db:eb:3b:86:ac:79:47:9b:5b:fc:bf:7a:
         4c:a5:36:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:18 2024 by rpki-client on console-fra.rpki-client.org