Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/402a40ff-4da9-3ee5-b0ff-27caeecf8ddc.roa
File:                     402a40ff-4da9-3ee5-b0ff-27caeecf8ddc.roa (raw, json)
Hash identifier:          DG0D+Hp6jeL37Szv9rvWcOeS8sequUXrP7sAYv+McoM=
Subject key identifier:   A7:26:83:A8:48:06:34:79:43:CC:7E:D6:D2:96:C8:73:22:48:2C:EB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847C2F5554E1737749FE07D7380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/402a40ff-4da9-3ee5-b0ff-27caeecf8ddc.roa
Signing time:             Sun 03 Nov 2024 23:21:05 +0000
ROA not before:           Sun 03 Nov 2024 23:21:05 +0000
ROA not after:            Sat 01 Feb 2025 23:21:05 +0000
asID:                     11798
IP address blocks:        166.1.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c2:f5:55:4e:17:37:74:9f:e0:7d:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  3 23:21:05 2024 GMT
            Not After : Feb  1 23:21:05 2025 GMT
        Subject: CN=6d4b05a4-3c6e-4a3d-8718-07338340be96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:72:0a:f6:a8:85:62:fe:2e:84:37:f5:54:92:
                    af:0c:cf:5f:6a:93:11:5a:d9:0c:38:5d:a4:f8:68:
                    64:14:73:38:54:51:7a:0d:5c:6a:24:d5:b6:cd:4e:
                    93:ca:d4:86:a6:27:95:86:45:84:1c:49:24:71:7b:
                    c6:3b:ab:7e:2f:d0:cd:21:b0:99:e7:46:87:83:53:
                    68:bc:08:62:88:3d:b2:f9:79:7b:01:fb:bf:74:75:
                    1e:d6:72:1b:d6:2d:8e:d2:da:d4:9c:0e:9e:55:b2:
                    2a:0e:c8:f2:68:fc:6b:53:43:c5:02:f0:f0:06:09:
                    9f:7a:01:19:83:69:5b:88:c2:6e:02:aa:56:b2:e7:
                    33:39:f3:a9:13:97:b3:22:64:e3:20:eb:06:5c:47:
                    e9:20:4d:c6:70:90:e6:7c:e7:a7:c3:00:61:0b:6a:
                    9f:dd:73:18:f5:f2:d8:60:11:93:db:8f:fb:42:3c:
                    f9:0e:a0:8a:b2:02:d4:0e:3b:82:cd:19:b7:94:c5:
                    88:89:55:44:e7:90:fd:5f:64:54:33:ac:26:91:47:
                    d6:9b:3a:49:ba:01:d7:86:94:cd:f1:71:8d:98:93:
                    02:16:6e:16:60:79:73:20:c7:00:91:be:c8:47:9a:
                    50:8e:12:b0:3a:b8:a7:56:7a:77:6a:34:3a:43:5c:
                    01:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:26:83:A8:48:06:34:79:43:CC:7E:D6:D2:96:C8:73:22:48:2C:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/402a40ff-4da9-3ee5-b0ff-27caeecf8ddc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:97:d8:20:f2:f8:47:3b:b7:37:85:ef:3c:c1:51:9b:de:95:
         4e:7d:f9:3b:8e:93:84:02:b8:6f:0d:1e:d2:03:5a:c5:2d:d1:
         84:e8:50:aa:70:07:f4:39:d6:7d:7f:a9:f3:8f:c5:6f:9a:fa:
         bc:94:db:4d:75:c5:bf:44:b2:cc:89:a2:68:46:d8:78:7c:a4:
         05:a9:38:ec:94:c5:3f:b4:c9:09:4a:83:7b:21:e1:3e:92:a9:
         23:10:4c:30:a9:77:6a:38:62:60:3d:91:50:c9:bd:d8:21:53:
         f5:42:bc:1a:8c:7d:85:61:38:14:e6:97:d8:2b:1e:ae:59:2b:
         6e:7a:c1:c0:e8:43:10:8a:da:02:bb:16:7f:2b:63:fd:d1:bd:
         57:e3:5f:cc:b9:a4:59:4d:8f:35:9a:dc:00:41:4f:10:24:12:
         00:3f:39:1b:12:6c:9d:5c:fe:52:92:15:bf:d8:1e:d8:86:4f:
         8b:79:35:8c:ff:0a:62:32:24:a2:17:c6:4f:83:a9:0f:d6:2e:
         e8:1c:0a:95:04:64:c4:3e:39:9d:03:35:3e:f6:1f:3f:d0:93:
         6f:04:21:72:00:0c:4f:3b:ca:6f:6e:a5:15:8d:ab:3d:d3:52:
         c7:8a:a7:fb:a0:2a:10:b6:2e:d4:cd:1e:99:16:79:bf:8b:4a:
         ee:7d:2a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:32:13 2024 by rpki-client on console-fra.rpki-client.org