Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4dd66989-5c42-3707-9f82-77f300eee833.roa
File:                     4dd66989-5c42-3707-9f82-77f300eee833.roa (raw, json)
Hash identifier:          nBo80NdDJ2HxUSPJDA+SzBZ25iAw1zS8tlIIPZBiVAU=
Subject key identifier:   A9:81:0F:9C:63:07:A5:9E:51:FA:DB:94:72:02:E2:3D:1B:C0:08:9C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858455658A6AA4E74FA23ABF2FF00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4dd66989-5c42-3707-9f82-77f300eee833.roa
Signing time:             Tue 26 Mar 2024 16:04:13 +0000
ROA not before:           Tue 26 Mar 2024 16:04:13 +0000
ROA not after:            Mon 24 Jun 2024 16:04:13 +0000
asID:                     58061
IP address blocks:        166.1.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:58:a6:aa:4e:74:fa:23:ab:f2:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 26 16:04:13 2024 GMT
            Not After : Jun 24 16:04:13 2024 GMT
        Subject: CN=e82cd6b0-9799-4d70-b672-eb8200da1e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:41:2e:c1:38:df:e1:d8:58:bd:9c:cb:c3:13:
                    41:55:72:da:d3:dd:d0:16:7c:57:d0:11:7f:1f:20:
                    23:14:3d:d9:2a:56:f0:bc:c0:25:ee:98:ad:05:52:
                    74:4d:27:71:64:3b:74:a0:59:a8:d7:eb:bb:39:49:
                    c0:ff:7a:68:ea:bd:0d:10:79:20:06:78:d8:d5:56:
                    48:25:e7:28:c3:bc:47:b6:7b:31:52:bf:79:d6:b9:
                    50:5d:e0:7f:d9:e2:f3:0d:9c:e1:c0:07:14:84:2c:
                    be:82:b8:68:39:fa:39:eb:b1:d7:df:d2:77:cc:ed:
                    51:28:ec:67:5d:8c:da:3d:7c:ee:ed:ab:ed:f6:7e:
                    93:90:bf:90:8a:7b:b6:a4:dc:e9:04:b0:8b:05:41:
                    d3:0c:c0:35:3c:1b:ea:19:94:63:2a:69:ac:a8:f4:
                    7f:52:92:cb:de:12:3e:0d:ba:aa:e4:20:46:4e:54:
                    3e:9e:bc:58:34:02:94:af:79:68:8c:c7:ac:fd:40:
                    45:d0:4d:84:5c:a5:1f:c0:96:cc:93:09:fe:2d:2c:
                    c5:26:9d:f2:3a:ee:6a:37:4c:36:66:78:0e:db:77:
                    a8:e3:ac:da:a3:55:16:00:2c:ce:97:69:ac:1a:07:
                    7b:31:4e:ce:d2:25:c3:e4:c6:a0:de:50:94:40:9f:
                    68:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:81:0F:9C:63:07:A5:9E:51:FA:DB:94:72:02:E2:3D:1B:C0:08:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4dd66989-5c42-3707-9f82-77f300eee833.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:45:64:a1:ed:59:27:44:ff:71:cf:64:10:45:c2:82:11:3f:
         79:c1:78:ef:cd:a1:69:cc:b4:a5:38:c4:7a:e8:47:20:ac:a4:
         93:91:d6:ca:90:e0:1b:1e:6f:00:23:eb:52:a9:27:ea:5e:48:
         f8:5c:1a:6d:3d:bc:11:74:10:5e:99:07:dd:d7:f0:92:9c:28:
         91:40:00:b3:43:85:33:00:39:1e:e8:00:c6:8a:23:f6:31:8e:
         b2:25:61:93:73:ec:e1:aa:d9:27:93:e0:a7:a7:0c:37:b0:3a:
         fb:13:05:96:93:37:9b:e8:ba:d1:a5:95:61:18:69:81:5e:2a:
         06:41:8b:4f:a0:61:50:ca:74:de:76:37:3e:99:08:29:9c:bc:
         83:34:1e:9d:17:95:ac:6d:8e:e9:ca:cc:21:52:94:dc:b6:6f:
         6a:3f:76:ed:95:b8:c6:e9:c0:56:95:16:21:81:9f:95:eb:d0:
         aa:9c:b7:6a:2d:61:8d:de:9e:b1:6e:2a:9c:12:e6:b4:af:7b:
         c6:f1:42:dd:5c:1c:93:d1:48:5d:24:43:17:07:08:83:a4:7c:
         7c:cc:35:c3:10:9c:74:70:3e:95:51:36:7c:be:55:77:9e:40:
         03:4b:bb:80:81:64:4e:79:38:4a:5e:c5:e0:04:b8:b1:e3:97:
         5d:92:60:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:10:19 2024 by rpki-client on console-fra.rpki-client.org