Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/54919eba-d7b0-32d9-b224-326c7bf7d141.roa
File:                     54919eba-d7b0-32d9-b224-326c7bf7d141.roa (raw, json)
Hash identifier:          J9mzyB0GywyDLsoNSxjwNe9RjppIe345P/tEJTYPbgg=
Subject key identifier:   CA:CC:07:3C:C5:90:E6:50:B1:9C:4D:FD:AB:CC:23:9E:60:D3:77:35
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858477C76D9003E2B5D6D8107E000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/54919eba-d7b0-32d9-b224-326c7bf7d141.roa
Signing time:             Wed 09 Oct 2024 17:19:39 +0000
ROA not before:           Wed 09 Oct 2024 17:19:39 +0000
ROA not after:            Tue 07 Jan 2025 18:19:39 +0000
asID:                     46385
IP address blocks:        166.1.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7c:76:d9:00:3e:2b:5d:6d:81:07:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  9 17:19:39 2024 GMT
            Not After : Jan  7 18:19:39 2025 GMT
        Subject: CN=9dd6c221-9893-4326-9c16-4a4b4482ee41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:00:af:c8:81:21:d4:26:14:af:2b:a8:8d:64:
                    24:d1:d7:91:32:ec:03:8e:49:45:d0:b0:ba:7b:05:
                    83:9c:ab:b2:16:0a:bb:39:58:59:e6:60:9d:2f:1a:
                    ff:97:15:9a:31:f8:71:8f:ba:4d:56:b2:98:82:e2:
                    33:f9:d8:f9:fe:4a:49:ed:76:e5:7a:8f:ae:26:87:
                    19:05:06:c2:43:ea:65:46:45:3f:1e:dd:bc:5f:5d:
                    18:7d:5b:2f:b8:3e:39:a6:11:cd:dd:4c:4b:22:f4:
                    1e:95:5c:66:6a:92:30:a6:9a:09:79:ba:4f:47:cc:
                    ff:9d:eb:f2:c7:2b:76:42:0f:c3:ef:51:39:f9:9d:
                    27:2a:e6:00:92:6e:6f:be:f0:d1:9b:54:09:dd:b9:
                    e3:88:61:08:31:f5:b4:98:84:8d:1c:bc:6e:22:70:
                    7c:65:6b:0f:fe:b0:ed:a1:ef:27:23:df:13:bc:50:
                    33:07:31:3a:cf:6c:aa:73:e6:66:16:04:b6:4f:d3:
                    fa:a8:3d:ac:e6:e3:33:94:07:a2:b2:b8:7c:32:d4:
                    40:c4:12:6d:70:37:52:94:a0:72:67:87:94:83:1b:
                    45:d8:3a:04:7c:91:13:98:c1:2c:fe:23:fd:94:c0:
                    42:42:fc:ad:8f:13:87:e6:76:8e:d1:74:f9:c9:73:
                    c9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:CC:07:3C:C5:90:E6:50:B1:9C:4D:FD:AB:CC:23:9E:60:D3:77:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/54919eba-d7b0-32d9-b224-326c7bf7d141.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:d7:83:21:78:f7:f4:a6:45:ec:66:a3:b5:4a:12:b4:b7:ae:
         f0:35:80:cc:ea:dc:33:22:ec:15:bc:3f:c4:11:63:0d:fd:82:
         c5:10:b3:a1:3a:2e:60:a0:31:f2:0b:e6:59:25:7c:85:8f:8d:
         94:28:1d:9f:e6:7d:03:7b:f8:e3:ca:be:17:7e:93:0f:d9:01:
         9c:e0:30:3c:9a:f4:50:f0:6a:8b:f7:d5:a6:89:1c:34:3d:0f:
         69:d8:86:a3:fd:f5:52:bc:df:a0:47:51:e4:c3:d7:e2:0d:00:
         61:63:66:88:f5:5c:2d:0b:af:22:06:07:ba:47:9b:93:77:0c:
         a8:3b:a2:2f:1a:e6:4f:de:75:79:da:7f:81:be:06:64:6e:93:
         8b:df:6b:54:91:45:b8:d8:55:25:b1:c8:06:fe:3b:d5:46:88:
         22:85:e9:f4:cc:16:9f:7b:ba:2c:e0:0f:cc:93:ec:60:3c:9e:
         d1:c1:89:97:4c:d6:70:ad:8e:e8:68:92:c2:11:a7:9f:15:80:
         8c:64:a3:1e:eb:40:c2:fd:15:5a:37:3d:cb:71:fc:c3:0d:1b:
         78:fe:2f:60:37:60:2d:b5:63:89:b1:e7:eb:cf:1f:ba:23:83:
         60:19:f6:7f:8e:11:d9:13:9c:ca:47:96:0b:fb:25:8f:ad:5a:
         b1:f6:31:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:41 2024 by rpki-client on console-ams.rpki-client.org