Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/570060d7-7db1-340b-b9f6-318b891a0528.roa
File:                     570060d7-7db1-340b-b9f6-318b891a0528.roa (raw, json)
Hash identifier:          1x+wzWGQcTHmNFHP/4DhiUTt3DuWtz4oNlv04blVB8g=
Subject key identifier:   BC:17:38:B1:E1:C0:B2:3B:B1:8F:DC:9E:54:86:90:4E:10:2F:79:05
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847EE8A263B32024EDE83FAA680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/570060d7-7db1-340b-b9f6-318b891a0528.roa
Signing time:             Tue 19 Nov 2024 14:00:39 +0000
ROA not before:           Tue 19 Nov 2024 14:00:39 +0000
ROA not after:            Mon 17 Feb 2025 14:00:39 +0000
asID:                     400810
IP address blocks:        166.0.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8a:26:3b:32:02:4e:de:83:fa:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 19 14:00:39 2024 GMT
            Not After : Feb 17 14:00:39 2025 GMT
        Subject: CN=92fa8204-a641-4d82-b600-ee6b7c57d3fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:47:b1:d6:34:bf:bd:0a:72:71:ff:e8:83:23:
                    21:05:ca:79:97:23:7e:12:0f:06:61:f7:3b:49:c4:
                    f4:16:7d:57:86:d2:c9:fc:90:b8:9b:08:5a:35:4a:
                    bb:0e:26:af:84:74:66:29:9f:c5:86:1a:2e:94:e2:
                    ad:bc:a0:24:67:5c:37:a3:7d:a1:64:5d:58:fb:f2:
                    29:c5:d0:0e:28:15:f6:b5:7b:93:64:70:37:2c:ec:
                    20:6c:8c:b0:b7:af:02:ed:4d:c2:f0:f9:1e:58:f4:
                    24:be:6c:96:f6:04:0b:a4:fe:14:15:06:79:d5:c8:
                    80:f0:9d:9a:5e:dc:fc:ba:4d:ed:c3:e3:94:75:96:
                    d3:1f:13:bb:bf:9c:17:57:bc:76:bb:7a:4c:24:74:
                    28:bc:60:e1:1a:dc:ec:b2:5a:97:28:1f:71:b6:6d:
                    cd:3a:59:50:bf:6a:37:97:39:d8:1f:96:2e:19:9a:
                    5d:e3:2e:68:29:6f:0a:c0:a9:31:54:78:4f:af:60:
                    59:41:63:0b:b1:85:6f:93:51:d3:b6:5a:d8:0a:a4:
                    77:05:45:8a:98:95:7c:f7:4b:95:77:32:7e:9a:ec:
                    fe:44:ab:dc:ce:84:57:c9:72:ea:88:5c:e0:e8:94:
                    c4:fe:e6:7a:79:49:08:47:7a:9d:45:6f:2c:b3:9d:
                    49:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:17:38:B1:E1:C0:B2:3B:B1:8F:DC:9E:54:86:90:4E:10:2F:79:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/570060d7-7db1-340b-b9f6-318b891a0528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:e3:1c:65:4d:5c:f9:af:4d:45:2c:5a:9d:ba:02:91:ac:62:
         42:e8:20:ec:38:b8:b7:4a:c7:51:48:3b:b9:cf:a5:27:48:9d:
         ad:49:7c:7a:48:fb:ad:25:16:47:8c:53:f4:76:21:d0:ff:c1:
         2f:1a:2f:ef:1a:35:0a:d8:87:35:29:4f:6c:f5:89:f4:c3:38:
         5d:9c:10:01:7e:a7:25:12:20:7f:f0:9c:fd:ba:e3:34:45:6c:
         04:9e:13:cc:26:66:b3:1b:f6:05:e1:4d:78:f2:13:4f:24:df:
         41:47:2e:0c:6a:dd:24:4f:f7:b7:03:94:15:63:f1:2f:a2:6f:
         a6:e0:60:b2:ae:9d:fd:15:0e:86:d3:bc:e8:06:cd:94:69:cb:
         e8:ae:2f:92:74:b9:5c:4c:f9:ee:28:66:90:f3:41:42:01:c3:
         cb:58:75:0d:a7:3b:4e:91:b4:42:fb:2b:56:5a:a3:84:8a:f6:
         3e:41:e7:19:28:c8:3d:ab:f0:9a:a3:40:b6:14:da:47:ce:9b:
         f3:fc:e3:a5:03:e1:4a:c6:96:a1:27:b5:a7:45:a7:e5:3b:75:
         c4:53:f6:05:b2:ac:85:91:4c:67:be:bc:37:a6:ce:f4:14:1e:
         b1:fa:a4:53:b8:7f:eb:c0:5f:c3:23:7f:6a:69:44:21:32:bf:
         ed:10:0c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:41:50 2024 by rpki-client on console-ams.rpki-client.org