Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/76f2f319-79b0-3c66-ae46-b88fe6107ef3.roa
File:                     76f2f319-79b0-3c66-ae46-b88fe6107ef3.roa (raw, json)
Hash identifier:          cD3YeUNaE+7CzQRp0F9JAMiyx6wkNMcTG+bZsb0ActA=
Subject key identifier:   67:7B:D6:BF:88:2E:90:31:C0:DA:4C:8A:FA:30:E3:8F:88:5A:92:E0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844ED6A938EB443B5957D465B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/76f2f319-79b0-3c66-ae46-b88fe6107ef3.roa
Signing time:             Sun 18 Feb 2024 02:00:25 +0000
ROA not before:           Sun 18 Feb 2024 02:00:25 +0000
ROA not after:            Sat 18 May 2024 01:00:25 +0000
asID:                     35830
IP address blocks:        166.1.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ed:6a:93:8e:b4:43:b5:95:7d:46:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 18 02:00:25 2024 GMT
            Not After : May 18 01:00:25 2024 GMT
        Subject: CN=6f2d71a4-4ccc-47dc-8303-8690fc3723de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a1:71:d6:cf:b3:62:7c:3e:08:c5:28:5d:81:
                    c0:74:8e:0b:9a:8d:90:ed:a7:92:9a:10:41:14:94:
                    b5:e3:29:b2:40:01:5f:71:05:d8:e2:60:37:69:15:
                    58:fa:ce:b2:7c:32:0d:34:59:46:5a:36:53:a0:1f:
                    ed:24:66:ff:34:d5:be:c8:8d:7a:1f:87:39:00:19:
                    2f:8f:39:07:07:36:de:6e:47:04:d7:5a:f9:1f:17:
                    30:d5:ad:c3:75:f0:c6:ae:ac:3d:c7:80:f5:91:76:
                    15:04:4b:28:d2:7a:33:ad:ba:09:7e:92:76:ab:17:
                    ab:d8:6f:ee:0d:1e:3e:44:67:c6:66:35:25:c4:e1:
                    7d:ac:9b:a5:f5:58:30:67:f7:cf:6b:92:39:da:00:
                    4b:69:c6:6d:a0:3e:1a:06:0f:76:a6:55:df:6d:11:
                    f3:bc:13:1d:f7:8b:ff:d2:31:1e:ea:5c:4c:0a:12:
                    38:ee:79:cd:4d:f1:ba:9b:6a:36:22:c7:83:a8:35:
                    8d:1d:a4:a3:be:3e:e2:b3:c0:95:fa:a1:f7:66:08:
                    aa:d1:df:df:23:51:41:c8:9c:64:6f:90:e6:89:0b:
                    e5:82:f1:bc:2c:17:11:8c:1d:49:08:c6:ff:68:91:
                    db:49:fe:81:ae:0d:34:f0:ef:47:a7:4c:ad:69:8c:
                    b3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7B:D6:BF:88:2E:90:31:C0:DA:4C:8A:FA:30:E3:8F:88:5A:92:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/76f2f319-79b0-3c66-ae46-b88fe6107ef3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:95:b7:cc:42:26:ec:52:65:bb:c4:cd:01:40:a9:00:2e:99:
         57:89:35:c6:df:22:4b:0a:93:5d:89:83:f2:d2:d3:fd:05:20:
         8f:69:9e:8a:d0:dd:f0:79:ec:81:ff:b8:54:f4:e6:1f:a1:94:
         58:65:c4:19:e8:23:6b:d2:1c:c4:cd:fa:fd:e0:e9:41:9b:45:
         26:1e:0e:00:65:59:d3:53:91:bf:45:7b:12:52:31:02:98:5b:
         72:16:48:1b:02:59:fa:13:0c:22:7d:5d:d4:00:ae:52:e5:92:
         2e:6e:65:75:97:a9:2d:b9:c8:60:d7:b0:6f:8d:bb:bb:ed:9f:
         dc:56:45:3b:80:4b:ac:29:06:76:3f:5b:07:10:37:17:30:ea:
         f9:54:a8:71:0f:26:4c:82:49:64:58:ca:50:07:6e:21:2d:42:
         10:7a:39:83:b3:f0:fe:e5:f1:94:12:5e:b9:df:d7:be:89:b2:
         ff:35:b7:b9:4e:f2:8d:bc:4b:1a:cb:29:d8:03:86:5a:01:9a:
         e6:7b:2d:87:8d:34:8c:44:6f:86:70:20:05:f5:da:c5:06:89:
         df:b0:09:6d:03:5c:ab:75:bb:08:59:6f:c0:09:46:14:fd:a8:
         bb:3d:7b:9f:91:49:f0:21:a0:8b:cd:6b:33:c8:91:fd:77:43:
         12:a7:61:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 22:27:23 2024 by rpki-client on console-ams.rpki-client.org