Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/78216707-2359-317a-a2ba-df3661a696dc.roa
File:                     78216707-2359-317a-a2ba-df3661a696dc.roa (raw, json)
Hash identifier:          gECv0hqo4Fdb6zruSWIdpZozKHuaE2NGkKMINPCY5vY=
Subject key identifier:   B3:FD:BB:31:D4:16:40:92:7C:FB:2E:2D:CE:2B:3F:ED:7F:97:C9:D3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584793B123579A00CB2A84383600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/78216707-2359-317a-a2ba-df3661a696dc.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     399820
IP address blocks:        166.1.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:23:57:9a:00:cb:2a:84:38:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=64e51d8a-8cff-4dd6-85ef-405c0ddc3dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:32:ad:1d:65:4e:ce:5b:97:65:e9:05:b9:bb:
                    14:eb:d1:75:38:7e:94:9a:b8:9a:da:93:f6:0c:b5:
                    c8:fb:e9:f2:6b:f1:0f:26:8d:ca:e7:c4:84:8d:18:
                    27:79:ca:1c:8a:bc:0d:ed:0f:2b:76:b6:21:93:6a:
                    e6:f8:ac:a8:65:81:53:01:33:08:3b:f8:cc:c7:8a:
                    27:8b:bc:5c:f7:7a:75:32:ec:e3:a9:7a:10:1c:fd:
                    ea:20:3b:e0:23:81:25:57:ef:f9:9e:6a:d0:dd:5f:
                    b2:2d:8f:95:4e:10:66:be:8d:88:a0:69:35:a3:d9:
                    3d:c6:9c:a9:96:f9:7e:d4:0d:e1:40:ac:46:b6:ca:
                    c6:c3:ab:ca:2c:ab:8d:df:cf:97:bc:30:b0:19:87:
                    27:4f:67:e0:0f:b6:6d:11:7c:97:20:02:cf:c1:62:
                    9d:68:d8:6b:23:75:6b:be:0f:ad:15:17:4a:58:d5:
                    3c:a8:e4:08:83:97:9b:e1:8f:99:d9:50:98:eb:1f:
                    b4:cd:fc:5a:0e:2f:df:f3:fd:4f:f5:c5:70:d4:09:
                    56:b9:96:c6:59:81:c3:c6:5f:5c:29:eb:80:a6:85:
                    ed:47:3a:37:ed:05:f2:92:00:9a:97:b4:eb:42:08:
                    6e:bd:1d:40:f4:f5:18:aa:da:a2:b8:81:27:01:37:
                    65:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FD:BB:31:D4:16:40:92:7C:FB:2E:2D:CE:2B:3F:ED:7F:97:C9:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/78216707-2359-317a-a2ba-df3661a696dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:50:3c:97:b5:2f:f7:98:b4:5e:44:c9:11:04:10:d1:c1:76:
         52:5e:33:b3:6f:93:13:3b:a5:6d:b0:df:3e:e1:7a:f8:a6:5b:
         8a:4e:7f:aa:f6:2c:da:db:25:f3:a4:1c:3d:c9:75:55:1f:2c:
         1a:78:16:27:bb:a4:6c:bd:a1:0c:1d:9b:72:d0:e1:04:39:b7:
         0b:0a:2c:8a:6a:29:b6:5f:4e:f7:da:d4:e5:43:91:53:18:05:
         e3:b7:3a:3d:fa:bf:94:0c:21:49:e9:61:df:8c:47:20:94:e8:
         31:71:8a:1c:c6:58:b9:6c:7b:73:6c:e2:a3:24:a6:94:b8:9c:
         f7:7d:be:7a:47:0d:02:21:be:26:c6:7f:1b:aa:23:fa:0a:69:
         ca:21:b6:c4:c0:d3:2a:ad:e4:64:aa:c8:41:6b:ef:75:2a:2d:
         15:89:96:10:c9:57:99:e2:b9:dd:d0:f1:52:39:94:a3:89:7a:
         2a:34:81:ed:d7:1e:64:2d:c4:13:90:b2:ea:b4:22:c0:dc:90:
         4f:9c:7e:b3:5d:41:81:85:aa:f0:6a:99:27:e7:35:bb:e6:03:
         37:36:2e:29:38:87:74:f3:e1:55:80:7a:40:67:19:50:ea:c0:
         64:98:64:0d:d6:36:ec:c9:01:f8:f6:64:ea:fe:3b:48:72:83:
         c8:f1:c0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:43 2024 by rpki-client on console-ams.rpki-client.org