Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d36ea96-e1a3-346d-96f7-d02e19249321.roa
File:                     7d36ea96-e1a3-346d-96f7-d02e19249321.roa (raw, json)
Hash identifier:          K9ln+udOYxp5iEGqYdMWVA8rHme/mm1qrGrVghj9nXM=
Subject key identifier:   7F:9B:31:10:B0:19:01:F0:8C:B5:F0:F7:D7:17:79:A0:FC:81:01:F3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584754E0E1F2E9EE98439B590360
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d36ea96-e1a3-346d-96f7-d02e19249321.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     396163
IP address blocks:        166.0.64.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:e1:f2:e9:ee:98:43:9b:59:03:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=e6f361d5-86f6-4cfe-8612-3de5a21d179c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ee:d0:ea:a0:99:63:71:f3:f6:84:d8:ec:55:
                    12:48:54:3d:32:85:78:fa:8a:1d:1d:c0:8e:bb:29:
                    99:52:68:56:5d:a6:c8:d4:64:16:75:53:2c:7a:a3:
                    5f:e5:81:fa:a4:e6:96:8a:4e:80:c7:f8:d8:16:7e:
                    fd:62:44:cd:fd:b6:86:7f:6c:11:fb:40:d2:89:80:
                    0e:8c:30:43:7b:15:5e:75:c1:fd:c6:a9:03:25:fc:
                    45:32:1d:16:93:2f:8d:90:77:50:b5:e5:5a:2e:14:
                    25:19:67:25:2b:f3:35:59:1f:c9:05:b8:17:47:07:
                    ba:c9:9d:8a:60:64:cc:6f:63:58:da:d7:1e:08:56:
                    c7:9c:5b:c4:2d:03:13:74:5f:56:28:05:2c:14:27:
                    9f:d1:03:57:f1:e7:7d:82:b7:15:5d:c2:47:8c:7d:
                    ad:e3:53:60:61:3f:fd:2c:1e:9b:b6:1a:67:3c:d5:
                    74:60:b5:aa:8e:0c:46:4e:31:4e:e6:91:91:c5:76:
                    5d:29:c0:8d:bd:bf:1c:f1:b8:3a:6f:20:71:92:15:
                    9f:e7:53:bf:d5:0f:21:97:c2:ba:6c:f4:70:af:8d:
                    1c:9e:2a:f0:03:58:1e:23:25:05:cc:c8:d5:5c:b4:
                    bb:1f:09:d3:89:53:1a:16:f7:cd:67:52:e2:b3:53:
                    f6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9B:31:10:B0:19:01:F0:8C:B5:F0:F7:D7:17:79:A0:FC:81:01:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d36ea96-e1a3-346d-96f7-d02e19249321.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:3d:75:33:4f:c3:cc:43:cb:36:9f:76:6e:b2:50:6a:38:65:
         67:d9:b0:68:37:c9:31:7a:3d:92:f8:61:47:f3:c8:f7:d9:f7:
         5a:6a:58:ae:63:7b:8c:63:b3:18:7a:4c:92:62:2d:6f:99:79:
         c6:d2:fb:0d:78:bc:58:2f:98:84:fa:b2:59:9f:23:bb:b6:cf:
         ca:80:b2:39:fe:15:2e:94:8b:43:90:fb:6f:99:40:fe:23:4a:
         8f:13:18:3c:60:49:22:7b:a2:e6:f5:a8:4f:32:37:20:6d:79:
         e4:2b:fb:03:01:55:53:91:8b:38:ee:6f:43:ab:99:d7:2f:8a:
         df:98:f5:87:68:78:87:95:a6:7b:59:62:10:9b:23:6e:7b:c1:
         4c:48:da:77:aa:17:9a:ff:69:10:a0:50:df:76:a6:31:11:e1:
         97:07:1d:32:66:42:ab:46:7c:e4:bb:9b:57:ce:80:2f:3b:d9:
         5c:36:ff:4c:06:ef:31:aa:e2:13:4a:76:9a:f5:f7:d6:81:9b:
         3f:c2:a3:9c:bf:0b:3e:2f:dd:f7:8c:60:8c:26:6f:2f:4e:d8:
         50:94:70:31:c8:56:0b:de:d8:f6:d8:d4:61:6a:a0:0a:56:b8:
         63:47:14:15:9c:d8:db:9e:89:12:9b:b5:66:81:3e:22:f7:e8:
         b7:36:87:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:32:18 2024 by rpki-client on console-fra.rpki-client.org