Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89d48c4a-13ca-3a65-a8c5-f025ddfec088.roa
File:                     89d48c4a-13ca-3a65-a8c5-f025ddfec088.roa (raw, json)
Hash identifier:          n1mvtKUOA6dQM+KT+zn37UnnQKHEncsSGgXhTAiOFmI=
Subject key identifier:   AF:26:0C:E8:54:7B:01:FA:39:33:52:78:0A:38:0A:0D:DC:3E:5B:28
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845A15E05CC6384893C0F7E9B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89d48c4a-13ca-3a65-a8c5-f025ddfec088.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     62240
IP address blocks:        166.1.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:05:cc:63:84:89:3c:0f:7e:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=28a21737-fabb-4b85-91fc-8cb425f0d1bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:05:56:0c:f3:a3:69:f4:c3:5e:f6:bd:8d:a1:
                    65:c8:29:c7:ed:8f:68:83:17:2d:a3:73:cd:9d:82:
                    19:86:d5:37:95:d9:a0:a7:c8:e9:4e:44:b2:bd:a2:
                    36:a7:63:63:4b:70:ad:4e:1b:59:c6:7b:f3:ad:92:
                    e1:ac:cc:05:c5:e4:43:34:30:d6:e3:12:bb:b6:1e:
                    5f:8a:bb:2d:66:e0:65:28:eb:36:fe:26:bd:e6:a0:
                    af:b1:df:3b:da:42:cb:19:7f:00:a9:0d:ad:91:c9:
                    40:24:04:81:46:3c:f5:6d:a7:cc:2c:98:bf:3d:ee:
                    d1:32:76:6d:fe:09:47:a4:30:f1:94:d7:dc:81:9a:
                    75:0e:6e:c8:50:c3:e3:f3:10:63:58:2c:54:61:78:
                    f4:7c:e2:a7:31:83:e5:1e:93:42:7c:92:02:50:44:
                    70:2a:ef:f1:b8:da:15:fa:a0:ba:ad:35:10:8c:66:
                    c0:f6:28:e7:18:33:42:f3:09:65:f0:93:b6:22:ec:
                    ad:a7:56:9c:75:00:c1:a7:01:64:c4:07:8b:7d:e6:
                    a9:61:1f:37:5a:57:e8:7d:62:a0:a3:1b:b3:2e:d6:
                    47:e3:93:ac:e3:47:6a:b3:e2:14:01:7b:19:d5:13:
                    f8:cf:ad:62:c2:a7:1a:5c:59:e1:ec:f0:09:8d:ad:
                    fa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:26:0C:E8:54:7B:01:FA:39:33:52:78:0A:38:0A:0D:DC:3E:5B:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89d48c4a-13ca-3a65-a8c5-f025ddfec088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:0d:59:7f:d0:c4:35:e0:86:6d:f9:a8:b9:09:8c:c3:cd:74:
         37:1b:ca:ea:db:1f:9f:e8:48:0c:ae:26:9e:b5:f3:dd:db:06:
         92:60:fe:95:0f:c7:89:ec:7e:96:42:be:44:f7:c2:a0:34:f8:
         f8:a1:70:64:9e:74:da:29:2f:97:bd:e8:88:d9:c5:5d:a1:3f:
         dd:a5:b9:10:06:20:aa:29:4c:38:b1:be:03:19:ae:ac:cc:da:
         7a:52:a6:59:1e:3b:9c:48:f9:70:d6:80:e9:06:c3:a2:c0:6c:
         4c:bc:7a:33:9c:c5:52:41:b6:0e:35:aa:40:20:18:58:f2:42:
         7f:01:fe:21:08:9e:a1:a2:60:b8:2c:1b:10:2c:98:cf:fb:97:
         f5:54:46:fb:8c:1d:3c:5a:05:6f:6d:b1:9f:0c:b0:27:fb:2c:
         ff:60:fd:1a:a0:c3:8a:3e:cc:9b:ee:f8:13:6f:07:a0:8c:cf:
         62:ac:cf:90:6f:c6:9d:87:42:ac:55:0b:af:39:88:aa:41:12:
         73:ea:2a:27:a4:43:fd:e5:3e:83:f8:51:02:89:4e:b7:0d:99:
         28:15:94:c6:ee:b4:94:05:ae:cb:8e:6f:6b:9b:ec:1e:9f:8c:
         de:9c:b2:da:7a:08:67:7a:2a:ae:c5:8e:90:9a:92:da:22:93:
         ae:13:19:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:55:51 2024 by rpki-client on console-fra.rpki-client.org