Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9403772a-d791-3cdb-a289-ffa5815892d1.roa
File:                     9403772a-d791-3cdb-a289-ffa5815892d1.roa (raw, json)
Hash identifier:          kglFVypaljRh+jdHgsiKDo2CRxR1nq4uHtN/bfC0YaY=
Subject key identifier:   99:7B:E0:46:31:16:64:FF:BF:90:DC:36:92:E6:80:C0:99:41:94:27
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858454655D855820B3C1621FA6A40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9403772a-d791-3cdb-a289-ffa5815892d1.roa
Signing time:             Wed 20 Mar 2024 22:25:38 +0000
ROA not before:           Wed 20 Mar 2024 22:25:38 +0000
ROA not after:            Tue 18 Jun 2024 22:25:38 +0000
asID:                     58061
IP address blocks:        166.1.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:55:d8:55:82:0b:3c:16:21:fa:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 20 22:25:38 2024 GMT
            Not After : Jun 18 22:25:38 2024 GMT
        Subject: CN=9f40b38e-f534-4fc1-8a0e-885a5294eeb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2e:1f:7a:1d:0a:b6:41:0f:a4:96:1e:1b:2d:
                    37:74:05:a1:ee:07:30:17:57:e6:4b:76:b0:0d:1e:
                    17:3e:7c:5c:d1:9c:0d:c2:c0:3d:4c:9e:b7:f1:f1:
                    15:aa:80:3d:0d:b2:92:3e:f2:57:f0:84:b0:80:0b:
                    37:1d:fa:d3:4c:32:4b:fe:65:5b:7e:89:fb:a8:81:
                    d2:69:92:f1:df:8e:52:ba:70:d3:68:79:08:8c:72:
                    ba:9e:49:3f:bf:55:b2:05:36:fd:36:51:12:f1:52:
                    19:55:b7:09:ab:5b:4d:e6:74:8b:06:f7:c4:84:c7:
                    14:23:e2:8b:3e:53:5e:65:18:31:8e:2e:b6:75:05:
                    08:4b:71:a1:52:1c:a4:9d:6c:38:c6:26:20:35:be:
                    b9:0d:ca:21:48:f3:be:70:f8:87:07:da:ef:55:de:
                    67:46:e5:37:26:5c:52:21:ea:06:67:24:ac:d8:55:
                    78:80:05:34:21:56:41:ed:d8:3e:83:46:19:d2:cb:
                    d2:bd:fa:8e:6e:6c:38:7b:30:ce:10:12:4f:f3:4d:
                    f2:2d:b6:72:94:78:10:68:2a:37:af:56:73:cb:ca:
                    7d:41:7e:47:7b:74:94:82:a6:87:88:01:6c:de:e3:
                    ce:67:6d:a9:2d:03:24:6b:42:4f:e4:3f:1b:95:e0:
                    f6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7B:E0:46:31:16:64:FF:BF:90:DC:36:92:E6:80:C0:99:41:94:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9403772a-d791-3cdb-a289-ffa5815892d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:bd:70:f1:df:3a:68:91:c1:cf:60:8d:5a:0b:b8:c0:d7:22:
         45:06:a9:36:b9:05:c4:8a:e7:94:e1:06:e8:70:9d:e7:c1:29:
         c4:35:af:4d:f5:63:68:0e:9d:b0:0a:7d:e8:4e:cb:a6:c3:f6:
         d1:76:70:d3:8d:97:36:ec:b8:fa:20:a0:b5:94:b3:82:0b:d5:
         25:05:d7:6f:95:16:ab:b8:2b:56:ac:7c:ed:3a:d6:9a:e0:73:
         1c:a6:30:ba:98:54:87:97:2a:db:31:72:2e:c4:47:92:38:82:
         2f:b7:98:52:1c:b0:a2:f8:7b:1a:1c:0b:05:92:06:cb:f9:e0:
         32:c1:be:75:8b:a7:35:69:32:28:79:5d:8c:db:cd:01:ba:ce:
         f6:d7:21:ba:00:18:90:d1:4f:33:d2:b4:38:9e:ff:73:df:ad:
         2b:dc:fa:d5:bf:21:81:88:0e:11:78:6b:6e:d8:12:6b:b9:84:
         38:af:3f:97:c5:05:4b:4d:4b:e1:15:03:cb:e9:82:08:b2:f8:
         02:77:0b:5f:74:5c:eb:7e:3a:c2:a2:19:3c:bb:3e:ea:15:d5:
         8d:18:5f:87:6f:4a:7e:fe:25:64:f4:fb:9c:36:2f:8d:9a:e4:
         29:f0:ab:08:d4:7e:74:1e:c4:02:45:0c:83:c9:87:14:22:ca:
         22:a7:33:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:59:05 2024 by rpki-client on console-ams.rpki-client.org