Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a248c6d8-eab1-3e95-99fb-ed8cd4ebc53f.roa
File:                     a248c6d8-eab1-3e95-99fb-ed8cd4ebc53f.roa (raw, json)
Hash identifier:          b6x5twZAsShyx/1u63SxdpYBvXZ/Kr2mZ17zi3TuAW8=
Subject key identifier:   DF:D0:40:3E:22:58:FC:B3:AA:9B:1F:D5:7B:56:17:97:E9:EA:48:D2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844F5CAAE069852BDE98ED27700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a248c6d8-eab1-3e95-99fb-ed8cd4ebc53f.roa
Signing time:             Wed 21 Feb 2024 02:00:25 +0000
ROA not before:           Wed 21 Feb 2024 02:00:25 +0000
ROA not after:            Tue 21 May 2024 01:00:25 +0000
asID:                     20473
IP address blocks:        166.0.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f5:ca:ae:06:98:52:bd:e9:8e:d2:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 21 02:00:25 2024 GMT
            Not After : May 21 01:00:25 2024 GMT
        Subject: CN=d285fc2e-8ad3-4248-bf30-6dd56e93d8ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0b:c6:13:ac:39:8f:ad:88:c1:12:1b:91:b4:
                    d9:d2:51:c7:7c:0f:d7:01:9d:c7:7e:2e:fb:df:8b:
                    07:0a:01:71:e8:14:2d:a9:40:ff:d5:09:75:54:7b:
                    28:c0:f4:7e:a2:58:7c:18:44:01:ea:a0:08:a4:36:
                    42:f0:63:c8:90:a5:89:93:3e:7e:d5:27:56:26:98:
                    d9:c8:36:8d:5d:70:90:66:65:ad:05:7a:87:b9:81:
                    01:60:27:1a:1f:25:3d:32:75:88:fb:db:46:e2:c4:
                    b0:f9:c9:5b:6e:d9:b6:d1:bc:00:f4:d2:6f:f9:30:
                    34:54:55:4d:a1:f4:a0:0d:25:98:ff:1a:61:cd:d7:
                    db:dc:56:81:d9:4c:eb:70:7b:54:9c:7f:33:ac:ce:
                    11:b6:cc:ca:ee:3d:da:65:3a:76:bd:c5:f3:5f:d5:
                    b5:17:52:fc:cf:61:d7:7b:15:ef:f5:83:7a:af:65:
                    67:c8:d0:b6:8b:99:23:64:32:53:12:b8:72:2a:92:
                    43:db:18:ea:ab:c5:a9:f8:b8:9e:3c:15:cf:1a:39:
                    3c:3a:9c:a1:6a:3d:c6:59:3d:66:30:f2:34:af:ac:
                    f4:b2:70:f4:db:df:a7:b5:5a:d4:8b:92:34:29:3e:
                    58:0d:04:43:d0:38:5e:55:53:9d:23:7c:e1:9e:5c:
                    05:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D0:40:3E:22:58:FC:B3:AA:9B:1F:D5:7B:56:17:97:E9:EA:48:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a248c6d8-eab1-3e95-99fb-ed8cd4ebc53f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:ee:0e:41:5f:b4:05:68:de:e6:c2:6b:6e:08:53:ce:5f:d5:
         c5:87:c0:6e:7d:f3:ef:ae:47:5e:9d:d8:8a:4c:2e:78:4a:3d:
         a9:1b:a7:ca:cb:b7:57:3f:e7:28:fa:24:2b:10:30:c6:8a:79:
         20:aa:21:33:a2:52:7a:2c:ed:a5:d9:87:84:10:ac:38:e0:2b:
         a9:1c:94:5a:a7:40:82:da:54:41:cd:12:4b:50:d4:3d:c5:a4:
         9d:2f:2b:d2:c6:a8:15:fa:ec:47:b4:7d:97:06:c0:23:90:57:
         a6:20:4b:5b:c7:e6:b1:25:1f:9e:e5:38:d8:92:20:56:58:c2:
         92:34:ea:30:32:ce:87:0c:84:d7:57:d3:9f:68:90:08:85:90:
         91:92:d4:97:66:00:5d:dd:9e:31:df:3c:6e:af:a3:8e:89:03:
         bb:83:e4:d1:b8:f0:b7:b6:42:6e:13:db:99:c7:f5:e9:3e:42:
         d6:d4:c5:3d:f9:95:50:bb:93:6b:62:af:d4:e8:03:56:03:6a:
         6a:e9:81:a7:48:1f:e7:15:2b:2f:f8:1c:42:c2:0f:b0:ae:ca:
         0a:c0:d3:3a:60:f8:5e:85:e3:7d:c7:8e:f2:3d:aa:a1:ab:a7:
         a5:0c:1b:21:b9:16:7f:6e:2f:58:d0:af:b4:b0:bc:eb:9d:33:
         91:5d:d6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:06:32 2024 by rpki-client on console-ams.rpki-client.org