Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/afbc7206-3c41-32bb-b15b-ca77041a88a9.roa
File:                     afbc7206-3c41-32bb-b15b-ca77041a88a9.roa (raw, json)
Hash identifier:          DiDN/L17lMzeg4Ii3NOTFPDYLi8DzC5OAWrjeL/DxLI=
Subject key identifier:   2E:95:F3:6F:92:C7:15:91:7C:DD:B0:4D:C1:73:72:2B:72:4D:FA:13
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584563F3118483C5C4F90CAB7980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/afbc7206-3c41-32bb-b15b-ca77041a88a9.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     63023
IP address blocks:        166.1.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:11:84:83:c5:c4:f9:0c:ab:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=f271a47e-22ca-4f73-bb0c-588b9264f866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d4:91:4c:3d:9f:29:86:0f:27:47:a3:03:f0:
                    f7:53:bf:4d:82:8f:da:e9:e9:bb:16:f7:fd:bf:29:
                    46:10:09:71:3f:d5:ad:34:36:80:9b:26:64:57:72:
                    ab:7a:08:35:ef:54:67:c4:07:3d:a6:d8:3a:61:1b:
                    2e:6f:47:be:db:d2:64:df:d5:36:1a:94:6b:5b:52:
                    69:12:96:7f:06:69:75:f7:74:cc:8b:1e:a1:50:e5:
                    1e:66:68:49:dc:b1:2e:1e:a6:48:8e:d8:c1:0d:d9:
                    a5:00:16:52:f7:23:1a:07:40:40:bf:c2:1a:04:fc:
                    c1:7d:a7:61:a7:f2:fc:9a:d4:5f:c4:b8:3f:bb:32:
                    e8:a2:56:22:c7:02:e5:1f:ca:93:be:28:1d:34:14:
                    64:8d:5f:31:1b:49:8f:ea:8c:e4:5b:9c:e6:a3:73:
                    67:07:a8:f8:3a:21:75:e7:0c:36:6c:16:88:c5:c5:
                    9a:da:5a:77:cf:79:c5:21:58:5e:ff:a2:49:6f:e0:
                    cb:77:49:cf:f4:ad:5c:56:91:36:e6:7e:5a:e7:46:
                    45:f8:7a:54:4a:28:8c:a3:e9:19:66:de:59:79:16:
                    dd:0b:0c:cd:70:0f:99:0c:5b:e8:84:d1:bc:09:1b:
                    46:4d:4a:fe:df:a2:1d:34:b5:dd:9a:96:8d:14:be:
                    36:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:95:F3:6F:92:C7:15:91:7C:DD:B0:4D:C1:73:72:2B:72:4D:FA:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/afbc7206-3c41-32bb-b15b-ca77041a88a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:01:09:2b:02:e7:c4:6c:0a:c9:a9:f1:07:4d:52:fb:25:f3:
         79:bc:61:36:72:8a:db:47:5e:d5:92:6f:47:98:24:fc:1b:02:
         b1:d3:23:1f:29:38:69:64:29:26:39:83:a1:1b:eb:7a:57:51:
         dd:d8:84:e4:7d:f5:55:e0:79:05:be:d6:23:6a:9f:c9:d1:98:
         ec:94:dc:c3:e8:8c:50:67:c0:6b:56:6f:81:86:5b:18:25:7d:
         a1:f2:3d:17:02:88:9e:0e:e6:0f:9e:59:dd:7b:a6:e1:94:63:
         2f:89:32:7f:88:f1:54:2b:90:4f:c2:fa:de:8a:68:a1:0c:90:
         be:0c:9a:7b:98:3e:17:52:89:68:2c:bc:f0:96:b5:e9:17:bc:
         42:e9:22:73:78:83:57:56:59:87:36:4a:de:2f:df:c7:8e:07:
         87:66:1c:01:de:86:95:21:c2:d0:7d:10:76:56:29:8e:dc:4b:
         87:9a:a6:80:65:2e:50:61:fc:4d:fc:e3:4f:3b:ec:2f:33:1a:
         84:e5:8a:0b:95:0b:5d:e7:1f:6e:f4:52:f3:8a:b9:03:98:e0:
         da:8b:2c:42:60:48:1b:8e:3a:27:01:5f:f2:4b:12:eb:15:1b:
         f5:4f:c5:cc:2a:06:d4:46:ff:2f:b6:ce:27:87:72:ce:4f:54:
         14:6b:ec:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 22:27:26 2024 by rpki-client on console-ams.rpki-client.org