Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b3cbbfdb-eda3-3367-a86c-a4711e5b20b1.roa
File:                     b3cbbfdb-eda3-3367-a86c-a4711e5b20b1.roa (raw, json)
Hash identifier:          RCQ0f/Uu2CkptYr3o/kzBSvtMhPELe6+TpGkAKUqkh8=
Subject key identifier:   06:D0:AA:6C:50:95:CA:4C:9F:D4:E3:71:91:69:D5:55:E0:7C:5C:54
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847F84F87B9CD26DDE9AC3372C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b3cbbfdb-eda3-3367-a86c-a4711e5b20b1.roa
Signing time:             Sat 23 Nov 2024 02:00:28 +0000
ROA not before:           Sat 23 Nov 2024 02:00:28 +0000
ROA not after:            Fri 21 Feb 2025 02:00:28 +0000
asID:                     398343
IP address blocks:        166.1.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f8:4f:87:b9:cd:26:dd:e9:ac:33:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 23 02:00:28 2024 GMT
            Not After : Feb 21 02:00:28 2025 GMT
        Subject: CN=b501689d-c4f7-465f-b7ad-066588e2bf2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5b:77:f3:89:62:3f:5e:5f:1d:68:69:4b:5b:
                    8f:db:40:8f:3a:d5:69:d0:1b:7b:04:17:81:8b:85:
                    fa:8b:45:85:eb:ac:d6:da:0b:c0:57:d3:31:11:af:
                    bb:16:33:99:2a:6f:c3:f9:e8:22:b6:cc:41:78:93:
                    27:b9:2c:31:6a:de:96:8d:53:5c:1b:b3:e2:d2:5e:
                    be:f3:df:66:6b:fd:38:ca:fc:eb:39:c4:2b:41:54:
                    5e:f2:f0:c4:4d:e3:f9:ec:9a:fc:4c:e0:67:41:5b:
                    35:f7:e5:49:74:03:a9:ee:ad:ca:78:d6:b7:67:4a:
                    9f:db:fc:b0:6b:0e:2b:1c:41:5b:7b:86:82:65:ec:
                    f0:73:0a:e3:a5:17:e8:8a:8d:04:04:c7:58:77:e4:
                    97:5c:50:33:16:da:02:f4:50:84:2d:12:87:ba:4f:
                    6f:3b:5a:07:3f:3f:1d:f5:a8:a0:55:f5:f9:68:24:
                    cd:3a:14:55:56:4f:5e:7e:0a:ed:64:9b:ae:d3:c2:
                    7a:8f:72:03:00:2e:5f:27:0a:4a:4a:ea:95:b8:aa:
                    fd:bd:fc:38:0a:e6:d0:c2:83:e3:f0:0f:f9:45:2d:
                    d0:1a:3e:e4:b4:7a:f5:20:f4:bf:5a:2e:d9:79:b7:
                    23:b7:8c:fe:c9:3a:90:8a:2d:6b:17:88:3f:cd:c0:
                    48:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D0:AA:6C:50:95:CA:4C:9F:D4:E3:71:91:69:D5:55:E0:7C:5C:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b3cbbfdb-eda3-3367-a86c-a4711e5b20b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:57:e5:8f:e7:6d:50:0d:9a:49:9e:4a:60:b8:11:f8:a4:1d:
         8b:82:5f:0a:d6:65:eb:8f:63:fc:86:78:ec:f0:56:6b:77:e5:
         df:b1:50:02:00:7f:d9:e5:5f:df:99:b3:2e:aa:c7:6a:a1:6b:
         97:c2:a5:04:7d:a9:7a:18:cd:62:a9:6e:04:ab:6e:07:b4:33:
         09:d3:02:8d:a6:35:e9:31:0a:c8:1e:82:3e:04:3a:7b:98:de:
         64:50:c8:db:4e:e2:52:4b:30:44:f1:29:7b:f4:26:cc:28:2d:
         78:92:bc:ac:64:be:b9:87:ce:4d:de:8d:9e:7a:1e:b2:7e:6d:
         41:5a:44:b5:91:bd:41:97:73:f9:70:d7:c6:f5:de:9a:9c:f8:
         6a:da:85:46:68:1f:6f:49:76:9e:20:72:25:4a:a7:44:35:ef:
         6d:82:6f:9f:c0:d5:0e:2e:58:b7:4c:ab:b6:ed:8c:75:ac:22:
         6f:c2:31:f7:0a:cb:6b:1f:45:02:b6:63:43:80:86:24:7d:51:
         a7:64:2f:42:0e:e5:e6:a4:0e:f1:b3:fd:e5:96:45:51:47:30:
         80:cc:c1:f7:98:9e:83:f5:98:a4:76:9c:b0:4e:31:83:11:9f:
         34:6a:9d:ff:90:51:f4:e6:3a:27:7f:ab:04:7c:e3:df:7b:f6:
         3d:75:39:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 7 17:30:31 2025 by rpki-client