Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b7087b82-f47f-3715-888b-bd60420173d1.roa
File:                     b7087b82-f47f-3715-888b-bd60420173d1.roa (raw, json)
Hash identifier:          u5TPZvk67olMiTtjiTJZqlHS1JmTkdC7JugGW7ugaUQ=
Subject key identifier:   C8:B6:16:45:17:C9:3E:9A:6B:29:F9:E8:B8:8C:A9:AE:6D:96:B2:17
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845A15E0EFC12AF71A9930CD580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b7087b82-f47f-3715-888b-bd60420173d1.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     62240
IP address blocks:        166.1.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:0e:fc:12:af:71:a9:93:0c:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=09c2a5ea-00db-4805-8cc2-f913fc4aca03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:38:ad:6c:92:0d:19:47:ac:2d:0b:72:af:65:
                    19:5d:64:29:c4:2a:ce:c5:f2:53:ba:38:5a:3a:c4:
                    56:36:16:8e:46:56:e0:c6:a4:11:62:6a:75:d5:80:
                    b0:02:71:56:f1:e2:7f:91:aa:58:20:41:dc:ce:ea:
                    1c:d1:4a:43:16:ec:db:2a:4a:b2:07:14:60:40:75:
                    53:85:e5:b8:9c:a1:47:84:ea:6c:3b:87:bc:3c:da:
                    78:9d:ab:55:cc:16:80:62:ec:9d:62:75:07:da:3f:
                    f8:67:77:88:e0:b3:78:91:e8:c7:d5:ad:f6:1f:2d:
                    f4:65:4d:d2:d9:d2:b0:3a:35:8b:0f:db:d0:f2:9d:
                    34:14:cf:bf:c5:05:ee:83:6f:c5:99:1d:60:c1:a9:
                    ef:e4:28:c2:76:e7:c6:e5:74:03:42:1f:e5:e4:b3:
                    8d:52:c8:91:33:91:1e:20:65:0b:37:37:6d:c3:cb:
                    88:2e:d4:bf:c1:57:59:6d:8d:a8:29:8a:9d:e5:bf:
                    4a:43:0e:9a:3e:cc:e3:35:6f:3b:6c:a7:e6:47:87:
                    0a:84:94:e5:7f:53:09:16:a2:41:7f:89:e4:d2:bf:
                    6c:76:16:81:e0:ee:96:b0:5f:6d:a6:35:4e:2c:e0:
                    67:7a:99:30:a8:39:cd:85:75:a9:24:c5:56:4f:8b:
                    eb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B6:16:45:17:C9:3E:9A:6B:29:F9:E8:B8:8C:A9:AE:6D:96:B2:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b7087b82-f47f-3715-888b-bd60420173d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:d3:c1:8e:1c:b0:f7:91:76:93:cb:f7:f0:d7:e7:56:8a:a4:
         29:0c:6c:67:8e:b4:d1:32:46:85:d1:03:93:49:70:6f:53:60:
         62:14:d6:00:2c:6d:f1:d1:78:47:4a:4b:af:40:e4:36:82:2b:
         5e:26:6a:23:cd:41:50:34:c4:09:56:38:88:6a:c2:88:e7:48:
         07:2e:91:f4:f3:bc:f9:3f:bc:e0:e5:15:91:aa:6e:10:36:c3:
         66:5c:b0:b6:31:4e:cc:42:6b:0e:73:d9:6a:e6:41:db:a7:45:
         ee:e4:bd:7d:b7:bd:2d:b2:7a:c4:d6:ce:4e:ee:e7:5a:85:5c:
         12:54:68:e1:4d:42:0d:a2:c1:d2:84:ab:54:05:99:4b:26:d1:
         ce:4a:af:92:72:0f:a9:96:48:8e:b2:0e:e4:6b:8a:d5:93:d5:
         6a:d8:7c:bd:a1:d6:28:37:18:cf:8e:03:69:e5:95:6d:9d:ec:
         69:35:f8:ef:88:6e:b7:c9:69:83:f2:f9:93:d1:49:b6:3a:96:
         5a:b3:ea:0c:7b:09:b4:a1:2a:d9:d7:3a:a2:a8:4d:27:2e:ca:
         3b:5f:bc:44:3f:d6:97:88:fc:d8:4d:5e:2e:72:94:75:55:04:
         65:37:15:84:30:2c:39:25:dc:10:d4:39:9e:71:3d:8e:06:5d:
         d3:69:da:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:59:07 2024 by rpki-client on console-ams.rpki-client.org