Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bc64c8ee-e9c6-3cb3-9bad-0b573fd9dab2.roa
File:                     bc64c8ee-e9c6-3cb3-9bad-0b573fd9dab2.roa (raw, json)
Hash identifier:          VKJ5UdfDFIbxecSjKUBvpdeaKiLCqurCjPMzdxmthCY=
Subject key identifier:   3B:B1:AB:F3:AA:9A:8A:47:93:8C:32:94:F5:ED:AA:57:94:96:F8:D6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844F9FABAEF4F78DBEDE50F8A40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bc64c8ee-e9c6-3cb3-9bad-0b573fd9dab2.roa
Signing time:             Thu 22 Feb 2024 14:00:30 +0000
ROA not before:           Thu 22 Feb 2024 14:00:30 +0000
ROA not after:            Wed 22 May 2024 13:00:30 +0000
asID:                     203569
IP address blocks:        166.0.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f9:fa:ba:ef:4f:78:db:ed:e5:0f:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 22 14:00:30 2024 GMT
            Not After : May 22 13:00:30 2024 GMT
        Subject: CN=cd42a188-925e-47d5-8f88-0e5ed3461b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0c:41:78:b1:4e:1b:0e:53:3c:61:46:a8:1f:
                    9d:46:1a:f9:3b:1a:8c:67:95:2d:21:9f:11:31:84:
                    33:4b:9f:d0:ce:1b:4d:8e:90:1e:74:5f:29:26:9e:
                    a8:b1:5e:f4:92:d7:b4:18:84:50:8c:23:f7:3c:a1:
                    0e:20:78:cf:c8:22:da:45:48:51:dd:4f:74:74:7c:
                    2d:5d:d6:53:e8:09:67:42:97:96:af:d8:cd:4d:5f:
                    bb:ec:83:90:ca:64:69:db:62:c8:6b:ea:12:e4:fe:
                    f8:c7:4c:02:09:ae:bc:85:6d:04:d8:5f:5c:3d:c1:
                    92:af:8d:9b:15:bb:6f:08:7e:19:30:d0:af:0f:73:
                    48:b7:d0:54:e9:79:b5:00:da:2c:98:86:f0:9e:5a:
                    f1:e5:90:f4:44:e3:fb:0e:ee:fc:ab:83:ea:60:1d:
                    69:7c:4b:18:65:a0:a5:03:df:53:fa:7b:59:d5:9c:
                    49:95:fd:90:17:28:88:73:42:f9:6f:14:c3:14:cb:
                    17:da:b0:39:93:81:d1:b9:86:50:96:c7:1f:6f:f1:
                    e2:3c:b3:46:7a:71:28:0a:07:36:43:6b:35:62:f2:
                    f9:e7:02:0d:aa:51:78:fd:43:ef:51:d2:62:2b:8e:
                    48:ef:08:db:7b:f3:5d:eb:5c:dd:9d:44:57:a3:93:
                    aa:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B1:AB:F3:AA:9A:8A:47:93:8C:32:94:F5:ED:AA:57:94:96:F8:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bc64c8ee-e9c6-3cb3-9bad-0b573fd9dab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:39:81:5c:88:d9:56:88:10:40:e4:2b:80:a5:d5:4d:8f:0e:
         80:74:96:f7:29:4a:2a:13:f8:33:c6:c4:13:8a:ce:bd:07:fc:
         d9:ca:e5:a7:97:cf:37:2d:bf:cd:c4:f3:7e:e3:5f:04:9c:bb:
         ec:9a:c9:d5:ce:bf:50:7d:81:35:a5:bd:2f:e4:24:29:5d:c5:
         fd:35:b7:60:ae:ee:1e:da:c8:87:9a:0f:e6:65:1b:ec:a9:24:
         ab:fe:d2:de:ed:92:88:2e:c7:a8:a3:c7:e6:f3:a3:0a:e2:ff:
         32:8d:77:e4:68:26:28:3e:5e:36:27:0f:96:58:ef:d4:db:7b:
         07:92:5d:42:99:6e:30:a0:2a:a0:90:f3:84:8b:c1:e8:66:e7:
         6f:02:fb:4b:f3:75:9e:1b:71:70:49:8f:17:2f:3f:a4:2d:03:
         bb:09:8a:b0:f8:71:c9:c7:a0:63:e1:b9:2e:b3:d6:f9:aa:9a:
         5f:5a:8c:6c:b4:30:d9:d8:c1:18:7f:aa:38:dc:63:cb:93:8f:
         85:79:70:9a:e1:63:75:63:89:74:74:ba:66:b3:1b:82:ba:00:
         bc:36:4e:26:9c:eb:8c:1e:c4:09:58:bd:58:6b:95:ee:37:ab:
         de:68:74:48:c5:ec:6c:17:b5:57:15:1d:31:16:6c:cc:10:36:
         bc:10:ba:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 21:45:45 2024 by rpki-client on console-fra.rpki-client.org