Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c76ed431-6000-3686-a578-f160427c1baf.roa
File:                     c76ed431-6000-3686-a578-f160427c1baf.roa (raw, json)
Hash identifier:          /sykvLHPrg8lOQP1dQBH15N21/Dn7V39MnCGsqCpH3k=
Subject key identifier:   5D:54:8E:7B:3F:FA:76:F3:38:74:EB:A2:E2:69:E7:B3:A6:CE:4C:6A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847600B9CF44EC74EBECD83AE00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c76ed431-6000-3686-a578-f160427c1baf.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     62240
IP address blocks:        166.1.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:9c:f4:4e:c7:4e:be:cd:83:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=796780f2-03ec-4e56-8ffa-2177bac65ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1e:1c:19:89:88:a0:f6:01:fe:38:51:d2:49:
                    25:66:73:58:f2:cd:13:52:fb:2e:4f:22:71:ab:68:
                    e6:5e:d1:28:6a:30:a8:cc:f6:c3:24:df:39:3e:e5:
                    f5:2f:ff:7c:fa:51:10:da:42:aa:77:be:d1:f2:93:
                    67:f7:9c:16:57:f1:91:7f:47:d8:cb:e1:33:fd:d2:
                    dc:f2:e1:f7:ad:84:f3:bf:d9:40:a5:fd:d2:e1:ab:
                    06:7e:27:cd:1c:9a:57:33:a4:b0:03:ff:6e:c1:41:
                    22:ed:cd:ed:6a:1c:ec:12:43:50:89:bf:44:f3:01:
                    e0:60:9f:57:5b:30:b4:fb:4b:eb:b6:98:52:ea:1e:
                    56:1f:e2:fe:68:2b:c2:d3:24:ab:97:f3:c6:c8:6f:
                    38:c8:96:35:23:62:71:35:ce:bd:e0:3d:c2:f6:17:
                    00:3a:93:9d:81:f6:08:0b:15:04:b1:10:fd:c0:ec:
                    f7:bb:e6:1b:bb:c3:64:71:5c:a0:4c:1b:5b:15:7f:
                    0f:38:55:76:92:c1:79:67:1b:b2:b1:b5:83:a0:e1:
                    7c:54:ad:9c:d7:6d:7a:bb:38:e1:9d:36:fe:43:8f:
                    f9:bc:89:f8:6c:3c:bd:71:dc:74:51:45:8b:38:7f:
                    7b:a8:1b:af:5f:22:57:0b:58:ed:77:ae:12:08:05:
                    4f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:54:8E:7B:3F:FA:76:F3:38:74:EB:A2:E2:69:E7:B3:A6:CE:4C:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c76ed431-6000-3686-a578-f160427c1baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:41:67:f9:36:36:26:15:3a:19:de:a5:77:ae:55:63:83:d9:
         5f:af:85:4f:59:9b:20:75:4f:7d:5b:ee:96:90:b1:df:6a:4b:
         fc:7e:c5:00:5f:d0:bc:de:36:5d:4f:63:ea:cf:4d:f3:db:12:
         f3:93:06:f4:d2:77:79:40:1f:fc:9f:b0:a4:69:d0:71:06:af:
         21:39:63:d8:c1:a1:d2:ce:10:2b:c1:de:33:4a:fd:85:7d:0d:
         8e:4b:fa:0b:6d:d3:60:5e:52:ff:f0:9a:76:01:91:c8:2d:fc:
         39:b2:7a:ea:2f:6b:ee:85:d5:9c:c2:e4:d8:e0:1a:10:26:3b:
         69:ad:b8:5a:d1:e2:28:00:a5:ac:ec:5e:93:fa:bf:c8:63:c6:
         ce:59:09:31:c6:7a:ff:b4:84:15:53:77:4c:4d:dd:5f:33:04:
         16:1f:8e:a0:3d:ee:f0:ad:ca:4f:0e:c3:a0:43:07:20:4c:cb:
         7e:ef:cf:39:61:56:be:61:ee:4b:54:4e:53:0a:19:17:69:c6:
         ef:6f:32:bc:92:ec:e1:28:ae:a1:a7:95:c3:09:20:89:35:14:
         95:3f:e1:33:52:d6:9c:ce:7f:b1:bc:07:a4:38:46:b1:06:f5:
         a2:5f:6e:5b:31:d2:ea:9d:17:77:a0:66:bb:35:2a:7d:bf:8d:
         bd:bb:31:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:15:45 2024 by rpki-client on console-fra.rpki-client.org