Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d4c5c645-c7ed-3fc9-a92f-5a2ae6ced66a.roa
File:                     d4c5c645-c7ed-3fc9-a92f-5a2ae6ced66a.roa (raw, json)
Hash identifier:          ciQ41wJefU8CwOmr9XetO2DNjZc2mNj7BnNbdXw066o=
Subject key identifier:   85:F6:A0:C4:09:24:FE:3F:F7:42:6D:C4:9B:32:DC:D7:D1:BA:9E:76
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847600B95C35020E9A0282B4A40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d4c5c645-c7ed-3fc9-a92f-5a2ae6ced66a.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     62240
IP address blocks:        166.1.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:95:c3:50:20:e9:a0:28:2b:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=72000aa4-cc59-4311-93e3-630b51404243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e8:db:16:e8:17:87:3a:7b:d8:fe:f2:ed:85:
                    eb:56:99:42:d8:28:b1:1e:38:ce:29:07:93:32:ae:
                    20:56:41:56:6a:08:99:58:a4:e0:5d:95:dc:d2:fb:
                    27:3d:86:4c:76:c3:86:ef:bc:b5:81:48:0f:26:94:
                    b7:17:81:18:c1:49:f5:44:dd:30:3d:0a:05:61:5a:
                    8c:40:34:52:1a:cd:82:0e:41:c7:85:49:92:2b:ab:
                    0f:0d:4f:d2:e4:20:e2:9c:66:64:86:f3:de:b5:bc:
                    97:eb:65:02:90:6c:4d:b9:45:36:48:c7:8f:98:d3:
                    32:c7:7a:c5:71:56:c5:54:6e:ce:9e:1c:49:16:65:
                    c8:ee:cb:ab:a2:26:de:53:0a:a2:b9:b0:4c:6b:90:
                    ca:a2:9f:47:24:40:03:b3:92:ed:8b:03:3e:28:c9:
                    2f:3c:ea:c6:fd:14:4d:6f:ca:3a:0e:bc:3d:8c:cd:
                    23:69:5f:c8:53:62:c9:99:c3:b7:9b:2b:d0:de:1f:
                    5a:ba:45:50:53:38:76:7c:5e:c3:02:43:29:18:4f:
                    96:a8:6d:08:3f:27:93:24:af:5a:31:61:f7:6e:75:
                    bb:67:0d:9f:4e:4e:f0:7f:13:1a:65:98:28:6e:5b:
                    65:33:ba:78:e2:c1:86:3b:1c:83:58:a0:91:f5:b9:
                    5b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F6:A0:C4:09:24:FE:3F:F7:42:6D:C4:9B:32:DC:D7:D1:BA:9E:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d4c5c645-c7ed-3fc9-a92f-5a2ae6ced66a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:db:e2:a0:d2:b4:02:af:85:9d:53:bd:0f:3d:6a:50:f0:d3:
         ad:0c:28:23:b2:05:57:58:4c:27:06:fd:b7:97:33:39:ce:d7:
         bc:3e:db:71:39:a0:60:11:c0:84:6b:2a:d0:0f:b9:88:55:4f:
         46:c5:a6:8d:1b:17:ed:4d:bd:c4:dd:e3:a2:8c:b4:41:1d:8e:
         75:0a:74:3a:8a:8b:4a:6f:d1:1f:1e:b4:5d:ee:35:79:09:29:
         54:25:f4:d8:bc:6d:a0:84:79:51:0e:ae:1d:3c:92:75:18:82:
         70:b9:68:43:fe:03:cd:87:bf:bb:06:4b:cf:a8:6e:51:1b:a3:
         1c:da:86:7e:d5:e0:ff:b0:ca:51:2c:c2:dd:7d:57:03:8a:e6:
         ba:0c:32:28:53:15:57:95:7b:bb:1e:79:5b:4c:bf:49:bc:87:
         ec:98:79:a2:16:ea:6a:49:da:15:2d:ec:a0:6d:7c:cf:09:84:
         0f:f4:6d:9a:bf:04:67:06:e4:ec:c1:3f:b4:90:d4:cf:cb:47:
         cf:64:26:c6:3d:e5:63:46:0a:ef:26:d1:60:42:21:14:10:87:
         df:09:21:83:de:f5:0e:93:42:55:94:c7:42:6d:36:32:c9:59:
         df:df:58:8c:e2:9e:71:02:50:aa:2f:85:76:1c:f0:bd:a8:18:
         79:90:60:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:35:10 2024 by rpki-client on console-fra.rpki-client.org