Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d67d827f-eca4-39b7-a1a5-7c652a43e256.roa
File:                     d67d827f-eca4-39b7-a1a5-7c652a43e256.roa (raw, json)
Hash identifier:          gTiMg3ZknuFZXSrtbFNJNbZKDGcAztLHYhRLN/3s1Hc=
Subject key identifier:   41:63:72:21:E9:D8:A4:11:26:B2:27:BF:E0:4F:64:FC:6E:1A:8D:C8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584790AF7650CBE04A0261B72300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d67d827f-eca4-39b7-a1a5-7c652a43e256.roa
Signing time:             Wed 16 Oct 2024 23:09:53 +0000
ROA not before:           Wed 16 Oct 2024 23:09:53 +0000
ROA not after:            Wed 15 Jan 2025 00:09:53 +0000
asID:                     8881
IP address blocks:        166.0.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:90:af:76:50:cb:e0:4a:02:61:b7:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 16 23:09:53 2024 GMT
            Not After : Jan 15 00:09:53 2025 GMT
        Subject: CN=e315a36a-e612-486d-bf9f-92cbbfd44fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ff:f3:9b:51:1d:fe:9e:4f:7e:44:89:c0:d3:
                    3e:b1:85:5a:30:3f:50:75:fe:9b:c2:05:49:dc:f0:
                    9a:c1:86:ff:43:ff:2f:ce:4d:c0:51:7b:19:a3:ce:
                    3d:ed:8e:0f:ac:63:52:dc:1d:6c:ac:36:62:d3:cd:
                    d9:15:8b:df:41:2a:1d:86:9e:de:72:56:77:d7:9e:
                    14:46:07:b2:02:72:aa:90:c3:e9:51:ac:cb:ec:93:
                    8f:ca:ec:a8:e2:5c:e6:84:1f:f2:9a:04:2a:9f:05:
                    d8:b5:5b:45:f3:a0:10:ee:7b:25:fd:b2:05:b0:38:
                    96:00:97:07:75:08:de:42:21:c4:95:3d:65:86:1c:
                    6c:e2:57:aa:c7:5c:9e:39:fe:06:54:54:60:cd:ce:
                    32:60:39:0e:de:43:db:61:e0:20:1d:ac:38:b9:ed:
                    86:5b:06:19:28:8b:9d:84:2a:db:e6:39:d8:b1:de:
                    d8:4c:fd:6f:82:e2:df:ab:b9:f2:27:ce:a8:18:74:
                    e9:5d:6b:41:9c:94:3c:ac:42:2e:0a:d7:ff:0b:a9:
                    8a:ce:9a:ef:80:79:f7:cc:90:51:b3:74:6b:18:15:
                    97:54:1c:1a:dc:cb:61:88:b7:fc:92:a8:67:01:0d:
                    ba:19:21:47:8c:1a:85:c0:26:24:d6:0c:72:26:86:
                    91:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:63:72:21:E9:D8:A4:11:26:B2:27:BF:E0:4F:64:FC:6E:1A:8D:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d67d827f-eca4-39b7-a1a5-7c652a43e256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:55:83:26:3e:2c:39:60:4e:f4:cd:47:e4:7f:ec:ca:67:a3:
         9e:86:7b:b6:cb:c3:ab:0e:93:4f:d5:8a:d4:2d:10:00:a2:b5:
         09:16:d8:1a:d3:8d:b2:2c:c2:61:bb:44:fb:53:4a:a7:37:65:
         8f:59:3f:fa:b3:26:8d:b8:91:c4:18:c4:77:73:a2:cf:fd:51:
         60:b2:7d:8b:c3:4e:da:ad:04:5c:ad:0a:25:58:e5:72:66:e1:
         84:a8:8f:cf:0c:57:93:de:0f:cb:cd:12:f7:51:e8:f8:66:e1:
         92:d3:3a:58:ff:fb:05:51:6e:c1:81:6a:fb:14:29:9a:f4:59:
         24:1a:43:c5:58:03:79:1e:7a:e3:1f:1f:b4:29:32:e2:20:79:
         f5:cd:e8:f6:07:f3:03:75:1e:10:df:9c:b4:31:9d:0c:93:0a:
         e8:0b:85:65:e9:24:49:ab:b4:e0:f2:0e:e2:7f:b0:4e:f5:98:
         76:2d:5c:06:64:6f:ce:af:f1:e6:05:a7:85:5c:c3:72:4b:a7:
         48:ba:2c:2a:75:f6:30:0d:da:14:04:25:43:6a:ab:3f:56:de:
         77:6e:d2:85:97:ec:60:2e:93:60:a4:c3:cf:c4:f2:d6:d8:c7:
         f2:ca:a2:11:30:be:07:56:d5:ad:7c:d5:61:f2:eb:2c:95:e9:
         c2:ea:b3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:32:24 2024 by rpki-client on console-fra.rpki-client.org