Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dbbb97d3-6dbc-3da6-bf5f-806997258b35.roa
File:                     dbbb97d3-6dbc-3da6-bf5f-806997258b35.roa (raw, json)
Hash identifier:          WwszGugkJrtQ1KHdA57sZAP5/C7rH2j2iyLXecOUlzs=
Subject key identifier:   58:3E:94:AE:69:CE:D6:AA:36:3F:EB:B4:79:E0:AE:B2:C2:00:32:5C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847BFC79260190DE89D685F7E80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dbbb97d3-6dbc-3da6-bf5f-806997258b35.roa
Signing time:             Sat 02 Nov 2024 20:01:27 +0000
ROA not before:           Sat 02 Nov 2024 20:01:27 +0000
ROA not after:            Fri 31 Jan 2025 21:01:27 +0000
asID:                     11798
IP address blocks:        166.0.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bf:c7:92:60:19:0d:e8:9d:68:5f:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  2 20:01:27 2024 GMT
            Not After : Jan 31 21:01:27 2025 GMT
        Subject: CN=23ef5712-691a-4b39-8bad-1ca7d814652f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:09:b6:74:5b:b3:60:1b:94:0a:fa:4a:ea:af:
                    5b:a8:16:56:5e:d6:0a:49:ac:b0:d1:7f:91:4b:44:
                    27:f0:17:84:50:b6:bd:56:ec:53:72:35:c8:16:88:
                    f3:30:39:0c:87:61:5b:00:c9:93:4f:6d:9e:08:8c:
                    7d:c5:42:fd:db:2b:ed:97:e4:a3:c2:6a:7a:f2:4b:
                    d8:94:b6:c0:3e:40:41:cc:40:40:9a:cc:b7:50:8f:
                    5e:b8:35:61:6b:5f:6d:44:b5:2e:28:b4:0b:9e:e0:
                    d9:13:1d:07:ca:63:fa:f0:4b:5e:ee:f7:29:01:a5:
                    0c:57:db:dc:9a:ea:58:c0:01:81:bd:10:bd:47:14:
                    c1:1a:10:b0:6c:dc:ab:b5:0f:30:ec:2a:8d:1b:65:
                    c2:5a:4d:31:d4:66:51:fa:28:98:a5:c7:0b:0d:b3:
                    fd:ce:a3:a3:49:c5:c1:6f:4e:b2:8c:83:5a:f1:6d:
                    83:62:9a:0d:10:ca:c6:1f:d4:7c:0c:35:a4:5f:24:
                    82:da:06:40:a3:04:af:84:6f:ac:d3:fe:9f:61:9e:
                    e1:d7:bd:ce:e4:49:44:07:ae:94:97:37:19:0d:32:
                    71:b4:a2:74:e8:4a:77:ef:fc:33:54:a7:2b:20:1c:
                    d1:ab:4b:28:71:97:5f:a2:c2:38:76:7e:61:97:33:
                    97:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3E:94:AE:69:CE:D6:AA:36:3F:EB:B4:79:E0:AE:B2:C2:00:32:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dbbb97d3-6dbc-3da6-bf5f-806997258b35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:ea:65:1d:40:15:a6:a7:48:d3:a6:4d:48:06:f8:09:dc:81:
         0c:b7:cf:c3:84:65:66:65:82:d6:78:a7:67:f4:eb:b9:01:95:
         73:91:6c:67:ca:6b:7b:37:25:2a:c6:9b:f5:1e:2d:3d:25:c5:
         52:28:14:a2:97:25:3c:e8:83:73:44:0a:d4:c1:ce:df:da:2a:
         05:f1:e8:df:b8:63:81:f7:03:8c:f0:a7:02:d9:8b:65:88:48:
         53:0d:23:3a:10:3a:8c:ac:e5:e7:3d:c7:6f:f6:49:4e:3b:c4:
         31:e7:b0:8f:24:86:43:4b:ce:17:d2:24:8a:05:b9:3a:64:eb:
         5e:9b:ba:03:d1:26:0a:79:a6:a0:94:85:a2:37:1d:8f:15:62:
         e3:3d:c3:8f:7e:07:c4:ce:bc:44:01:3c:21:57:12:ff:84:54:
         6b:78:98:57:cf:cd:b1:f2:17:92:c2:8d:df:fe:57:6a:16:de:
         62:f4:91:a2:b3:dc:48:8e:b5:6c:35:d0:e0:4f:79:73:0c:c3:
         66:18:00:49:08:ea:51:16:e3:cb:88:f3:6f:92:aa:2f:77:64:
         63:0e:91:d7:70:48:c1:a0:d7:5c:60:cc:47:d7:ab:68:f5:de:
         f6:cd:fd:b7:d9:48:de:d2:a6:ff:c0:b9:11:01:6f:eb:f0:b0:
         51:a9:5d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:28 2024 by rpki-client on console-fra.rpki-client.org