Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/df1fd899-5035-351b-9006-8496b357700e.roa
File:                     df1fd899-5035-351b-9006-8496b357700e.roa (raw, json)
Hash identifier:          sOSdfSVdkLyOLIFfiDkmFfHmdXH89Bes0/17sS7xebk=
Subject key identifier:   26:B3:44:D6:F5:82:8A:5B:3B:85:1E:4C:CA:1C:C9:31:57:23:28:1A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584731FB9DBB84D797984E367200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/df1fd899-5035-351b-9006-8496b357700e.roa
Signing time:             Fri 13 Sep 2024 01:00:32 +0000
ROA not before:           Fri 13 Sep 2024 01:00:32 +0000
ROA not after:            Thu 12 Dec 2024 02:00:32 +0000
asID:                     58061
IP address blocks:        166.0.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:31:fb:9d:bb:84:d7:97:98:4e:36:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 13 01:00:32 2024 GMT
            Not After : Dec 12 02:00:32 2024 GMT
        Subject: CN=53a654c4-378a-4479-913c-d37dcce1114a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c1:f5:26:a0:7c:c1:7a:7c:35:49:80:1d:a4:
                    52:9b:f1:50:12:18:00:9b:46:e7:ea:72:74:2a:d6:
                    ec:2d:64:90:45:66:ef:b7:8a:bd:a8:84:86:ed:e1:
                    36:53:07:1b:9d:8b:2c:9c:67:9b:df:bb:41:ae:29:
                    09:38:29:39:ff:d4:e2:74:5a:a0:3f:79:df:31:98:
                    8a:2b:e2:a8:68:19:59:d5:83:b8:af:4b:d4:3f:5d:
                    ee:12:f7:75:89:4d:59:22:7d:c2:df:10:dc:b7:5f:
                    15:18:fd:1e:11:bd:ac:1a:53:d1:91:84:81:2e:40:
                    df:5f:fa:a6:ae:24:ea:fe:45:70:e6:cf:55:92:5e:
                    86:5f:5a:86:5f:97:58:7f:a0:b9:64:d3:07:e9:5b:
                    be:8b:3d:7f:f6:81:81:f0:a9:c0:2a:e3:a1:4e:a9:
                    f6:fd:49:15:f8:5d:ec:e7:cf:5f:1a:38:ec:dd:f6:
                    9e:23:14:a2:a2:66:3b:27:77:71:64:2d:04:a1:29:
                    40:d7:09:b5:e5:f4:3d:f5:d2:b8:68:ed:5b:18:94:
                    9a:51:b3:55:19:a2:72:eb:28:43:2d:bf:b7:42:19:
                    3b:ad:66:61:40:30:b5:c7:1a:65:49:7d:af:b0:30:
                    85:5b:74:6b:55:cd:69:65:89:09:e3:e2:a1:f3:f2:
                    12:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B3:44:D6:F5:82:8A:5B:3B:85:1E:4C:CA:1C:C9:31:57:23:28:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/df1fd899-5035-351b-9006-8496b357700e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:6d:e2:1d:8c:ea:f6:55:a9:af:fe:cc:3b:0a:14:f7:a9:a8:
         94:b1:17:32:9d:94:5f:b8:68:2c:f1:1f:37:91:14:9a:61:af:
         e2:aa:9e:9e:62:52:5d:21:96:51:81:73:0c:f9:b6:ce:4d:a8:
         1a:a1:4a:1c:fd:4c:0b:e0:f3:1f:3c:9b:8a:69:ee:03:17:f1:
         6b:80:f4:bd:13:f9:3f:3d:e5:5f:48:de:54:80:65:ad:80:4a:
         08:d8:34:1b:55:a9:41:f5:f6:37:b5:31:d3:f4:47:4d:ad:42:
         b0:2d:51:ac:22:97:c7:7c:44:0f:c0:25:d8:ad:a1:46:50:88:
         fb:30:c5:92:8c:e4:94:99:8e:66:aa:8d:20:f9:60:05:53:d1:
         c9:22:02:a8:d9:ff:31:5f:a7:c2:ae:78:02:d9:11:6b:57:4f:
         0f:8a:06:3a:ca:51:b8:00:1e:d4:bd:c1:60:60:93:36:ed:c6:
         cb:82:2b:dd:84:38:fd:d5:0a:e8:46:02:45:79:6a:ee:e6:f7:
         92:af:06:77:bb:6c:e4:31:23:ec:0f:54:8c:6b:f7:bf:4c:dc:
         29:a2:5c:1e:82:43:36:5f:8a:69:61:9c:c3:88:8d:ce:a1:65:
         ea:72:d9:10:90:06:a5:3f:a8:b6:f0:28:17:c8:24:92:09:f8:
         74:ad:ab:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:28 2024 by rpki-client on console-fra.rpki-client.org