Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e113028c-0351-3baa-88c3-960904013b2a.roa
File:                     e113028c-0351-3baa-88c3-960904013b2a.roa (raw, json)
Hash identifier:          W3K6wRktuOmKWjK1Ts45objYH6LkctTneGdjbQGrOrs=
Subject key identifier:   C8:74:3E:3D:FE:32:5E:76:D8:D8:87:62:FC:C9:C1:1B:49:AE:E8:63
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844E9A82402F1B59552F214AD00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e113028c-0351-3baa-88c3-960904013b2a.roa
Signing time:             Fri 16 Feb 2024 17:41:16 +0000
ROA not before:           Fri 16 Feb 2024 17:41:16 +0000
ROA not after:            Thu 16 May 2024 16:41:16 +0000
asID:                     208287
IP address blocks:        166.1.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e9:a8:24:02:f1:b5:95:52:f2:14:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 16 17:41:16 2024 GMT
            Not After : May 16 16:41:16 2024 GMT
        Subject: CN=141e4847-e24a-410f-a5f3-35f865b2eb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5d:a9:69:a1:69:fc:5d:eb:d7:d7:f0:fa:35:
                    c9:ee:e8:60:04:30:16:9b:9c:46:47:c9:d1:ac:86:
                    a6:5b:79:aa:6e:a0:68:9b:bb:f9:b4:3a:3d:dd:2a:
                    09:cf:42:12:b0:ae:63:a7:65:27:b0:35:37:8f:57:
                    27:e7:5f:63:b3:94:89:ad:d0:15:dc:60:6a:1c:68:
                    2c:d8:c4:c7:17:07:77:b3:42:fa:61:6b:f1:04:ef:
                    e9:ef:1c:85:5e:e4:95:f6:0e:cb:38:51:0b:0e:89:
                    96:8d:7e:b9:54:75:9f:cb:42:c7:37:b2:d2:1e:0f:
                    84:bb:3c:19:ca:d6:e5:1e:f9:43:f2:c3:c9:9f:2d:
                    39:86:17:47:81:47:8f:0a:38:ca:fc:1a:1a:db:d8:
                    d7:7e:39:eb:76:0f:04:20:2a:1f:09:a3:ed:94:6b:
                    ea:40:60:37:e9:ca:78:69:13:31:e3:6b:b7:2f:da:
                    77:9e:9f:0c:eb:16:92:f3:20:99:e5:f3:69:a3:cf:
                    51:a2:2d:bc:9b:cc:e3:f0:30:8e:57:01:f6:b6:d1:
                    29:74:a3:5f:02:53:0f:06:93:1e:a3:8f:18:90:46:
                    c6:73:97:c4:43:e5:87:2a:0d:1d:dd:85:94:1d:53:
                    3a:d7:53:30:41:7d:fb:e8:b0:45:fe:ec:a0:12:ad:
                    4e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:74:3E:3D:FE:32:5E:76:D8:D8:87:62:FC:C9:C1:1B:49:AE:E8:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e113028c-0351-3baa-88c3-960904013b2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:61:51:16:5a:58:5c:cd:27:05:19:d2:40:bc:65:1c:21:37:
         75:a6:35:d9:45:d4:85:0b:03:d9:27:96:9b:f7:3b:91:21:4d:
         fd:02:b7:6c:f0:17:de:c3:b7:21:ac:0c:92:a5:1b:bf:6b:e6:
         ec:86:55:8c:49:00:49:2d:e4:cd:5d:c8:38:6b:40:b0:17:d1:
         91:ac:b4:b6:35:e4:0a:00:bf:0b:44:96:1d:ef:46:70:06:04:
         a0:31:29:03:2d:7e:b1:a9:11:0e:e1:c2:37:7c:f1:ba:4b:45:
         3d:2e:d4:47:d9:9a:3e:16:52:58:2b:56:3b:ef:c5:33:6d:f1:
         c7:0f:f3:e1:00:a8:2a:4c:16:58:5f:e8:e6:f2:ca:58:b7:89:
         16:ae:72:aa:d5:3e:7d:ec:08:17:f0:94:02:0d:3c:a6:65:6e:
         34:eb:3e:b0:7e:cf:ef:dd:54:0e:b3:b5:e2:25:d9:9d:52:e1:
         bb:00:0e:13:c9:12:10:c1:de:78:83:fb:53:23:2d:c4:05:1a:
         e3:1e:ea:6a:a4:86:74:12:7a:48:04:d7:eb:a2:d8:ec:e4:f4:
         14:2b:f1:2e:4f:4f:4a:d3:75:31:81:58:46:1f:36:2d:a1:1f:
         11:13:d7:69:2b:03:5e:63:3b:27:57:a8:af:10:49:a4:3d:62:
         67:f9:b5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:55:58 2024 by rpki-client on console-fra.rpki-client.org