Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e3d41c72-cdd4-3b1b-b30b-410b1afa1253.roa
File:                     e3d41c72-cdd4-3b1b-b30b-410b1afa1253.roa (raw, json)
Hash identifier:          9yrljL7QYX1BzmItKknriot6qdN/sts8ZcIz768/NhM=
Subject key identifier:   26:C9:B3:D5:98:32:0C:8A:FA:3F:97:5D:3F:6F:DF:D2:BC:5B:12:FC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845BA7E37BCADEFEE7BB98964C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e3d41c72-cdd4-3b1b-b30b-410b1afa1253.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     264409
IP address blocks:        166.0.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:37:bc:ad:ef:ee:7b:b9:89:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=729dc157-613c-4182-92dd-2ce0ec3c0384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a7:08:cc:6c:8a:7e:5a:50:32:d8:ec:db:a2:
                    b8:21:91:a8:e6:b0:96:7b:74:9b:33:77:01:76:81:
                    64:8e:57:0b:f0:3d:0d:ba:4b:3e:2b:ba:97:ed:e0:
                    c7:f3:19:93:96:ea:28:75:cd:c6:eb:94:93:26:11:
                    53:52:c0:84:ef:7f:d1:a3:f0:7a:1b:04:8f:f0:82:
                    75:d1:21:b9:10:d5:9d:34:76:45:08:11:f9:03:2f:
                    c2:99:10:84:b8:c9:7f:59:f3:94:f5:2f:d8:f6:dd:
                    9f:30:d9:b4:6c:2c:8b:04:a6:12:12:b1:8d:1c:f8:
                    5f:22:74:c6:c9:36:da:67:df:34:ee:1f:20:27:63:
                    95:f7:4d:33:03:30:a4:0f:f0:a5:88:49:65:95:75:
                    23:5b:ee:2e:f4:d2:b5:3f:05:b6:b9:46:a1:e0:9d:
                    78:93:e9:c1:92:5d:37:37:40:ab:0a:87:cc:f8:11:
                    2c:df:c4:5f:71:0c:ee:2c:e2:a2:33:75:c9:2c:0a:
                    b8:98:9f:5c:ca:45:df:1f:6a:0f:e1:00:ad:ef:31:
                    48:d8:76:88:67:df:f8:b9:77:48:e9:cd:7d:08:23:
                    dd:3e:90:17:46:2d:8e:81:9d:b3:f1:7e:26:aa:89:
                    33:7d:de:55:45:95:ef:ff:f8:94:42:09:6b:f5:a2:
                    e2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C9:B3:D5:98:32:0C:8A:FA:3F:97:5D:3F:6F:DF:D2:BC:5B:12:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e3d41c72-cdd4-3b1b-b30b-410b1afa1253.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:c8:fc:92:40:76:ea:88:23:8a:83:eb:c0:67:0a:f0:11:b3:
         88:36:3f:75:c5:50:ff:c8:bc:9b:4e:9a:77:2c:28:99:44:c3:
         6e:94:02:19:bc:01:d4:ef:44:a6:e1:f5:dd:9c:74:51:7b:2e:
         2a:27:df:dc:e0:ef:58:bb:72:44:eb:17:02:1a:69:48:10:0e:
         b9:a5:8e:bc:82:45:03:4f:ce:35:13:fd:cd:5e:e1:93:36:44:
         00:85:e7:f5:d2:5d:c6:95:20:8b:0b:8b:d2:b9:e9:3e:47:42:
         2c:72:d3:5e:6e:b0:84:87:b9:e0:ef:42:41:04:b5:95:0e:7c:
         d4:c4:99:4c:96:86:a3:27:66:d0:84:b6:64:3b:bd:97:cb:c4:
         b7:e6:54:44:64:a4:df:f2:54:f0:30:fd:c1:28:f1:2d:f0:bc:
         a5:0a:06:c7:73:e0:27:7b:ea:7a:93:74:b9:97:51:5a:1f:84:
         44:ac:06:80:e8:33:6d:2e:05:7c:69:c8:5d:a9:99:90:44:c1:
         c6:a5:b8:9d:d9:4a:68:6c:5d:c3:01:bb:e0:9a:af:a1:92:ae:
         44:cc:cc:3d:58:17:37:7c:b5:da:22:34:01:2a:66:e4:31:38:
         b8:cf:6b:5e:96:d2:0b:d9:da:88:be:58:02:dc:66:9b:98:b6:
         94:df:50:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:55:58 2024 by rpki-client on console-fra.rpki-client.org