Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec6127af-97e1-3d1f-91ea-a68d0a8034a9.roa
File:                     ec6127af-97e1-3d1f-91ea-a68d0a8034a9.roa (raw, json)
Hash identifier:          CkCNiSBBP5zl8Wzl3hUwCwoBLQlh7eT2Z2SzOQcMTC8=
Subject key identifier:   39:DA:F3:43:68:84:3C:B2:D9:CE:5F:BA:B1:1E:02:07:CB:F3:BF:F4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845A15E0B80D948EBEDEA81D280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec6127af-97e1-3d1f-91ea-a68d0a8034a9.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     62240
IP address blocks:        166.1.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:0b:80:d9:48:eb:ed:ea:81:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=dfd4f386-32e8-44cd-841d-12bd56bc4a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ff:af:0c:f6:0b:36:f4:24:fb:cc:27:bc:4d:
                    c5:25:32:be:a1:74:02:ca:19:97:04:f7:ff:c5:d3:
                    0a:e4:6b:1d:51:a3:2e:04:c1:9a:fb:94:dd:21:cd:
                    84:af:a9:05:0b:f2:61:93:6f:17:41:a4:67:0f:aa:
                    e4:69:28:2c:26:f4:19:30:0f:1d:a7:be:64:15:62:
                    37:d6:71:3c:43:2f:35:a6:7e:a1:b8:f7:eb:c0:bc:
                    28:9b:25:80:72:cc:cd:ac:bb:c6:3c:26:24:14:f8:
                    1d:18:14:40:2c:5e:d0:33:9a:86:c4:52:a6:34:0d:
                    58:1f:66:f1:41:b4:7c:72:a0:b7:51:65:da:ff:eb:
                    61:c2:3d:2a:69:4a:95:b7:70:de:4e:46:b9:5e:f5:
                    e2:09:ab:c3:80:11:cf:93:11:68:64:3d:f1:d4:a0:
                    42:fb:87:48:df:2c:2d:55:46:33:c6:12:c8:ba:36:
                    98:52:ec:ef:e3:39:22:84:d4:bf:d2:4a:de:48:b8:
                    f0:fe:1a:9f:2c:51:fd:ae:c3:9e:10:6b:7c:9a:22:
                    94:89:68:19:10:ba:94:94:9f:4b:11:47:ad:26:57:
                    26:24:ff:5a:be:90:49:5f:e3:e4:6d:3b:52:8f:fe:
                    c0:a2:5e:60:18:ce:a7:1e:74:6f:8e:a0:2b:54:9d:
                    44:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DA:F3:43:68:84:3C:B2:D9:CE:5F:BA:B1:1E:02:07:CB:F3:BF:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec6127af-97e1-3d1f-91ea-a68d0a8034a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:c2:3e:06:a1:7e:81:fb:e4:df:05:70:d2:5d:1d:3c:ec:7e:
         5c:58:bf:64:48:04:76:0b:39:4f:37:2a:2d:f9:a5:58:92:4e:
         3a:6f:2d:c0:6b:0e:5f:1b:03:6b:87:4a:19:21:8a:eb:c6:2e:
         85:36:93:69:ee:a0:04:94:a1:62:9e:6a:68:e7:d5:28:4e:3b:
         e5:c2:7d:12:1b:19:e0:38:dc:7a:5d:ef:28:bd:fe:1b:d7:84:
         16:ec:18:08:c9:98:47:ab:ea:31:1e:a7:4c:94:b6:63:54:0d:
         92:3b:c1:d5:a9:9c:c9:44:f5:73:e1:c0:a1:6f:66:af:68:c6:
         2a:12:a7:53:ec:b9:03:78:53:91:b6:ca:1b:c5:fc:de:df:7d:
         49:7d:76:fe:e8:64:4c:7f:e9:21:a4:b2:78:54:bc:cb:23:cd:
         db:c4:03:be:bd:27:41:84:dc:fb:5d:65:92:02:ae:65:18:52:
         67:af:3f:88:1e:d2:51:09:05:44:4c:cc:5a:c4:a4:8e:f7:98:
         2c:23:ae:3b:fb:d0:7a:ab:9d:cb:6b:67:54:8b:54:7c:41:06:
         c5:c8:af:5d:07:42:77:ea:c0:82:b4:39:69:88:86:07:b7:e7:
         0b:cf:6e:80:d3:aa:f1:83:c8:67:b7:c6:0b:76:54:a1:a7:47:
         da:99:cb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:56:31 2024 by rpki-client on console-fra.rpki-client.org