Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/86977d22-6d9b-33b1-b034-072d4f571283.roa
File:                     86977d22-6d9b-33b1-b034-072d4f571283.roa (raw, json)
Hash identifier:          eyWC3tzgaQ8fGyYpqwb9lv/Km14YthtRAqbGZKLB/ZI=
Subject key identifier:   D9:04:E9:DA:BD:63:78:29:DD:E1:1E:91:ED:7E:26:9F:9F:E9:BF:46
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285847ECB3305B8BC8EB42A9CEF7C8
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/86977d22-6d9b-33b1-b034-072d4f571283.roa
Signing time:             Mon 18 Nov 2024 22:11:46 +0000
ROA not before:           Mon 18 Nov 2024 22:11:46 +0000
ROA not after:            Sun 16 Feb 2025 22:11:46 +0000
asID:                     174
IP address blocks:        198.66.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ec:b3:30:5b:8b:c8:eb:42:a9:ce:f7:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Nov 18 22:11:46 2024 GMT
            Not After : Feb 16 22:11:46 2025 GMT
        Subject: CN=6a921d17-83a0-42b2-ac42-be019ebace5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:af:c5:9a:fb:05:39:f9:4b:4c:2a:2c:26:a5:
                    03:3a:85:8b:68:ab:cc:d9:3b:9c:3c:44:84:a0:8f:
                    f4:59:4a:27:29:fa:cb:1f:5b:e3:2f:47:75:de:f0:
                    d9:dd:d1:2b:ef:1c:b3:d9:07:79:49:57:ae:41:c9:
                    6c:bc:41:23:0e:7f:18:2b:b2:b9:a8:41:61:de:f5:
                    39:40:1d:44:46:78:79:67:3a:5e:ab:91:91:b2:99:
                    80:63:7e:c9:e3:83:d8:35:21:20:b1:7f:36:2e:9a:
                    82:c0:30:80:2b:85:15:a3:e5:eb:2b:f4:c4:5f:18:
                    59:7f:e4:60:5e:ff:43:df:12:cf:dc:3f:8d:4b:0b:
                    36:8f:ae:ba:04:41:11:48:d1:4e:69:9b:67:c1:c4:
                    a2:b7:b4:1b:cb:06:12:13:33:df:71:83:a2:c1:30:
                    e2:e7:87:68:5f:ff:21:9d:8e:37:91:e1:4b:3c:c9:
                    e4:33:f0:4e:15:12:22:9a:07:b1:b7:d9:66:58:8c:
                    f1:f1:81:a7:de:6e:dd:0e:6a:52:9a:39:64:99:10:
                    df:2d:05:10:ff:47:90:21:ea:9a:f9:31:63:4e:2f:
                    2f:11:61:a6:04:83:c0:a4:77:ad:6d:9f:70:84:01:
                    35:cf:63:f4:ef:25:52:10:0e:ee:ab:7f:6d:db:8b:
                    43:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:04:E9:DA:BD:63:78:29:DD:E1:1E:91:ED:7E:26:9F:9F:E9:BF:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/86977d22-6d9b-33b1-b034-072d4f571283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.66.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:36:71:ca:0b:8a:fa:dc:20:cb:cf:ee:a0:69:e8:41:27:da:
         87:d9:94:f3:0c:27:47:d8:5d:b7:9c:4f:30:3a:c2:97:c3:c0:
         f1:f2:49:e5:f8:f9:9a:d8:fe:3f:05:30:5f:37:f0:49:ea:f7:
         9c:8d:78:c5:7e:f7:db:56:a9:73:53:41:bd:dc:b7:d5:50:88:
         cf:7d:be:88:ab:17:08:d5:41:d6:bb:86:d1:1e:1a:f9:37:22:
         7d:1e:f3:aa:18:1f:e0:2e:63:9b:8c:ac:fe:52:d5:dc:cb:18:
         27:ba:5c:56:26:7f:c1:f8:6b:c4:73:6e:b6:7f:5d:66:6c:f2:
         e2:8f:22:99:3b:37:3d:c3:3e:bb:44:05:0c:0c:1b:5d:7b:d0:
         7b:02:59:4b:37:d6:6b:c3:ba:8a:c3:d7:c5:da:2b:7a:5f:50:
         41:7a:6e:7f:56:25:69:33:db:30:e0:e6:29:3c:3e:75:b0:0d:
         96:4f:fc:57:b2:db:44:bf:60:16:c0:95:05:f5:4a:03:1c:04:
         2c:f5:2c:a5:5b:ac:26:54:8b:5c:30:14:20:e2:bf:9c:98:59:
         bb:1c:83:10:e6:7e:b8:ad:f8:80:13:ef:37:96:99:e6:fc:a3:
         fe:9f:33:91:f9:55:1a:8b:28:22:64:55:b3:15:af:ab:a1:fc:
         3e:c4:eb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:14 2024 by rpki-client on console-ams.rpki-client.org