Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/86f61352-45a4-3d85-9f07-9a73694b819e.roa
File:                     86f61352-45a4-3d85-9f07-9a73694b819e.roa (raw, json)
Hash identifier:          vSFOCnS/G8B9e/V8yK5zMUrmNS1yazsToMrr/RwLsls=
Subject key identifier:   8A:9D:CD:DC:E6:E4:D2:BA:D7:C8:A3:90:43:9F:8E:C5:D8:52:A5:12
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847E78F68D5DBAE39FFDC7E91C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/86f61352-45a4-3d85-9f07-9a73694b819e.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     9312
IP address blocks:        166.88.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:68:d5:db:ae:39:ff:dc:7e:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=51e3544b-9384-4c10-8fc0-d1133e730a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7e:7f:c6:bc:fa:eb:fc:f8:d6:c7:cd:5f:21:
                    24:cc:78:cd:b3:7a:87:c4:35:0c:af:ae:f4:d8:f1:
                    7a:f2:1f:39:58:4f:f4:08:c1:a7:b3:e9:f9:33:80:
                    9d:08:35:49:ea:92:d5:89:99:39:b8:21:63:dd:b0:
                    f4:3c:9d:93:51:5c:6f:46:35:5a:58:e7:53:52:10:
                    a3:0d:af:0a:67:3b:83:f0:86:85:a2:33:75:71:44:
                    ec:e6:82:dd:7f:01:3c:08:13:95:e3:c6:21:e5:85:
                    45:1e:a5:bb:35:a6:7e:98:ab:e9:31:1b:3d:b1:61:
                    b3:a8:f4:06:7b:67:be:92:e8:4b:83:8f:26:f6:d1:
                    38:06:4b:12:61:7e:94:2e:8d:cb:45:d0:3d:e1:c4:
                    9b:60:c2:6d:3c:1c:a6:d5:1c:32:1d:62:43:04:e4:
                    bc:76:c0:12:d0:a7:10:0a:3a:bb:a5:f9:40:1d:b5:
                    04:25:0d:79:2a:af:95:30:5b:40:96:90:0b:0b:d6:
                    50:4b:b3:af:7a:e5:1c:3a:1d:ae:c4:bc:5e:b8:6d:
                    5c:2f:86:00:91:ef:d8:bf:77:e1:59:73:a9:4e:f0:
                    2f:d2:5d:05:35:63:26:65:b1:ba:17:82:a6:b6:45:
                    be:5e:96:c1:e0:2b:20:e2:b9:f0:4c:37:b1:8f:12:
                    80:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9D:CD:DC:E6:E4:D2:BA:D7:C8:A3:90:43:9F:8E:C5:D8:52:A5:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/86f61352-45a4-3d85-9f07-9a73694b819e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:28:eb:66:94:5b:2c:ef:20:51:16:b3:1b:1c:37:7b:2e:4e:
         b1:de:5d:12:24:78:05:f2:ea:bb:0b:c6:06:f2:1f:ee:76:91:
         be:ff:dd:e9:4a:61:90:dd:44:68:6d:7f:ac:fc:29:91:0b:6f:
         5d:24:29:6b:3e:73:e3:5e:34:eb:2c:c1:58:f1:9a:62:87:5f:
         13:ce:46:cf:1b:3f:8c:cb:e6:45:31:da:35:06:3a:42:a5:80:
         fc:6f:ec:5b:89:0f:65:7f:65:05:47:37:3b:77:91:b2:bc:6f:
         58:31:8f:60:35:49:f0:f2:d6:7a:19:27:68:43:10:06:ae:a5:
         ea:97:7b:3f:b1:2c:52:05:64:fb:14:e1:6c:d8:c9:15:fc:2d:
         e5:29:35:3b:39:56:dc:8e:8d:58:e2:f3:85:b1:ec:73:27:0f:
         56:45:3c:2c:cb:da:44:21:2d:db:67:37:86:60:1a:10:69:3d:
         4a:df:cb:01:e6:77:f6:85:fb:88:af:d9:29:35:37:65:60:f0:
         a5:0c:16:81:6e:25:ce:9e:02:5f:82:5d:9c:bf:38:6d:8b:bb:
         08:12:a2:cc:fc:58:ab:17:48:69:b6:21:5c:59:9d:51:a9:ed:
         4a:01:02:05:96:7d:6c:cf:8e:1c:15:95:72:e0:8f:d0:e7:59:
         1f:7d:13:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:32 2024 by rpki-client on console-ams.rpki-client.org