Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d398b53e-8519-3e41-9879-b87ebb41408d.roa
File:                     d398b53e-8519-3e41-9879-b87ebb41408d.roa (raw, json)
Hash identifier:          HZNDXp2SSMxfx4cCu7ai5Ke0Yo6+WTvE5Ufihn9hWOY=
Subject key identifier:   26:E8:FD:F1:5C:12:FD:20:D8:54:1B:2D:19:E8:C6:81:B9:C4:DC:FA
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F6323A3D9DCE69E8E641E0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d398b53e-8519-3e41-9879-b87ebb41408d.roa
Signing time:             Fri 12 Apr 2024 17:24:38 +0000
ROA not before:           Fri 12 Apr 2024 17:24:38 +0000
ROA not after:            Thu 11 Jul 2024 17:24:38 +0000
asID:                     3257
IP address blocks:        166.88.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:32:3a:3d:9d:ce:69:e8:e6:41:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:38 2024 GMT
            Not After : Jul 11 17:24:38 2024 GMT
        Subject: CN=fb9ff7d8-d30d-4eb0-aff0-8f1d500fb3f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5d:64:ba:8c:78:8d:b3:7d:00:85:8d:83:2a:
                    15:33:ed:9d:65:ec:db:c2:31:9b:77:87:14:a2:dd:
                    8d:b3:de:53:32:c8:0c:5e:a5:21:28:51:f0:e4:15:
                    e8:3a:43:a3:6e:a3:bb:e6:72:b7:67:3f:cd:75:b5:
                    b1:ec:f4:82:e0:7a:40:fe:ea:77:74:05:f1:ea:94:
                    13:c2:42:2c:3c:e0:35:36:d7:ba:1b:b1:59:80:76:
                    cd:80:cc:b6:79:27:ce:cd:51:7f:fe:e0:9b:04:13:
                    83:36:5d:85:9e:d0:6d:51:83:03:ff:54:33:77:27:
                    dc:b7:5f:31:ef:04:25:10:f5:55:ff:80:06:88:df:
                    c0:75:f9:99:93:e4:0e:11:80:c8:98:19:59:cd:ba:
                    ac:cc:e5:31:ef:bb:d4:d3:7f:7d:cd:81:b5:8e:da:
                    64:77:84:4b:9c:25:a3:f9:a1:c8:bb:be:32:f8:bc:
                    f4:34:9d:0f:e2:8a:55:db:2d:8f:50:54:6c:3c:46:
                    d7:8e:cb:1a:17:7c:1a:15:2d:d3:08:85:e0:dc:44:
                    92:36:15:62:8e:d5:47:78:84:86:40:cd:7f:14:00:
                    fe:d0:59:0c:b4:4a:e4:c2:79:a6:54:f0:1d:b8:6c:
                    7c:99:f3:29:0b:c7:f5:0a:41:24:a4:09:33:d5:22:
                    b6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E8:FD:F1:5C:12:FD:20:D8:54:1B:2D:19:E8:C6:81:B9:C4:DC:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d398b53e-8519-3e41-9879-b87ebb41408d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:1f:2d:5e:ea:1f:43:db:c1:4f:f4:08:35:29:ee:99:c1:b9:
         33:a5:26:74:e2:b2:8c:3c:45:06:36:74:70:52:7e:7e:6d:56:
         b5:f6:12:7e:19:bd:f2:d6:10:08:1e:bf:8a:d5:1f:4b:ce:17:
         72:bb:5f:11:68:b7:ed:ba:90:df:c6:3e:1c:fa:00:77:4b:f8:
         a9:3e:92:af:b2:02:98:62:b6:79:c6:95:81:ac:f7:7a:79:02:
         55:83:c9:dd:d5:6d:a4:6f:2b:20:62:7d:08:7e:24:f4:f5:91:
         27:c8:26:6e:d4:35:da:64:b1:0d:4b:0a:a1:26:03:69:44:f0:
         54:67:9d:17:0a:88:82:d8:ee:08:ad:b4:a9:df:fb:57:76:29:
         f7:9d:05:5c:06:ea:a5:25:f3:d6:f2:9c:51:dd:06:5a:be:f9:
         9f:79:89:f3:53:ee:e5:c0:71:5a:35:1a:5c:5d:85:96:1b:26:
         2d:b5:86:7e:28:b4:e3:d3:1f:e3:a6:fa:f9:18:2c:f1:4e:e0:
         42:c7:77:9f:a9:67:32:13:39:ec:ba:3b:2d:41:9e:fe:d4:af:
         0a:a3:4c:70:46:52:13:23:2d:27:e8:dc:1f:26:9e:6b:59:58:
         6f:e3:74:a3:82:8e:66:47:63:0d:62:9d:f3:7b:25:bd:97:ae:
         15:86:b8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 22:27:39 2024 by rpki-client on console-ams.rpki-client.org