Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e0dfc17b-4933-3d59-8dcb-343582cc5d73.roa
File:                     e0dfc17b-4933-3d59-8dcb-343582cc5d73.roa (raw, json)
Hash identifier:          Ow0L3KJ17gqx4Q4V2Mw3lr1tVBygDdhNe1zILcKQoHM=
Subject key identifier:   1D:90:C1:4A:E4:98:6B:D5:24:BC:E3:43:BB:E4:EA:BF:1E:8F:15:70
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847EFEF91F2F16C99F8E8C5C700
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e0dfc17b-4933-3d59-8dcb-343582cc5d73.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     204957
IP address blocks:        166.88.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:91:f2:f1:6c:99:f8:e8:c5:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=97eed791-7424-42c2-9fb6-97d60833a303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:62:5a:ef:32:b5:df:f2:e4:fe:86:83:c3:ec:
                    ed:e0:ce:24:13:1c:7b:7a:b6:12:9a:fe:56:c0:b8:
                    71:7c:06:b9:16:e1:ab:8d:e5:76:86:a1:5a:b9:b8:
                    24:87:43:52:2f:56:02:57:6d:35:3a:b5:f2:57:0d:
                    d9:a2:99:64:84:67:39:39:4b:62:de:06:da:ad:48:
                    b9:66:03:1b:61:8b:6b:d5:27:67:88:c5:5d:10:f1:
                    2c:1c:72:cd:57:74:c3:4b:ac:d9:d4:a8:78:14:a8:
                    77:3b:45:51:90:81:a3:1c:51:7b:1e:0e:36:d7:fd:
                    14:07:f9:eb:6c:94:37:e1:ae:8f:be:5b:fd:6e:dc:
                    3a:08:15:a1:df:c5:09:68:80:21:2b:af:ea:01:53:
                    c4:36:2d:a0:0b:1a:32:87:5e:8e:86:9e:f3:75:9c:
                    92:5e:23:8a:14:19:6c:b0:9f:41:99:29:1e:c9:8a:
                    4a:be:6a:b6:07:91:de:c8:93:8d:58:eb:95:a9:27:
                    33:7e:09:3b:26:4d:21:af:34:30:0c:7e:da:7c:ac:
                    e2:1c:76:7e:36:b1:96:24:ff:ba:b7:27:6a:1f:06:
                    3b:d7:37:24:1f:17:d0:df:1f:14:8c:45:59:9c:a8:
                    12:5c:1b:c4:41:b0:f9:0e:60:e7:be:41:b7:56:45:
                    e4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:90:C1:4A:E4:98:6B:D5:24:BC:E3:43:BB:E4:EA:BF:1E:8F:15:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e0dfc17b-4933-3d59-8dcb-343582cc5d73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:74:2e:21:c0:b7:ee:88:c1:7e:a8:72:c1:a7:a1:b2:17:48:
         fe:c6:ce:39:7f:49:8a:2a:2a:70:37:24:f6:e2:fc:d0:de:24:
         2c:46:79:a0:6a:0b:d0:59:4a:85:1b:12:11:ec:10:48:57:92:
         34:28:16:7d:bb:70:a6:5f:5e:23:af:b8:86:f6:3f:43:ed:1b:
         46:2e:56:57:1a:df:63:51:44:2f:b2:55:12:c5:eb:ea:3b:b2:
         1a:51:0b:2e:06:ee:f8:61:9c:87:0f:d9:f6:22:09:e6:9b:92:
         1f:70:99:4f:ff:71:6f:6c:ed:5c:54:fc:e6:b0:6d:5b:50:38:
         18:d0:f1:c0:14:47:e6:66:0a:91:c1:59:5c:47:76:3b:f5:03:
         3d:f7:ef:69:96:c0:09:fc:68:4a:a3:80:39:90:82:00:fe:66:
         bc:a2:53:65:be:56:75:f6:cf:32:f3:80:20:c6:d3:b4:ca:b0:
         26:c3:77:15:34:bd:73:51:88:ca:f8:fe:e3:79:f8:a3:a2:a9:
         56:25:8a:a7:c4:8c:fc:89:87:bc:0d:c9:a9:c3:07:97:19:77:
         08:60:b3:de:c4:f9:19:34:bb:1a:22:da:a2:38:e5:a9:de:3a:
         dd:24:19:a4:d7:d7:04:a8:23:b4:6b:34:dc:48:47:08:4f:ff:
         b1:38:81:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:38 2024 by rpki-client on console-ams.rpki-client.org