Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/f037a158-16f2-361a-8db7-14ace1d91987.roa
File:                     f037a158-16f2-361a-8db7-14ace1d91987.roa (raw, json)
Hash identifier:          iFFYeHO+GiehJ6m1aBqjbi+u3Njh4oxi+t9IYEdZvpo=
Subject key identifier:   F8:98:C7:AD:E8:0D:96:F4:D3:3D:0D:25:56:06:CD:7C:38:44:3A:FC
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F43285845A428D4FAC21C2D9D804F0600
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/f037a158-16f2-361a-8db7-14ace1d91987.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     30059
IP address blocks:        66.161.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:d4:fa:c2:1c:2d:9d:80:4f:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=229415b6-5b0c-4586-8463-cdc10bc5688e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c2:86:72:6a:1d:05:cf:2e:be:e3:f6:d5:91:
                    f6:d2:7e:e4:71:55:4c:ad:48:c2:91:75:41:2e:18:
                    97:f5:59:3a:c5:b7:cc:e7:03:e7:7d:e2:5e:0b:2b:
                    e9:21:de:9d:54:82:b2:20:2e:0d:d7:3b:1a:fb:a8:
                    da:a2:9f:b7:8d:ec:85:45:25:ed:82:40:96:75:18:
                    50:a3:1b:03:d7:f5:9f:b3:52:71:74:a1:74:20:6e:
                    83:c5:31:0b:62:e0:b6:6b:ea:bd:1e:f1:34:43:75:
                    5d:f1:5a:0d:56:67:00:96:96:32:62:e5:a3:61:f5:
                    7f:17:95:ea:f6:75:0a:9b:c6:20:34:cf:4d:b9:f0:
                    de:0d:67:6e:db:a5:75:a8:3b:06:38:9a:4e:40:4d:
                    ca:6c:28:68:07:de:df:d1:86:12:df:7f:8d:53:12:
                    11:e8:81:df:cd:f7:7f:9d:53:80:fb:77:10:25:37:
                    b7:d8:a7:19:15:38:33:8c:1c:26:4d:e1:87:76:43:
                    cf:26:61:4b:fb:a0:23:3d:3e:5f:9b:67:d1:43:be:
                    b6:51:b4:c7:ff:41:0f:d4:3b:e8:76:cb:c8:a4:39:
                    54:84:f1:a7:5d:29:08:ee:c7:80:c7:f3:cf:d7:fa:
                    63:8e:a1:e0:78:23:dd:75:50:c2:d7:53:6a:b9:4d:
                    ed:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:98:C7:AD:E8:0D:96:F4:D3:3D:0D:25:56:06:CD:7C:38:44:3A:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/f037a158-16f2-361a-8db7-14ace1d91987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.161.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:1f:41:43:40:ff:74:55:f9:f9:bb:c8:7d:a9:ec:b2:50:e4:
         ce:b7:98:68:fb:0b:15:f4:99:ef:4e:d8:4b:05:74:e6:b6:95:
         0f:31:8f:36:06:17:8b:49:9b:08:2e:c1:56:0b:75:97:e9:91:
         84:90:c8:ac:92:ef:46:7f:b5:8a:a3:ff:c6:85:6b:8c:ae:d6:
         d3:50:a8:19:78:54:16:33:72:18:a8:b0:32:b9:be:17:72:0a:
         19:96:2b:98:60:49:a1:06:58:15:4c:e2:94:4d:86:ad:c3:2b:
         83:e9:c5:58:b1:0c:47:8f:d6:cd:b9:eb:20:05:13:dc:ad:57:
         68:71:6b:fd:b2:98:c8:de:0d:63:79:ec:d1:6c:39:ce:33:fd:
         62:9d:39:b8:d6:3e:af:bb:eb:c0:7b:d4:68:4d:e2:f7:46:c2:
         bf:8d:28:65:6f:6e:ec:c7:64:26:2d:06:80:12:66:70:47:2e:
         ab:df:f1:f2:80:7f:57:28:3d:4b:14:e0:ed:26:b0:ff:86:ac:
         a2:4b:76:f9:11:12:d5:c6:e2:4b:f6:12:54:5d:8a:36:8b:c2:
         34:58:7e:d2:c0:d6:1f:7e:c7:c8:d2:d8:1e:de:5f:79:c4:38:
         2d:01:20:29:e9:57:64:27:ce:ff:72:c1:ef:d8:bf:d7:e7:01:
         3f:6a:2e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:03:08 2024 by rpki-client on console-fra.rpki-client.org