Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/088b1098-9f13-3b9c-9ed2-1c879f079fea.roa
File:                     088b1098-9f13-3b9c-9ed2-1c879f079fea.roa (raw, json)
Hash identifier:          GjrgP+5AyMTGtC6BUcHOFb2zUDel9esDg+tfGOVZVtU=
Subject key identifier:   DA:E7:28:44:D5:03:2F:89:46:27:DB:2B:68:8A:3C:2A:71:9C:BF:11
Certificate issuer:       /CN=cadf002a-d081-4e51-89c4-f7121259516d
Certificate serial:       010D0C9F432858454C3813506B8ECABB35548380
Authority key identifier: BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/088b1098-9f13-3b9c-9ed2-1c879f079fea.roa
Signing time:             Sat 23 Mar 2024 01:00:24 +0000
ROA not before:           Sat 23 Mar 2024 01:00:24 +0000
ROA not after:            Fri 21 Jun 2024 01:00:24 +0000
asID:                     398813
IP address blocks:        166.66.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4c:38:13:50:6b:8e:ca:bb:35:54:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cadf002a-d081-4e51-89c4-f7121259516d
        Validity
            Not Before: Mar 23 01:00:24 2024 GMT
            Not After : Jun 21 01:00:24 2024 GMT
        Subject: CN=076b9f7d-158f-4c22-a89c-9c583b7328ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:de:aa:5a:e2:a0:51:ae:a5:98:25:60:58:e6:
                    32:fd:4b:c8:9e:0d:31:12:b5:3a:71:8b:4d:10:6f:
                    c8:01:f4:d3:fc:67:e2:64:dc:98:cd:b5:0c:19:da:
                    df:7a:bd:98:b9:4d:b4:06:a3:f8:08:52:d3:82:07:
                    c8:8b:82:7b:69:78:57:63:71:d3:6b:45:bc:8a:34:
                    1b:52:48:13:11:a1:16:d8:a3:73:d4:36:eb:0a:98:
                    2f:52:ef:7c:05:6a:57:1b:62:7c:a3:db:04:75:1e:
                    eb:3a:e9:86:7d:33:72:78:c9:c2:27:04:88:30:b3:
                    42:f7:78:61:bf:c8:fc:67:ea:49:81:e5:dc:16:c3:
                    f2:b1:17:ee:59:f3:63:65:87:24:2b:85:1e:2c:24:
                    57:8a:fe:ab:0d:47:6c:84:bb:10:24:99:58:e2:aa:
                    6d:bf:b1:af:74:df:0b:55:b3:cd:bd:7d:fd:5a:d0:
                    81:ff:a3:c4:9a:e2:49:81:69:3d:71:90:80:0a:0f:
                    ab:61:58:3c:d9:0a:ec:0f:05:ca:57:01:1e:11:f5:
                    3b:b5:05:76:4d:40:16:be:fa:16:d4:4a:f0:9d:df:
                    88:16:12:ea:1e:e9:3e:08:6b:c6:69:a6:53:b7:e5:
                    f4:a2:8a:ed:b9:16:65:64:97:09:c4:b6:b3:44:c2:
                    56:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E7:28:44:D5:03:2F:89:46:27:DB:2B:68:8A:3C:2A:71:9C:BF:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/088b1098-9f13-3b9c-9ed2-1c879f079fea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl

            X509v3 Authority Key Identifier:
                keyid:BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.66.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:cc:34:b3:2b:e0:31:6d:96:d6:fb:bf:d8:e6:8e:80:ed:3b:
         ee:2c:2e:65:6c:07:76:6d:a0:d9:d5:e1:bb:67:57:17:65:74:
         e2:41:d0:7c:1c:02:96:0c:32:b2:d5:42:4d:d5:38:f1:ee:a9:
         43:75:bc:2b:03:47:bb:9b:cd:7d:e4:a5:47:9d:16:cd:2c:8b:
         77:13:65:89:95:8c:59:fc:59:8d:16:bc:68:39:14:d9:37:87:
         7e:f6:44:b0:2a:c5:0f:08:7d:cf:64:b4:c0:cb:0b:90:25:d3:
         7c:b5:4e:32:dc:6b:db:d9:be:d1:12:5e:1e:c8:05:23:56:4f:
         62:f2:82:a8:1d:4b:9a:31:6f:04:10:91:a9:dd:68:c3:c4:35:
         87:1f:b4:36:a6:f1:1b:21:6c:c9:2b:08:be:c2:ff:0b:01:6a:
         3c:6f:ba:23:09:37:f3:dd:1d:20:61:61:5d:66:b8:92:96:e3:
         91:43:3b:76:8c:16:06:fd:db:7b:30:18:fc:52:85:4e:31:cb:
         15:64:78:89:f6:9d:aa:b9:26:d3:a1:b2:dd:92:fc:5c:60:c4:
         c5:f5:6e:c2:0b:14:69:88:64:d6:e6:a5:07:f2:5c:4a:8a:e6:
         1c:c2:ee:8b:8f:59:0b:b7:91:b9:6f:46:6c:bd:37:8d:c6:f4:
         59:29:dd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 22:09:46 2024 by rpki-client on console-fra.rpki-client.org