Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5af3b1dd-6313-3857-ad33-20cd0e14c3d6.roa
File:                     5af3b1dd-6313-3857-ad33-20cd0e14c3d6.roa (raw, json)
Hash identifier:          P2qv/4x3LHWWKkjLlgZ7+isetOXGDGVhtjgwXXnN0vg=
Subject key identifier:   B9:A2:34:5E:A6:EE:B5:BC:40:75:DC:D3:32:4F:12:7C:43:84:D0:48
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844D7151E925DB13D01CE1EE110
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5af3b1dd-6313-3857-ad33-20cd0e14c3d6.roa
Signing time:             Sat 10 Feb 2024 02:00:26 +0000
ROA not before:           Sat 10 Feb 2024 02:00:26 +0000
ROA not after:            Fri 10 May 2024 01:00:26 +0000
asID:                     9009
IP address blocks:        166.0.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d7:15:1e:92:5d:b1:3d:01:ce:1e:e1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 10 02:00:26 2024 GMT
            Not After : May 10 01:00:26 2024 GMT
        Subject: CN=d175a5f5-d232-4327-b47e-c64ebaff09e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:36:64:40:e6:e8:5f:31:3f:e4:fb:83:91:30:
                    a7:26:94:fa:f2:b3:f0:ff:6e:8b:b4:b9:87:cc:cb:
                    5d:fe:fb:a4:98:29:ca:99:2a:06:f7:6d:62:53:65:
                    cb:0d:ac:41:54:5e:ef:57:35:7b:f5:a4:cc:22:29:
                    b5:8b:bc:d6:f3:97:bb:15:c5:83:ca:b6:2a:d8:6d:
                    9c:cf:71:73:13:c2:e2:4d:a1:3a:a4:5f:58:d3:db:
                    74:b9:12:90:7c:63:ab:06:5f:8d:96:82:d5:fc:ec:
                    78:8d:6f:bf:cc:e8:3d:34:ea:35:e4:3f:fb:12:a8:
                    69:b7:9b:25:1c:b7:58:20:62:01:db:8f:86:2c:92:
                    bb:8d:9b:2e:82:ae:e5:8a:25:1e:21:f9:21:13:75:
                    21:7a:b0:f8:00:5c:0c:b2:74:46:a7:7a:99:ab:e5:
                    6e:59:b1:6e:27:84:74:a6:9a:49:bf:0e:0f:37:22:
                    86:8d:5c:95:89:32:41:33:bb:23:02:0a:f3:3f:16:
                    45:be:11:48:5d:14:66:0e:ca:ad:36:e0:91:2f:d7:
                    75:7a:2a:64:df:a3:f1:dc:20:cd:2f:da:c5:94:e4:
                    5c:2f:ee:b1:25:ef:46:25:f1:0a:66:4f:6c:2e:65:
                    42:90:4f:3d:f7:57:6d:1e:c0:3b:3d:e5:73:a9:6c:
                    eb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A2:34:5E:A6:EE:B5:BC:40:75:DC:D3:32:4F:12:7C:43:84:D0:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5af3b1dd-6313-3857-ad33-20cd0e14c3d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:24:5c:24:09:05:9f:3e:19:c5:7e:71:b7:a1:f8:20:0d:94:
         16:6f:bf:82:99:c4:b5:a8:c7:75:18:66:f9:c9:5a:90:a3:c9:
         32:eb:d9:23:8e:4c:07:98:e8:8a:4d:4d:70:df:df:9f:02:6b:
         8f:4e:be:ec:0c:f9:c2:77:af:8e:95:97:2f:70:f0:5d:d8:10:
         4e:91:b3:b7:2b:63:a1:67:54:59:af:4b:16:0f:ec:8e:0d:40:
         b0:7a:91:c7:7f:37:64:bf:32:69:50:eb:7a:54:8f:bb:08:d7:
         30:d5:65:75:7c:1a:e6:28:ee:90:52:05:16:2d:cf:c8:94:7f:
         ac:9d:95:74:0a:9b:fb:f9:87:5c:93:f2:22:8d:da:ad:22:e0:
         2f:eb:45:b8:36:98:cc:06:e3:37:1c:13:90:84:99:f6:5c:14:
         71:64:3b:e4:42:03:9b:51:ab:58:c9:b6:d7:34:54:dc:de:56:
         63:a1:32:0b:1f:64:5e:eb:86:48:88:85:d0:43:14:a8:f1:26:
         18:86:70:c9:fc:a6:4c:42:dd:b1:fc:82:77:2f:45:7d:b1:fd:
         b8:61:f3:55:79:24:22:32:7a:2a:7c:e2:41:49:b6:b1:44:4c:
         12:04:8d:00:02:6d:93:9d:3c:38:ef:59:13:e4:a6:fe:5d:c3:
         05:42:1a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 09:04:39 2024 by rpki-client on console-ams.rpki-client.org