Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66f5f2ee-3fa8-396f-8b2e-e229a74991d1.roa
File:                     66f5f2ee-3fa8-396f-8b2e-e229a74991d1.roa (raw, json)
Hash identifier:          5Iww8UPWdO7CFiW+5loxMuNA1EAVRrmXm423ZtxFP6M=
Subject key identifier:   D4:D0:E8:B6:4B:1A:6A:5D:5C:5A:C1:BC:3D:AF:5F:31:83:D0:38:E2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845840DBE51D3C55986FFB31700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66f5f2ee-3fa8-396f-8b2e-e229a74991d1.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     63902
IP address blocks:        166.0.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:be:51:d3:c5:59:86:ff:b3:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=4c28a62d-af9d-4f49-b495-9e253e0134ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9c:ce:b5:a2:0b:e1:3b:3f:74:89:8a:26:cb:
                    17:18:87:d8:b3:65:ce:a8:76:b7:36:ed:6e:80:fa:
                    7c:5d:a8:e1:61:c7:f1:10:b1:ed:50:91:1b:09:ea:
                    17:9c:13:66:5b:41:7b:36:0b:9d:e2:de:3a:e2:10:
                    84:c6:39:13:38:f8:04:51:4f:7c:70:86:6e:10:0e:
                    c6:0e:50:57:03:b5:83:d6:ae:e3:3c:51:f1:d7:4c:
                    73:e0:7e:38:57:f5:11:4a:3c:86:b5:eb:c5:57:fe:
                    7d:e1:24:4b:e4:5a:ea:d6:88:26:88:ba:35:1c:29:
                    69:8f:3d:dc:54:35:22:31:08:63:7e:3a:3b:d1:c9:
                    b1:de:9f:22:51:85:e0:49:59:af:cc:69:58:0a:c6:
                    07:ae:8b:57:62:07:44:93:e5:3d:e1:64:c5:99:49:
                    2a:4e:d8:79:d2:df:c8:0a:cd:d3:37:ff:0d:bf:d9:
                    29:c3:e9:fc:bd:cd:79:7f:40:5a:75:b3:63:20:69:
                    99:c7:53:dc:ba:0d:f5:ba:d3:a5:f3:af:80:a9:5b:
                    1b:80:db:92:8d:6a:14:85:23:c5:2b:13:1b:4f:49:
                    b2:c5:26:22:fb:47:84:f4:9d:01:4e:42:e7:82:b6:
                    d7:7a:1a:f0:d4:ed:7d:a5:7a:d4:9c:be:38:87:f6:
                    e6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D0:E8:B6:4B:1A:6A:5D:5C:5A:C1:BC:3D:AF:5F:31:83:D0:38:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66f5f2ee-3fa8-396f-8b2e-e229a74991d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:96:a8:fb:23:a2:14:f3:69:05:ea:f3:7f:cc:93:0f:29:fb:
         aa:14:0b:7d:4e:90:9c:89:7d:eb:26:e4:4e:7e:f9:7a:4a:b2:
         4a:a6:69:4a:32:a3:9e:2f:5d:c7:4e:68:41:10:bd:0d:77:ec:
         40:92:d6:1e:67:4a:bf:3b:37:84:1b:64:b7:3c:0d:de:a9:3f:
         2d:3d:ea:fb:9d:4c:75:e7:2f:36:88:40:7d:4b:c3:0a:59:31:
         f7:37:3f:1c:b0:f6:e7:87:4f:fa:ee:58:3f:6a:cd:f7:fb:68:
         0d:96:7f:b4:a8:df:f6:7e:08:28:58:15:38:0e:c6:0b:a6:0c:
         53:1e:d8:17:94:08:7a:a7:78:7f:43:71:cb:4d:38:2a:f1:39:
         ac:f8:85:d7:34:e1:b1:84:82:13:ad:44:cd:cc:76:f5:16:99:
         de:33:ac:b5:91:e8:b6:cc:ba:cf:49:cd:a4:c1:16:8a:b4:5d:
         9b:75:31:53:2b:5b:26:ff:37:8e:34:5a:87:c5:a0:2c:6c:f2:
         44:82:f7:41:d1:4c:86:16:fc:d3:8d:00:3a:fb:c9:1e:15:19:
         9e:51:62:ac:6e:7a:f3:aa:5e:1f:79:69:2e:17:02:6f:0c:a5:
         9e:64:13:7c:96:99:06:2b:80:60:90:a5:55:a2:78:7c:15:c8:
         5f:12:a2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:15:05 2024 by rpki-client on console-fra.rpki-client.org