Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/becd6569-4113-36d6-b00b-63897b67393f.roa
File:                     becd6569-4113-36d6-b00b-63897b67393f.roa (raw, json)
Hash identifier:          xb5QMvcJIhTMrAFVSQllEPh64kdaemQEKRI/JhNe1fg=
Subject key identifier:   0B:E0:FF:05:F9:B7:B8:E4:0B:DB:D0:AA:DF:34:56:B3:27:B5:60:83
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845CF6E3969E2E72997E018C280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/becd6569-4113-36d6-b00b-63897b67393f.roa
Signing time:             Thu 09 May 2024 01:00:26 +0000
ROA not before:           Thu 09 May 2024 01:00:26 +0000
ROA not after:            Wed 07 Aug 2024 01:00:26 +0000
asID:                     19437
IP address blocks:        166.0.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:6e:39:69:e2:e7:29:97:e0:18:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  9 01:00:26 2024 GMT
            Not After : Aug  7 01:00:26 2024 GMT
        Subject: CN=e75adab2-88d2-45b4-83f7-140927b55817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ed:08:d4:33:f2:f4:05:92:aa:e3:7a:69:4f:
                    52:1a:ed:7a:09:3c:f9:b9:4a:64:d5:1e:dc:58:71:
                    27:1e:8f:93:f0:0e:d8:7c:70:28:17:bf:07:c3:3b:
                    03:e8:0a:63:13:43:35:b8:f7:05:cd:84:7a:e1:75:
                    a0:ec:af:78:c8:79:3b:65:51:39:36:4b:fb:3e:fc:
                    b0:74:31:74:69:d7:af:61:d1:1e:1e:22:0b:51:ce:
                    25:31:d0:89:9c:96:ca:85:36:3f:85:6f:da:78:0a:
                    a3:fc:5b:13:59:2b:1a:6a:04:02:3d:cd:1c:ec:9c:
                    68:55:82:2f:aa:35:07:c6:fb:05:8f:2d:d1:81:87:
                    d8:a8:7c:4a:97:7f:bf:3f:ed:b3:4e:9b:53:c4:08:
                    80:67:cd:73:9d:c4:b3:2f:fe:64:00:2e:67:62:d7:
                    05:53:f8:9d:1e:2e:1a:48:de:d2:82:3e:a7:39:02:
                    66:e7:f7:2a:c5:13:95:2a:52:62:09:10:cb:ea:7c:
                    b6:ae:9d:15:2d:84:79:dc:02:97:75:a0:d8:ef:b2:
                    45:cc:a5:5c:df:03:be:7d:80:60:60:e8:02:70:48:
                    49:89:0e:8d:b8:31:a3:70:60:3b:ef:9e:e1:6d:f7:
                    25:68:e3:b4:b4:8e:83:9f:d6:28:4b:d0:a8:50:5b:
                    59:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E0:FF:05:F9:B7:B8:E4:0B:DB:D0:AA:DF:34:56:B3:27:B5:60:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/becd6569-4113-36d6-b00b-63897b67393f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:38:9c:0c:12:f3:84:e2:4c:11:4a:86:ad:09:69:ee:39:a2:
         ae:88:17:7c:9b:52:78:fc:ad:75:0c:5d:e3:85:1c:36:c1:95:
         07:da:a7:68:32:2a:9c:8b:42:7c:fd:35:bf:6b:75:8b:de:fc:
         4e:6d:b6:4d:2c:93:d3:93:89:0a:91:74:63:9f:4b:cf:f9:d2:
         16:cb:a0:6c:24:fe:75:96:e6:79:20:7c:94:b1:68:25:bf:89:
         9b:89:02:c5:78:05:c1:44:c3:67:07:45:62:ee:5d:5f:25:6e:
         5e:09:67:45:de:96:cb:8f:0b:72:04:e5:0b:80:d7:6d:32:fe:
         c5:90:5b:8d:5f:b2:e8:43:6f:5b:46:c7:3a:3f:0d:8e:62:bd:
         08:0c:eb:22:b2:45:d1:dd:f2:ff:38:d0:73:87:70:13:76:49:
         44:ad:cc:a0:cf:b3:32:a6:dd:21:f9:68:db:e3:dc:95:b9:8f:
         99:6b:8c:0e:a2:61:66:f5:49:1b:c0:44:55:b7:a6:1b:f2:57:
         5c:dc:d2:ed:69:d9:3a:db:7c:eb:48:ee:51:a7:f6:28:28:15:
         2b:9b:75:14:c4:b1:63:cf:56:d1:8c:f3:af:23:f4:a0:ff:da:
         9b:1d:a0:41:b1:5b:cd:2b:1e:01:e2:63:f6:d0:a1:e5:55:6f:
         ed:db:6e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:15:09 2024 by rpki-client on console-fra.rpki-client.org