Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d1446bf0-aafc-3d97-873c-d7c1ca0d849e.roa
File:                     d1446bf0-aafc-3d97-873c-d7c1ca0d849e.roa (raw, json)
Hash identifier:          p++Qvkz7KRHR6H/HBYcVcik2EcUa9HH6Tfx9PIaksLo=
Subject key identifier:   74:03:CD:80:68:9B:91:6A:72:38:BF:03:F3:AD:E4:DE:76:0B:D6:1F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584500F56A33BB7A55BDAD76CB80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d1446bf0-aafc-3d97-873c-d7c1ca0d849e.roa
Signing time:             Sun 25 Feb 2024 02:00:26 +0000
ROA not before:           Sun 25 Feb 2024 02:00:26 +0000
ROA not after:            Sat 25 May 2024 01:00:26 +0000
asID:                     8100
IP address blocks:        166.0.254.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:00:f5:6a:33:bb:7a:55:bd:ad:76:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 25 02:00:26 2024 GMT
            Not After : May 25 01:00:26 2024 GMT
        Subject: CN=143b27f7-e331-4cfc-87dc-f7383c76cf92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e4:cc:d8:3a:90:f5:c7:87:69:72:23:0d:de:
                    18:7d:01:53:94:c4:00:05:21:0f:f2:d0:a7:0d:05:
                    18:4c:3d:fc:8c:15:5b:3e:a9:91:56:5b:66:a8:06:
                    e0:ed:f9:a6:15:57:d1:d1:75:71:fa:48:a2:3a:13:
                    59:80:67:25:aa:70:c6:58:c3:6e:cb:2b:2e:6d:ed:
                    38:91:51:60:bf:fa:0c:a0:31:a0:6d:e7:40:da:77:
                    04:8e:04:48:e6:da:68:b8:9c:e7:47:41:28:6c:85:
                    33:32:18:dd:b3:97:00:3e:23:3d:e2:ad:86:7b:d4:
                    01:b0:c9:af:d9:c1:3e:90:b3:f0:37:6d:a6:45:f8:
                    34:f2:2d:0a:c6:c3:8c:03:98:fd:c1:a4:53:c5:6b:
                    33:d7:1a:c6:e8:68:d8:b0:8f:1d:76:46:0d:60:98:
                    e5:49:b0:a1:aa:53:98:60:ad:a4:a5:63:29:db:7d:
                    74:21:e9:c5:87:1c:76:02:b9:7e:8c:0c:e7:17:4d:
                    c9:3b:d6:d0:b6:1a:b0:a5:d3:5d:a6:be:9c:3b:d5:
                    77:fa:d7:c5:50:e6:1a:2b:ee:d5:6f:c1:4f:22:58:
                    be:b7:93:ab:6e:cd:d8:5b:fa:33:fb:4c:d0:05:71:
                    fc:fb:9e:7b:96:84:f4:03:24:3f:aa:9d:54:9d:4b:
                    6a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:03:CD:80:68:9B:91:6A:72:38:BF:03:F3:AD:E4:DE:76:0B:D6:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d1446bf0-aafc-3d97-873c-d7c1ca0d849e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:93:3a:31:d1:96:b0:79:b0:f8:0e:fd:1c:f3:60:b7:21:df:
         30:e4:18:11:bf:45:cb:08:9e:7a:15:f0:06:e0:f2:01:b5:c2:
         c6:0a:48:97:5f:ea:4d:c6:73:47:27:9e:84:17:bf:b9:2c:80:
         c6:06:75:ab:83:ca:2b:10:46:d3:f0:00:c9:6e:17:64:cc:5e:
         b8:a5:e8:6c:6a:3f:62:c3:f5:7a:ba:38:07:4e:4b:d6:68:de:
         ea:49:6b:b7:76:cf:12:55:ea:cc:22:e8:bc:96:11:74:22:45:
         89:ad:19:ab:78:d0:95:2d:bd:37:a3:04:27:75:21:5a:0b:17:
         bc:63:8b:2c:5f:c9:f1:f7:5b:e1:89:3f:41:6c:7b:07:44:01:
         8f:42:90:ea:bf:9c:30:4f:f5:d8:97:91:5c:7b:c5:c5:43:33:
         b7:98:72:10:5a:b3:41:fd:32:84:f1:f4:0f:cb:4e:53:25:70:
         fe:8b:c8:e7:ea:41:7c:f7:4d:f9:d9:39:8e:85:b2:aa:b7:42:
         39:b5:22:ce:8d:33:28:5d:42:3b:db:4f:4f:32:41:be:d9:ac:
         a3:77:08:81:c8:ce:5e:15:36:47:ec:ec:e8:ea:85:81:ce:30:
         75:d3:4a:eb:47:2b:8c:7b:a6:9b:8e:51:fc:8a:07:0a:5a:59:
         57:d9:34:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:02:45 2024 by rpki-client on console-ams.rpki-client.org