Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/023d7855-2d78-37d8-b5fd-57387d527158.roa
File:                     023d7855-2d78-37d8-b5fd-57387d527158.roa (raw, json)
Hash identifier:          hmVdbzdxyOsxl3ewNyUnSmuq0BLplSnpgANGTTEZyU0=
Subject key identifier:   3F:05:01:C9:B6:D4:FE:B3:06:FF:E6:8F:8C:6A:07:AF:A6:35:12:7C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845726AD8895280D406C170D380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/023d7855-2d78-37d8-b5fd-57387d527158.roa
Signing time:             Fri 05 Apr 2024 17:23:30 +0000
ROA not before:           Fri 05 Apr 2024 17:23:30 +0000
ROA not after:            Thu 04 Jul 2024 17:23:30 +0000
asID:                     58061
IP address blocks:        166.0.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:72:6a:d8:89:52:80:d4:06:c1:70:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  5 17:23:30 2024 GMT
            Not After : Jul  4 17:23:30 2024 GMT
        Subject: CN=24835856-1bf5-4690-afba-33824156a660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ce:54:57:d6:79:7f:4a:67:12:57:b6:ec:5d:
                    2e:29:24:2d:dd:d7:1c:21:9d:34:dd:80:66:10:e6:
                    d3:5c:df:d3:7a:3b:ec:3a:ca:a6:f7:99:68:01:73:
                    f8:b3:b7:84:78:6d:ed:da:84:e6:b3:08:45:69:05:
                    9e:9b:74:d5:94:1c:ba:07:3a:12:e1:95:7f:72:37:
                    a7:79:52:2a:e3:87:7a:80:bc:83:9a:76:08:a4:d3:
                    b0:79:b3:c6:1a:22:0d:ea:a2:a3:3c:a8:06:b5:34:
                    c4:6f:a9:76:6f:cc:17:1b:7f:28:97:38:c4:7d:df:
                    f0:95:f4:10:04:d9:f1:f6:1f:ad:64:93:ae:c7:fe:
                    70:e6:9c:a1:4c:d8:58:df:f0:30:d7:5c:6f:3c:4c:
                    a4:d8:71:f8:72:c1:ed:04:84:ce:d9:9f:b9:e0:b5:
                    fb:48:03:3e:af:f7:41:08:2f:2f:28:42:be:60:04:
                    ba:4d:15:0a:b5:ad:fd:02:57:a4:29:af:3f:d7:47:
                    49:6c:e5:d4:70:9f:82:b4:8b:73:16:06:ff:6f:e9:
                    b2:20:ae:22:5f:b9:b9:ec:0a:26:22:6c:19:44:6a:
                    80:12:b3:3a:49:40:b2:09:07:b6:6f:6f:a6:d9:11:
                    8f:c9:5d:5b:84:51:ee:69:a0:fe:e0:bc:ec:90:0a:
                    31:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:05:01:C9:B6:D4:FE:B3:06:FF:E6:8F:8C:6A:07:AF:A6:35:12:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/023d7855-2d78-37d8-b5fd-57387d527158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:5e:bb:15:49:4a:6e:3d:48:09:46:d4:d2:21:4f:8d:e7:ca:
         1b:11:46:2c:dd:a1:4f:f2:eb:54:f4:84:a8:54:da:27:b3:11:
         a5:6d:d8:42:5e:7d:ff:06:47:ef:58:0a:42:98:94:85:60:f7:
         fd:82:2d:bb:54:8f:82:c1:42:00:12:5a:36:93:22:0c:d2:28:
         8c:d8:da:14:2f:1a:98:b3:09:5a:49:e4:d2:64:28:9b:c7:7d:
         40:10:5a:98:b4:b0:98:fa:3d:45:bd:14:8d:19:2f:51:45:d3:
         9d:d8:28:17:25:1d:1f:60:eb:25:9f:14:8a:fa:e9:83:28:9c:
         87:a3:e0:c4:e2:31:3f:20:c2:41:a0:a9:2a:4b:30:bf:24:4f:
         b2:95:c7:fe:1a:7f:6b:99:19:dc:9c:e0:a2:0a:3d:3f:95:50:
         f6:6d:c6:ad:c1:fe:93:a0:9f:07:95:15:62:45:39:ac:e9:c5:
         b7:54:8f:bf:80:d3:0a:4f:6d:26:20:ce:06:54:dc:f8:a2:7a:
         22:da:09:62:47:ea:ee:68:43:5e:ca:e4:af:93:6b:89:5d:de:
         73:89:06:66:09:ab:c6:b4:40:7d:73:69:49:f2:1e:ca:ab:37:
         73:39:bf:67:35:1c:8d:1a:54:d3:47:de:94:66:1a:99:58:28:
         1e:ba:55:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:56:15 2024 by rpki-client on console-fra.rpki-client.org