Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0fb4e28c-9136-35d8-84ce-cc8ef5b9578d.roa
File:                     0fb4e28c-9136-35d8-84ce-cc8ef5b9578d.roa (raw, json)
Hash identifier:          dPe2nG1NKOKsrr5Z+xR+jHDEOIOLfYrCk5Fu1V4xxoM=
Subject key identifier:   9E:59:32:D5:03:D8:68:AC:F6:5C:B0:A2:FC:F2:A6:BE:1A:23:C4:EE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584596334A6B1E5E33481BF88C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0fb4e28c-9136-35d8-84ce-cc8ef5b9578d.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     44477
IP address blocks:        166.1.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:4a:6b:1e:5e:33:48:1b:f8:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=ef385733-eeb1-4395-a4d0-6a8b9af5d5d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5e:ab:7a:b4:67:e4:17:39:ed:cf:88:72:38:
                    6b:c8:30:d7:56:c2:87:01:7b:84:c1:cb:00:1c:f2:
                    dc:63:7c:b9:b6:91:8a:57:d7:3b:45:73:ff:a8:3a:
                    ae:9d:2c:c3:13:2a:6f:ae:8c:7c:b5:7f:d7:e5:89:
                    ea:1e:20:60:6d:7b:75:6d:53:f0:49:29:48:2c:39:
                    0b:03:d4:81:d3:60:8d:ca:76:a9:69:79:4b:39:89:
                    d1:67:35:38:b8:03:bf:8f:1c:6f:3a:56:2a:55:a3:
                    ac:0d:5b:d3:c1:d8:45:82:32:a8:67:8e:03:28:0b:
                    c0:ca:50:13:a0:0b:aa:35:29:be:79:d8:f3:09:e6:
                    03:bd:36:29:95:7e:d1:6f:3d:4e:14:36:d6:56:4a:
                    bf:ee:ea:f8:76:ff:ca:84:01:88:f5:32:fd:33:14:
                    6d:f3:5c:e1:63:cd:a8:fd:5c:25:18:3d:d8:8b:0f:
                    ff:66:0c:07:27:c9:7c:f8:96:7f:1b:28:13:a5:d9:
                    8c:32:4d:b5:93:85:74:8c:1a:66:71:f1:cd:14:75:
                    bc:9e:3a:c8:16:7b:28:44:9f:d6:78:14:75:fa:c3:
                    64:a3:86:be:7a:17:1c:9a:fc:93:41:94:69:b2:e4:
                    e1:fd:39:26:aa:16:bc:76:ed:ca:a7:7a:64:f4:4c:
                    e4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:59:32:D5:03:D8:68:AC:F6:5C:B0:A2:FC:F2:A6:BE:1A:23:C4:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0fb4e28c-9136-35d8-84ce-cc8ef5b9578d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:6a:e4:8c:70:30:33:12:76:eb:2f:41:3d:a2:d2:52:8a:10:
         3e:e5:1c:ac:ae:bd:c8:95:2a:e6:54:58:6e:ad:4a:f6:61:53:
         67:a8:83:cd:9c:bc:64:50:9e:5f:5c:b6:9e:a3:f9:fa:38:d5:
         1e:9f:68:68:8a:bd:e0:37:85:80:d1:85:71:06:24:ea:ff:14:
         93:31:91:8c:b7:5d:81:e8:b8:54:81:b0:21:23:39:7d:ae:d8:
         e0:0f:8b:40:51:fd:90:94:15:34:10:31:46:a2:c3:b4:75:3b:
         82:8c:3e:a5:3b:f0:b9:5c:61:95:6b:89:21:49:2a:2f:36:f4:
         ba:07:2f:bc:fa:cf:81:dc:c2:ea:f1:a0:2b:1d:cd:fb:4b:ca:
         5b:4a:79:8b:96:9c:16:df:80:12:f3:14:b0:0e:32:36:2f:7d:
         3f:41:52:27:78:2d:d6:c3:fd:08:10:4f:0a:59:9d:92:21:18:
         3c:9b:3e:8d:48:1d:ea:18:63:ac:21:fc:76:60:1c:20:81:f9:
         70:cf:ea:1d:54:28:2f:7b:e3:73:44:c1:16:63:ea:15:e1:fc:
         9c:95:39:06:9d:27:4d:a4:9d:82:9b:7b:97:b3:43:d9:b7:10:
         ba:0e:e0:12:21:35:1a:30:53:6c:74:a7:4c:bb:ea:42:23:f8:
         f1:50:b4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:55:42 2024 by rpki-client on console-fra.rpki-client.org