Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/15622dba-b220-3302-8e96-978ba9af98fd.roa
File:                     15622dba-b220-3302-8e96-978ba9af98fd.roa (raw, json)
Hash identifier:          4XiqS8iDK2KWXtMDQFoiE5VBBxn6pFKhe4wL6T0O3iU=
Subject key identifier:   13:08:25:28:4F:FD:81:B3:AE:7A:AB:2D:47:DE:98:2E:73:62:B6:72
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584790AF75BC442F2BA001AFE180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/15622dba-b220-3302-8e96-978ba9af98fd.roa
Signing time:             Wed 16 Oct 2024 23:09:53 +0000
ROA not before:           Wed 16 Oct 2024 23:09:53 +0000
ROA not after:            Wed 15 Jan 2025 00:09:53 +0000
asID:                     8881
IP address blocks:        166.0.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:90:af:75:bc:44:2f:2b:a0:01:af:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 16 23:09:53 2024 GMT
            Not After : Jan 15 00:09:53 2025 GMT
        Subject: CN=69b3610b-a397-4028-9ada-64a4853bcfd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:36:f7:57:ed:c3:5f:3d:6e:c5:a3:fc:2a:38:
                    a1:cc:74:e3:be:9b:15:0d:df:35:a7:d1:f8:9b:86:
                    b6:a7:29:94:75:c8:b4:7d:39:6e:f2:f5:84:1f:7e:
                    81:8c:f3:2b:c4:19:7d:e0:a9:86:1a:fc:2d:78:36:
                    43:47:98:4f:7e:09:65:23:96:14:cd:d2:d3:ba:6b:
                    67:82:12:e6:60:64:59:f6:21:65:ac:f9:7b:40:fb:
                    dd:50:5e:23:8b:7b:84:e5:b1:6f:8a:15:72:27:4c:
                    d2:b7:a5:f3:ed:c0:f3:04:54:f6:2a:97:12:39:d0:
                    fa:a8:1a:4f:34:c0:43:00:da:46:a3:13:b0:02:e1:
                    d6:fc:20:1c:f5:a7:6c:63:e4:44:49:7c:d3:fa:31:
                    3e:45:51:be:9a:65:7f:1f:02:ef:36:10:b7:ed:81:
                    71:cf:69:ba:c5:44:e2:6c:a7:83:7b:48:d4:19:6f:
                    a7:f5:1b:7b:bc:e0:a5:0d:ff:7a:21:01:59:45:59:
                    73:bb:14:f9:4c:31:42:10:e1:5c:60:a9:ab:45:db:
                    e8:cb:00:b0:b9:a4:80:8a:39:0a:a1:b3:db:31:86:
                    50:9a:24:b8:88:14:d3:05:ce:e1:e6:1e:eb:74:69:
                    07:c9:d8:4b:3a:f5:4f:44:c7:89:91:f9:25:e4:e0:
                    e8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:08:25:28:4F:FD:81:B3:AE:7A:AB:2D:47:DE:98:2E:73:62:B6:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/15622dba-b220-3302-8e96-978ba9af98fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:22:d8:f1:bc:48:db:b5:9b:de:fd:31:47:e3:4c:65:33:a9:
         b1:e5:37:8a:89:4a:13:5d:a8:bc:c2:71:c3:40:cc:4d:b3:dd:
         53:ff:de:12:50:d7:f4:35:ae:65:e6:19:14:fb:0d:d1:5e:af:
         a1:1c:4e:d0:4c:18:c2:d5:67:30:97:fa:94:87:ab:74:e4:55:
         f3:11:ac:47:14:80:fc:80:cf:16:72:7a:57:fe:e5:56:e6:98:
         69:4b:f9:5d:26:bf:5f:61:25:8c:00:6c:52:58:1d:0f:e2:2e:
         57:9b:8b:54:a7:35:41:b5:15:08:3b:ac:d8:af:d2:44:81:16:
         35:7f:4a:68:38:5e:61:a8:5d:f6:a9:a1:d7:7d:af:51:17:18:
         d6:98:ac:98:3a:e8:a7:3a:d0:e1:32:94:c3:f4:57:a6:af:e7:
         ba:f9:c4:cd:4b:fa:f0:9a:a0:1d:ab:74:74:29:58:06:0a:fa:
         0a:7c:a8:23:76:1b:3e:71:21:9d:57:e6:b5:65:99:61:34:1a:
         81:19:72:f2:62:9e:36:1c:c0:b5:3b:95:2b:6c:6b:46:0b:7d:
         d5:57:17:d4:0a:56:f8:f3:d3:f5:f8:a4:6c:fa:57:53:2d:8e:
         0c:01:52:35:74:63:e8:53:03:7f:eb:0d:00:e8:41:69:f0:09:
         af:5e:3d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:37 2024 by rpki-client on console-ams.rpki-client.org