Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d7ec9b4-e7ed-3453-b476-b30b17b34893.roa
File:                     1d7ec9b4-e7ed-3453-b476-b30b17b34893.roa (raw, json)
Hash identifier:          LScDpKp760Mme01BMUehijpS0xID75lHsRX0mpiWD/o=
Subject key identifier:   E7:37:D0:4F:CC:4D:E6:CA:59:DC:C2:16:4E:8E:78:21:B1:BB:75:17
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584777C63BD388024DC3A8593C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d7ec9b4-e7ed-3453-b476-b30b17b34893.roa
Signing time:             Tue 08 Oct 2024 01:00:31 +0000
ROA not before:           Tue 08 Oct 2024 01:00:31 +0000
ROA not after:            Mon 06 Jan 2025 02:00:31 +0000
asID:                     834
IP address blocks:        166.0.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:77:c6:3b:d3:88:02:4d:c3:a8:59:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  8 01:00:31 2024 GMT
            Not After : Jan  6 02:00:31 2025 GMT
        Subject: CN=36e52a42-9bde-4e0d-8798-a7618d4a3a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1b:b2:c9:d9:b5:bf:49:5a:41:e0:89:2d:26:
                    8b:2a:b2:e8:82:78:9e:b2:3c:3b:47:b9:0b:ca:b0:
                    e7:7e:6c:7c:74:a5:30:a0:8f:b9:fb:02:3b:e6:80:
                    72:1e:ab:04:fc:2d:98:80:4a:05:3c:33:89:87:cd:
                    e5:80:90:df:ed:5a:e5:28:74:4f:93:84:8d:8b:eb:
                    39:7b:13:8e:23:82:b7:00:01:80:c3:00:ce:94:48:
                    dd:4f:26:46:69:3d:c6:e8:63:4e:91:dd:f1:c1:40:
                    32:4c:ff:6c:25:52:2e:d9:93:f6:99:64:36:95:aa:
                    0a:40:43:82:fb:7e:f1:8a:96:fc:e7:c8:ef:ec:b3:
                    f0:de:98:12:6a:19:4a:bb:de:e0:2f:ba:c2:a5:a0:
                    94:03:3d:21:b0:aa:ab:cb:b5:26:8f:89:6a:bc:a4:
                    e9:9d:b7:23:5c:fa:e1:7e:07:30:65:67:dd:35:3e:
                    c0:63:ed:32:81:86:7b:2f:eb:ca:51:e7:cb:f4:8e:
                    c5:91:1f:ae:05:2f:4c:3a:0d:9d:0c:fd:5e:54:b1:
                    94:66:15:b5:e8:08:6e:25:e1:08:cb:23:9d:b5:99:
                    95:a5:39:d8:66:36:42:2c:b5:af:1c:31:a3:a8:21:
                    55:cf:20:73:f2:8d:fc:3a:cc:07:67:6c:67:45:14:
                    47:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:37:D0:4F:CC:4D:E6:CA:59:DC:C2:16:4E:8E:78:21:B1:BB:75:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d7ec9b4-e7ed-3453-b476-b30b17b34893.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:77:32:4f:02:0a:92:84:a1:7b:20:c8:bb:7a:3e:9f:d5:74:
         e4:15:5e:22:17:e7:6b:48:94:4a:83:a5:22:3a:6f:ec:d4:b6:
         8f:31:ae:d5:b1:f7:8c:cc:8a:46:c1:1f:49:56:7b:0f:09:ed:
         3e:54:5e:f9:97:b4:eb:fb:2b:24:2d:ec:cc:c9:55:99:c0:d7:
         27:d8:ef:4b:f1:1d:2f:75:4b:4b:4e:cb:27:4e:9e:f9:67:10:
         68:40:8a:06:89:01:3e:bc:8d:61:c0:db:5c:5f:74:16:b3:6e:
         54:80:3a:c9:69:83:3f:23:ad:6e:ee:9f:30:8d:2e:4b:25:76:
         12:6b:c5:3b:5b:6a:19:e7:f7:91:6f:2a:a0:ab:6f:62:90:86:
         e1:97:6b:03:22:6f:ba:2f:66:ae:2e:c4:d7:ba:72:a1:8c:01:
         e2:39:bf:6d:90:e7:a7:f4:19:fa:27:d7:17:8c:92:76:e8:7d:
         4f:d8:72:d4:e0:8a:3b:ed:31:43:04:da:23:e3:71:fe:b4:07:
         c0:d5:12:b9:e3:ba:5c:77:99:57:59:c6:1e:b6:0a:bc:fd:ba:
         f5:6b:7b:85:33:fd:15:13:d3:e3:54:71:9a:6e:b6:43:a5:68:
         e5:71:e4:0e:48:c5:a7:bd:89:47:e1:5e:af:fe:ca:d7:b1:09:
         83:0c:75:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:59:57 2024 by rpki-client on console-ams.rpki-client.org