Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20536365-fe52-3492-a5e3-fd9405f63a0b.roa
File:                     20536365-fe52-3492-a5e3-fd9405f63a0b.roa (raw, json)
Hash identifier:          pC0bm0EgFtgZtZDauA5tC4JsIy/FwhnyVKOGMVcQqyQ=
Subject key identifier:   C0:16:9B:1A:DA:3A:37:69:3F:F7:E1:EA:75:F7:D6:19:E3:F2:E1:95
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845726AD7415A420092EC0420C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20536365-fe52-3492-a5e3-fd9405f63a0b.roa
Signing time:             Fri 05 Apr 2024 17:23:30 +0000
ROA not before:           Fri 05 Apr 2024 17:23:30 +0000
ROA not after:            Thu 04 Jul 2024 17:23:30 +0000
asID:                     58061
IP address blocks:        166.1.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:72:6a:d7:41:5a:42:00:92:ec:04:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  5 17:23:30 2024 GMT
            Not After : Jul  4 17:23:30 2024 GMT
        Subject: CN=2f837f09-d0c2-40c7-a286-91e3101af10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e9:22:80:6c:74:0d:6b:7a:d9:9f:92:30:cf:
                    38:e8:41:2d:be:f2:5c:80:3c:b5:df:82:32:d8:26:
                    33:90:d3:e8:1c:3a:88:c8:8e:bc:b6:6e:f6:d3:78:
                    47:26:3f:ff:61:fe:dd:3b:f0:ff:74:cd:ac:fd:d8:
                    84:5a:1b:7b:3a:7d:26:2c:b1:24:38:8f:de:93:44:
                    09:fc:e4:14:0d:df:c5:ec:18:46:96:fe:9c:c8:30:
                    ba:92:b2:0a:a4:d8:19:69:39:9a:93:59:9b:91:af:
                    fe:6a:cc:9e:38:ce:25:63:5b:09:95:2e:cb:13:5d:
                    7b:35:ca:db:3b:bd:e6:53:4f:0e:22:63:15:0f:55:
                    e8:0c:2e:d9:03:f8:fe:63:70:77:42:5e:49:5e:15:
                    2c:74:e8:75:d7:68:a4:3e:5a:00:e6:a8:98:29:04:
                    27:e0:30:6f:b6:ac:2a:c8:71:be:64:18:1c:3f:8a:
                    f5:9c:ad:94:c2:f5:23:42:4c:1d:75:5b:de:1c:95:
                    08:80:9c:5f:10:f7:ec:3f:e8:45:2d:f5:89:e0:fa:
                    60:5b:05:3e:ea:a5:5b:e4:71:b9:e1:67:69:f9:37:
                    44:03:10:13:43:03:94:88:2d:9a:38:3b:73:34:f9:
                    01:aa:5c:05:c9:82:be:77:0d:78:ba:e2:87:e0:51:
                    38:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:16:9B:1A:DA:3A:37:69:3F:F7:E1:EA:75:F7:D6:19:E3:F2:E1:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20536365-fe52-3492-a5e3-fd9405f63a0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:6f:91:a8:2e:08:52:99:62:82:76:b1:a2:ad:d2:01:3d:ce:
         18:20:87:a9:e2:22:5a:d3:2d:3c:c4:ad:bf:34:9b:fc:11:11:
         81:57:10:f7:80:e8:ee:68:28:02:f9:5f:79:99:1e:b6:e4:ad:
         58:70:b5:2d:78:97:3c:96:51:bc:54:62:bb:b0:b5:bf:c5:19:
         9e:70:af:88:33:e7:05:e0:e4:37:87:5c:a9:bc:6b:11:a9:ad:
         7b:9c:5b:a1:91:c5:dc:f0:18:48:d1:6d:27:4f:08:4c:cb:79:
         ac:13:f3:19:b9:32:53:ac:3c:95:1b:ad:d5:de:bc:72:a0:26:
         a7:41:00:d6:86:ec:81:7a:16:64:bf:27:35:13:d3:32:71:aa:
         e4:2a:16:ef:b1:6f:8c:81:31:a8:8a:fa:b7:b9:30:f0:71:fa:
         e9:18:15:f6:fb:28:9b:6e:51:e4:03:03:5e:7f:a3:fe:22:71:
         ce:4e:fa:c2:5a:0c:e9:6a:63:10:5d:0d:95:b0:b0:78:2a:61:
         ea:b6:ca:e0:54:1b:c0:08:37:04:a7:be:a0:89:90:14:b9:92:
         0c:f4:6e:eb:60:d5:94:aa:9e:4d:da:60:08:80:aa:61:00:82:
         80:2e:38:f3:40:2f:a1:72:56:5c:30:e1:2d:9e:e4:ee:a0:f4:
         4e:42:d3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 22:27:18 2024 by rpki-client on console-ams.rpki-client.org