Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21e6778b-5823-360c-86be-9a87913016a0.roa
File:                     21e6778b-5823-360c-86be-9a87913016a0.roa (raw, json)
Hash identifier:          AH+ev8UVtwwE8mWs0EGOgW/4fn+i1yKBKbKjUejCyOU=
Subject key identifier:   BA:C8:41:18:A7:75:E4:1B:43:98:C1:C2:B9:21:5F:18:37:E6:98:3F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847DC64A925F02E7D617B114200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21e6778b-5823-360c-86be-9a87913016a0.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     19318
IP address blocks:        166.0.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:a9:25:f0:2e:7d:61:7b:11:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=8cdd5a19-f671-413a-b3f7-8441bf17accf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:24:03:f5:05:0f:39:ed:c8:7a:01:a7:71:bd:
                    fe:23:a8:17:3c:af:5e:32:49:07:f6:b2:bd:90:d5:
                    94:56:18:ec:13:d8:16:8f:53:c2:fc:d2:66:e1:04:
                    ae:9b:69:10:a8:22:41:18:77:f5:f9:45:89:a1:99:
                    bc:70:b6:4c:1c:fe:86:06:8c:63:76:c8:ea:b9:52:
                    c4:b1:74:31:08:97:40:1c:b3:37:ff:43:98:dd:cf:
                    72:30:82:c7:79:cd:b2:28:40:b1:22:1e:fd:65:47:
                    89:96:99:4a:db:9d:a9:35:be:30:cf:b3:c7:a9:fe:
                    f9:3c:40:77:d1:f7:07:42:ec:de:aa:8d:8e:9c:ab:
                    5f:36:d8:b2:8d:2d:33:78:ca:7b:82:a3:9e:1f:a4:
                    e1:02:7a:d3:e6:88:7d:ab:93:bb:2b:23:29:03:88:
                    ab:3f:ad:9d:76:d3:b5:79:0e:14:bf:fb:ce:bd:28:
                    d1:be:be:2c:15:3b:3f:05:fb:97:47:36:e9:d7:f1:
                    f3:d0:e8:28:27:b6:a8:b9:1c:d8:72:b9:86:d0:2c:
                    2e:7a:4c:67:66:61:4c:6c:1e:ff:c2:b6:74:f3:29:
                    46:f3:94:0e:0b:71:8d:ba:db:d4:52:84:f1:6b:9f:
                    a6:35:56:55:8d:ec:ad:50:8e:f1:6c:e9:77:4f:b2:
                    0c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C8:41:18:A7:75:E4:1B:43:98:C1:C2:B9:21:5F:18:37:E6:98:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21e6778b-5823-360c-86be-9a87913016a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:b8:d6:f1:ac:d7:da:d3:02:42:d4:2a:b2:d5:4f:a0:bf:53:
         eb:d8:a5:9c:ae:04:2d:37:77:a9:cd:8f:6a:0c:33:c6:fb:66:
         af:03:60:03:b4:a1:3c:49:2e:84:6c:1b:73:d1:2d:f9:a4:0d:
         ba:3d:df:16:d9:ef:c4:dd:81:f3:bf:8f:cb:90:c1:2b:49:3d:
         13:f4:84:fa:f1:97:f4:0a:79:a7:78:36:49:4a:95:aa:98:e6:
         26:94:34:90:a4:c9:d3:a3:b2:02:e3:58:8c:8d:6a:cb:e1:fe:
         fa:11:fa:b7:7f:19:b2:e8:ec:87:57:50:11:45:e6:df:36:79:
         e4:80:d2:51:a1:e1:73:e8:a4:47:8c:c7:6d:81:4f:59:e3:e4:
         d6:ef:9c:6d:bb:5d:82:0c:8f:c2:7c:a1:da:9b:3d:fb:f6:eb:
         5e:ab:c6:48:00:7f:e1:d4:f6:53:99:15:ee:1f:1b:4c:70:b2:
         74:ed:89:0c:8a:86:bf:71:31:f7:b5:19:b7:f3:b2:74:36:db:
         78:07:b9:74:a6:2e:09:4b:d3:92:a1:d7:b9:f9:6f:8e:ec:84:
         1b:68:0d:1c:d8:93:d0:8b:fa:42:e7:28:0d:2e:dc:1d:e8:5f:
         f1:03:8a:9b:5c:d5:7b:f8:42:d9:37:f0:7e:73:a6:20:33:8a:
         25:ba:e6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:25 2024 by rpki-client on console-ams.rpki-client.org