Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28e6192f-5104-36a7-a314-32d941e6e04b.roa
File:                     28e6192f-5104-36a7-a314-32d941e6e04b.roa (raw, json)
Hash identifier:          PTdVQx4M3/KaTZz0xQLV0PEg4asdrzGz9g1XSkKFMS4=
Subject key identifier:   1E:C9:5F:3D:82:FC:35:DD:CB:2D:98:77:CC:06:F9:C4:00:D0:3C:FE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847F2BA2D7683A23D04AC04EC90
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28e6192f-5104-36a7-a314-32d941e6e04b.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     200017
IP address blocks:        166.0.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:2d:76:83:a2:3d:04:ac:04:ec:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=cfbafbcd-d44a-43d9-9ac7-69071b605ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:51:ef:94:1b:f1:63:4a:67:29:fe:85:f6:25:
                    16:44:69:6e:2c:a8:e3:0a:49:32:4e:ff:45:d8:21:
                    b5:d6:d7:01:4d:64:74:53:0d:5e:fc:57:50:3e:3f:
                    98:6a:a5:12:06:29:e1:3a:67:c9:5e:d5:42:cf:62:
                    75:b0:c4:29:42:5b:65:17:10:77:a5:6d:a1:e2:59:
                    e8:3b:bf:7d:88:4a:86:4d:3b:35:28:9f:34:ee:e9:
                    7b:7e:7c:a7:b3:a1:ca:37:ed:4a:3a:71:4a:19:dd:
                    11:a8:64:e4:70:89:eb:8f:d4:b8:8c:11:de:4d:22:
                    6a:bc:cb:51:df:ca:17:5b:46:b8:cc:36:30:fc:40:
                    3e:1e:7a:85:a9:6d:c4:7a:10:29:97:97:bc:4f:e2:
                    32:45:07:60:56:a9:38:75:d9:73:1d:d3:75:ef:ab:
                    75:e3:52:cb:73:23:83:8a:0a:a4:cb:91:de:1f:78:
                    3d:7c:1d:37:ef:5b:bb:a9:e9:e2:a8:15:89:e7:17:
                    88:1d:96:7a:a5:23:63:a3:36:7c:28:16:1e:02:80:
                    20:38:e6:92:aa:a5:d5:66:6e:cc:cd:ed:f4:97:74:
                    7f:02:d5:f9:14:ee:59:15:1c:cc:2b:05:8d:dc:eb:
                    36:64:21:b2:bf:80:19:8c:fc:fc:05:98:1a:5d:e4:
                    79:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C9:5F:3D:82:FC:35:DD:CB:2D:98:77:CC:06:F9:C4:00:D0:3C:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28e6192f-5104-36a7-a314-32d941e6e04b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:19:15:46:e8:f1:fc:dc:29:0a:17:88:ec:f2:9f:e6:14:99:
         ae:03:ad:c3:76:ec:88:4d:62:bf:c6:02:a7:e2:a9:27:12:c8:
         f7:c6:61:1d:39:45:78:05:60:48:0c:fa:e5:45:22:a6:b7:77:
         81:ef:ef:db:b1:0f:6b:39:5c:3f:79:71:4e:64:a9:e9:7e:93:
         e8:b5:58:46:1d:67:95:80:f7:ef:d3:5c:15:84:46:a3:1c:a0:
         fd:db:39:45:25:79:3e:35:13:22:b2:6d:45:d1:e4:b9:49:06:
         e9:da:ba:76:a7:85:f3:91:25:de:22:c4:47:24:5c:63:76:d2:
         d7:39:4d:d1:da:b7:ac:dc:cb:b8:0c:df:3d:0f:87:c6:ff:df:
         12:77:ec:b0:9a:6b:4f:27:eb:df:34:e3:e7:31:9e:ea:67:12:
         c6:8f:44:fa:4c:a0:65:64:90:44:dd:0e:5b:35:24:d3:c9:a6:
         39:de:2c:45:72:07:e9:13:93:ae:99:2f:ba:e2:2c:29:b2:fe:
         a7:75:65:8c:ab:8d:c9:ea:15:31:1d:92:b3:9a:7a:8c:e3:87:
         48:fc:e2:e0:7d:f8:c6:28:03:19:6e:ef:03:fa:7f:e9:26:07:
         c6:92:9a:ca:89:4f:45:a8:ae:ac:37:f0:a4:f9:dc:68:58:b9:
         3c:dc:fd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:38 2024 by rpki-client on console-ams.rpki-client.org