Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2c4bc899-84da-384d-9075-c498cd9dc0b3.roa
File:                     2c4bc899-84da-384d-9075-c498cd9dc0b3.roa (raw, json)
Hash identifier:          C4wlPoPeVvJ3t1xAIfWAjvo03vJVlZPXCql4z3LYTyc=
Subject key identifier:   36:99:F8:75:96:B6:FE:79:8E:91:21:B9:37:94:F1:36:AA:D9:60:5A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858475BDB8647656C2ACAEA92E280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2c4bc899-84da-384d-9075-c498cd9dc0b3.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     26383
IP address blocks:        166.1.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:86:47:65:6c:2a:ca:ea:92:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=1f990882-f6eb-49a9-b9ba-085afe79306c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b7:c9:0d:99:d1:8a:23:2a:a8:20:65:5f:08:
                    66:a1:09:7e:57:ed:3e:d1:10:9e:fa:3e:8e:22:82:
                    88:87:a5:57:c7:63:0e:35:d1:3d:9e:d8:6d:18:b2:
                    bd:39:cf:19:f6:f1:bc:93:3d:b6:aa:06:94:96:5e:
                    a7:1a:ea:f7:9b:6c:b5:90:fd:ec:d8:94:2c:8d:ad:
                    30:e1:1e:75:04:c4:20:25:b4:cb:23:1e:aa:6d:64:
                    fc:4c:74:ff:08:7f:fd:e1:a3:d3:3a:69:33:ec:d0:
                    0b:01:3b:11:ef:93:56:04:8a:a3:4a:01:7f:f1:4b:
                    bd:ac:01:d7:06:64:f4:b5:56:d7:be:95:e9:18:65:
                    26:72:28:53:96:76:07:f8:f8:87:02:49:d7:a7:d6:
                    ed:23:78:72:47:4b:d3:6b:a2:1f:8a:e6:2c:28:8c:
                    0c:cf:af:88:7f:f5:25:23:37:02:63:08:31:2d:8d:
                    7d:cf:65:31:ec:22:4b:3b:66:f9:64:5a:e6:db:dc:
                    e9:bc:76:a0:a0:4d:1f:19:8a:6d:49:bd:a0:5b:99:
                    94:94:9f:7f:42:c1:c8:1d:5e:de:14:5f:10:57:a0:
                    db:ca:f2:d9:b9:4d:18:ed:02:43:2c:cb:d2:f0:65:
                    65:cc:5d:5d:14:93:9a:88:78:d6:c5:dd:72:f7:67:
                    35:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:99:F8:75:96:B6:FE:79:8E:91:21:B9:37:94:F1:36:AA:D9:60:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2c4bc899-84da-384d-9075-c498cd9dc0b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:f0:ae:7c:5d:a5:70:7f:d5:be:ef:95:7b:79:02:12:0c:5e:
         a9:62:41:06:b1:7e:62:46:29:a5:7f:20:43:bd:89:87:4a:3b:
         14:d2:6e:6f:38:4b:09:54:e8:e8:80:3f:a0:36:3b:17:bd:4e:
         fe:e6:6f:b9:d5:60:f3:6d:c2:e3:7b:b5:48:5f:02:d2:34:55:
         6f:72:19:3f:e2:71:6a:3b:fb:7d:b5:5f:0f:d4:9f:4f:86:5b:
         9f:1d:94:0d:b5:fd:8b:58:05:2a:06:38:28:36:f3:ee:b9:82:
         1e:cd:93:b5:55:e4:7f:05:44:83:28:8f:c3:fb:d4:81:ad:dd:
         d1:5c:d5:25:aa:be:75:4d:99:01:5a:8a:c5:45:f3:2e:32:e4:
         0d:f1:e4:ac:80:18:c7:a9:ad:6a:5e:f0:ec:43:4e:0d:e2:1b:
         0a:1b:33:7e:bb:b5:d5:cd:d1:f5:5c:75:41:43:27:4e:9e:f8:
         49:2d:fc:4d:58:70:e4:f7:1c:72:b4:23:44:b5:c6:bd:eb:b1:
         61:6e:ba:38:c5:36:bd:9c:e6:92:a8:26:cf:a6:bd:f5:be:47:
         a1:32:5f:ee:54:93:e7:6d:90:48:30:9e:b1:bd:49:a4:7c:72:
         69:c6:da:6c:ce:a4:0b:1f:ca:65:e8:7f:7c:4c:e1:8b:09:3e:
         2f:d8:1a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:41:47 2024 by rpki-client on console-ams.rpki-client.org