Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e48cde5-133e-32f8-8d22-4727676f6436.roa
File:                     2e48cde5-133e-32f8-8d22-4727676f6436.roa (raw, json)
Hash identifier:          78DaatZiPjNwqZLvZzociTN+b+YXHKVVKgJkUf1xgUg=
Subject key identifier:   C0:94:A1:EF:F8:4F:9F:A4:D8:1E:29:82:4D:E1:3C:07:6F:AE:0D:FC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858483F80386D9DAED4DCF08D0B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e48cde5-133e-32f8-8d22-4727676f6436.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     62240
IP address blocks:        166.1.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:38:6d:9d:ae:d4:dc:f0:8d:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=5a9a2abc-5aad-4745-9a1a-0694b0be1779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:39:25:e0:08:e6:47:df:ff:72:d4:7e:50:27:
                    ed:48:ee:9a:7d:ce:ac:16:e5:57:79:e6:0a:20:fb:
                    a7:ec:9c:50:b4:cf:f3:b4:1c:bf:53:cb:29:1f:6f:
                    a2:8a:36:10:a4:5e:6c:12:d2:69:07:06:94:38:02:
                    9f:32:29:82:4b:9d:c7:01:e2:de:ae:8c:ee:15:a3:
                    9d:6c:59:b7:76:ae:18:cc:42:92:e8:23:64:ef:6c:
                    5d:91:b8:9b:48:95:5c:62:df:8c:6c:f3:c9:d4:c3:
                    c9:99:c1:c3:98:dd:43:35:b8:08:19:86:9c:10:96:
                    6b:79:f8:8d:6d:fb:d6:d2:ba:d5:84:ee:4e:14:ec:
                    89:1d:ff:72:45:a0:29:00:33:c7:68:e7:65:a2:3a:
                    02:05:fa:18:90:1a:db:96:7e:c4:5b:cc:b6:ab:42:
                    02:35:3f:68:8e:17:24:08:70:b8:20:af:18:7c:3c:
                    e4:94:62:65:ed:8e:92:21:44:f3:44:1d:71:4e:af:
                    10:49:8c:13:af:cc:b8:bc:1f:74:0a:ba:82:3f:6c:
                    d1:45:11:6d:cb:81:b1:59:81:7f:7e:cd:76:0a:3b:
                    1f:77:6b:e4:62:3b:9a:e8:84:52:36:bb:ad:2b:a5:
                    71:6d:02:5c:37:f4:3e:93:50:f2:27:41:84:08:0a:
                    09:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:94:A1:EF:F8:4F:9F:A4:D8:1E:29:82:4D:E1:3C:07:6F:AE:0D:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e48cde5-133e-32f8-8d22-4727676f6436.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:ce:7b:a6:74:cd:c6:f9:4e:fc:bb:0f:1b:2f:96:a0:80:73:
         a4:a4:e3:d1:73:80:e3:19:e0:cc:97:ca:f8:6f:22:41:b7:7a:
         de:f4:69:37:fb:46:5a:e4:73:b0:60:d6:c0:2b:fb:72:bc:4a:
         50:86:c0:59:bd:f0:e1:46:b0:05:84:ed:0c:de:a0:ed:0b:24:
         27:fb:82:86:a8:b0:39:02:67:bd:40:8f:08:75:5b:22:48:62:
         e0:8d:1b:1b:94:90:02:e9:64:84:cc:83:12:a4:1d:d3:4e:5e:
         b3:8d:2d:8d:3f:1b:f2:2f:c4:8c:e3:71:29:04:c6:f8:ac:87:
         04:a7:c9:67:52:6b:f2:0c:11:eb:da:be:3a:69:91:91:52:31:
         15:82:63:1e:2a:a9:e7:80:bd:bd:9d:80:90:47:ab:ba:64:60:
         62:01:9c:55:a7:71:25:fa:e6:6b:81:6e:51:70:cb:47:86:01:
         a8:ac:b6:d9:b2:95:f0:ea:cd:b1:2a:8e:42:b1:ba:6b:52:ea:
         12:73:db:8f:7f:9e:2b:98:f9:f0:9b:da:42:26:1b:f2:92:7c:
         87:fe:27:02:76:13:db:0d:fe:cb:96:3a:8a:1c:25:66:3b:d5:
         96:98:c9:3a:84:e0:ed:26:ec:b3:72:25:19:e1:37:c1:2a:26:
         dd:72:7a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:36 2025 by rpki-client