Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3080cea0-25b0-3b83-9f9c-acb88eb6d11c.roa
File:                     3080cea0-25b0-3b83-9f9c-acb88eb6d11c.roa (raw, json)
Hash identifier:          KfNWLpoTKf971QjkvmaoGvnojAZteKjdzUkEgodnP70=
Subject key identifier:   34:D2:EF:CD:3A:9F:8C:7A:58:34:5A:8B:24:87:67:A1:E4:E1:D9:D9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858453CDD5F57D435C244465BC85C
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3080cea0-25b0-3b83-9f9c-acb88eb6d11c.roa
Signing time:             Sun 17 Mar 2024 13:00:30 +0000
ROA not before:           Sun 17 Mar 2024 13:00:30 +0000
ROA not after:            Sat 15 Jun 2024 13:00:30 +0000
asID:                     395559
IP address blocks:        166.0.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3c:dd:5f:57:d4:35:c2:44:46:5b:c8:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 17 13:00:30 2024 GMT
            Not After : Jun 15 13:00:30 2024 GMT
        Subject: CN=1c31a368-f280-4ebf-a3e6-09efb9317444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a3:0a:e7:b0:af:b2:c2:f7:24:9a:ed:8b:14:
                    94:49:e9:be:bd:fc:0f:51:c6:86:a9:30:22:cd:ca:
                    f5:b0:85:a6:25:55:f4:83:c7:be:a5:70:38:fa:f2:
                    72:ee:ff:de:d2:88:05:7e:51:1a:c7:e5:f2:51:25:
                    95:81:da:71:b8:7c:e5:4b:4b:0f:5a:1a:ae:16:13:
                    92:4a:ff:0d:9f:01:b4:f0:ee:70:3a:a7:07:95:b6:
                    12:2c:b5:79:e7:d6:09:ba:4d:04:e7:4d:df:99:7c:
                    63:b1:df:f4:7c:16:5d:18:61:f0:17:12:fe:5d:12:
                    9e:73:4b:8f:f1:31:16:8e:08:87:36:41:b0:56:2f:
                    d7:de:d2:6d:a1:4c:3b:d3:05:41:18:c4:23:d9:54:
                    1c:53:66:fc:db:d4:df:ab:db:56:1d:25:71:74:5a:
                    27:41:fc:93:10:a4:d0:3d:5a:89:c8:01:3e:39:f3:
                    d0:51:60:11:41:c8:e5:b5:7b:d5:4d:1a:06:96:e2:
                    9d:13:94:06:04:06:3f:77:15:4a:65:a6:21:7f:88:
                    dc:71:00:07:2a:c0:cb:e7:ab:30:4f:b1:40:b4:fd:
                    38:44:ef:0f:45:b5:cb:e6:87:18:87:2c:67:bd:39:
                    dd:f4:c2:5b:d8:bb:66:19:3d:c5:fa:d4:4d:31:3b:
                    8c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D2:EF:CD:3A:9F:8C:7A:58:34:5A:8B:24:87:67:A1:E4:E1:D9:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3080cea0-25b0-3b83-9f9c-acb88eb6d11c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:53:25:e9:e1:61:49:81:ef:ae:b0:cf:48:a4:be:cb:e8:b2:
         e5:17:3f:88:10:8e:55:6a:c5:13:8b:79:34:01:08:90:eb:d6:
         2e:c5:35:a7:df:83:92:0a:8c:eb:70:a0:b4:99:2e:43:be:db:
         fc:fc:5c:48:c4:d8:ce:75:fe:ff:62:d3:ce:b5:4c:8a:34:9d:
         94:f8:f5:02:48:7d:2a:c3:bc:a0:bc:67:f0:3a:3d:74:26:08:
         3f:a1:09:40:b5:f8:fa:4d:ed:94:12:24:58:fa:b9:02:50:86:
         46:b4:de:77:60:7d:d6:d9:98:2c:cd:0b:e1:5a:83:df:72:e9:
         4e:4d:64:81:f3:43:63:17:d7:f1:fb:d1:11:60:04:16:dc:6d:
         34:f4:3c:ad:29:06:be:03:69:dd:71:88:00:96:30:66:fa:17:
         c0:85:a6:5a:fd:fd:21:c6:80:23:4e:46:c7:b5:83:36:c6:32:
         cf:3e:6b:e4:5c:a4:c8:a6:72:96:78:58:96:05:77:50:a4:b6:
         16:47:18:42:7c:db:b3:9b:c9:26:e5:c6:f7:d1:62:82:40:ab:
         34:44:3b:f8:a8:76:ca:8a:b4:30:fa:d3:d3:43:48:fc:b2:ef:
         98:30:95:c9:50:70:78:83:e1:7c:da:9e:df:28:ca:ed:78:57:
         7d:d7:52:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:56:18 2024 by rpki-client on console-fra.rpki-client.org