Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3857e9dd-a626-3e96-9544-98a0511abcc3.roa
File:                     3857e9dd-a626-3e96-9544-98a0511abcc3.roa (raw, json)
Hash identifier:          LhfMrO7fNtQan1dRBo1K0V6l2l/UNHoiC9puNzYpHLg=
Subject key identifier:   5F:29:26:26:47:91:0F:09:F3:E7:BA:47:DF:26:51:B4:3E:D8:5E:8E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845A15E06A5CCE7471E2EECE900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3857e9dd-a626-3e96-9544-98a0511abcc3.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     62240
IP address blocks:        166.1.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:06:a5:cc:e7:47:1e:2e:ec:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=14c0a893-c09e-44a6-abd7-154d9ea83c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:48:0e:d6:f4:cf:08:1d:71:69:e5:97:2e:99:
                    a3:99:1c:0d:01:3e:d5:b6:14:c9:d8:98:29:39:cf:
                    fb:5a:64:d0:e9:9b:1b:d6:8b:77:0e:f9:17:15:30:
                    6f:9f:b7:04:2d:83:bf:29:c1:6f:dc:bf:0f:95:f9:
                    7f:2b:b8:91:26:cd:f5:47:59:eb:0c:e9:6b:34:39:
                    ca:e3:f0:28:86:f0:c5:c9:bd:8d:4d:15:82:3e:db:
                    7c:11:64:ae:cd:d7:9f:58:51:79:35:f9:35:1b:f8:
                    04:f5:ac:90:f1:ef:78:20:db:7a:5f:73:4a:5a:96:
                    b6:84:bf:b4:8c:d4:4e:e8:ec:44:bd:f3:28:68:7e:
                    60:d6:1c:17:20:13:5f:2c:72:04:36:f4:c0:28:7f:
                    57:c2:7f:1f:57:31:d4:de:ff:04:59:89:45:90:43:
                    21:a6:17:07:23:8f:3c:da:89:b4:ca:e2:fe:51:84:
                    cc:99:89:9b:d0:e4:52:a5:be:23:6f:9b:b5:f5:6a:
                    ba:df:64:d7:a5:ac:43:3a:4c:0a:7a:52:e4:c1:12:
                    ca:eb:63:a4:86:e2:fb:5e:76:e8:45:b6:c3:c3:c0:
                    29:77:ab:3c:c9:a3:f7:bc:56:65:7e:c6:78:eb:46:
                    e1:be:f2:f1:c3:0b:ac:c2:12:7d:4f:48:94:28:c9:
                    50:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:29:26:26:47:91:0F:09:F3:E7:BA:47:DF:26:51:B4:3E:D8:5E:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3857e9dd-a626-3e96-9544-98a0511abcc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:67:99:2f:27:eb:f3:dd:f9:12:01:14:99:6f:32:2d:bf:c9:
         99:87:4a:51:a1:90:f7:2d:dc:e7:05:d4:8f:c5:7f:09:c1:62:
         37:58:19:e2:ba:a5:83:ff:be:26:60:1e:62:a2:43:9c:16:f8:
         f0:35:cf:2c:b7:9f:47:3d:76:ac:ec:cd:57:44:67:35:b2:37:
         b9:92:7b:63:09:7f:9e:5d:a7:46:24:88:10:38:29:2e:de:b1:
         a8:f9:35:50:6d:6b:3e:52:20:9f:ca:64:2a:c6:12:2b:40:2b:
         bb:be:a3:82:7d:78:b5:5b:3e:78:54:f0:02:b0:32:74:6e:5e:
         c5:bf:66:0e:bb:83:71:81:70:65:94:15:2b:53:de:59:84:b7:
         e0:a0:04:6d:ea:10:33:00:ba:9d:a9:ff:f1:86:d2:fb:02:32:
         14:c3:80:cd:44:f1:92:aa:28:b0:6f:15:4a:c7:65:a4:b9:b1:
         74:8c:11:06:3b:b1:c9:af:76:52:d8:1e:c4:4c:a1:e3:5e:24:
         7a:7a:44:25:46:9d:fc:5d:15:bd:0b:e1:17:48:e0:fb:19:a2:
         f3:ae:c5:ae:af:06:4f:38:87:ae:10:b0:c0:51:ea:4d:19:aa:
         30:d9:a3:15:38:f2:2f:d3:9c:bd:5a:bd:9c:75:e7:20:24:a9:
         e8:e9:5a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:10:17 2024 by rpki-client on console-fra.rpki-client.org