Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3a7f7504-3f0b-30df-9dc0-41dfad64da6d.roa
File:                     3a7f7504-3f0b-30df-9dc0-41dfad64da6d.roa (raw, json)
Hash identifier:          188U79nP0ArFLK20wQqCAayrUCOtvTgD23SDBZkP8z8=
Subject key identifier:   4C:94:91:90:32:CC:8B:9E:2F:A9:7B:CD:B0:D8:09:97:F4:7E:73:DC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858455658A72329F20F61E436B340
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3a7f7504-3f0b-30df-9dc0-41dfad64da6d.roa
Signing time:             Tue 26 Mar 2024 16:04:13 +0000
ROA not before:           Tue 26 Mar 2024 16:04:13 +0000
ROA not after:            Mon 24 Jun 2024 16:04:13 +0000
asID:                     58061
IP address blocks:        166.1.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:58:a7:23:29:f2:0f:61:e4:36:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 26 16:04:13 2024 GMT
            Not After : Jun 24 16:04:13 2024 GMT
        Subject: CN=6ef9dca5-f40d-4c1b-8a73-8aaaa209df7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3f:4c:b8:16:d3:d0:81:fc:a3:4f:ca:ae:9f:
                    27:18:fd:33:fd:f8:09:6e:2e:d4:07:9f:93:7b:97:
                    5f:81:9b:29:4c:6d:cb:cc:2a:2e:c6:cb:ff:7d:cb:
                    04:b4:8f:a7:b4:b4:1c:61:3d:53:8e:65:c7:60:de:
                    98:c3:7b:4e:6a:ef:bd:d9:8c:5f:79:88:85:e4:5e:
                    01:d1:b6:33:2d:37:c7:e2:ea:a3:04:a8:d3:29:6b:
                    05:f7:19:ba:b8:46:8d:c0:78:a5:a4:69:4f:ae:c8:
                    8c:ba:67:2e:77:f5:d7:38:ef:54:95:69:6f:97:24:
                    ee:54:50:5d:12:3c:30:ce:af:6c:2a:b9:d3:ea:d6:
                    e5:2b:6c:cd:14:68:8a:63:56:34:8b:77:1f:e9:07:
                    08:dd:cc:54:9f:43:d7:83:bd:8e:47:1c:10:16:df:
                    10:dc:0e:0d:5c:8f:6e:11:be:f5:13:7e:68:83:cf:
                    a1:ff:c0:b1:51:56:10:0e:9a:f5:3d:aa:fb:1d:08:
                    cf:f7:32:7d:48:4f:74:f5:76:30:08:90:48:63:03:
                    20:0c:b8:a1:34:67:d4:45:0c:5a:0c:00:b1:93:96:
                    0a:7a:d7:41:bd:7a:4f:d7:7d:7d:4d:a3:ea:7e:a1:
                    92:b7:66:6d:8c:5c:d9:db:da:cc:f4:1e:e8:e7:0a:
                    cd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:94:91:90:32:CC:8B:9E:2F:A9:7B:CD:B0:D8:09:97:F4:7E:73:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3a7f7504-3f0b-30df-9dc0-41dfad64da6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:f8:98:b0:14:07:aa:1a:02:8f:7e:bd:69:17:ad:d5:3f:4a:
         db:b6:96:59:f0:42:d2:a0:73:15:56:3d:9f:e1:73:90:d5:f8:
         ff:c4:69:92:b1:29:57:47:a3:f1:7e:1e:e9:0b:00:14:d5:c9:
         52:b1:7f:d4:74:55:70:86:06:7c:c1:bf:d8:90:6e:05:17:da:
         25:e0:ec:0b:fa:9e:7e:39:46:b1:bb:0c:ed:af:bb:f6:5f:69:
         e8:34:db:9d:9e:4d:78:fd:2b:e3:6b:d0:44:6a:af:74:dd:4d:
         db:7e:f5:73:96:3b:51:de:db:b2:d2:a3:eb:b8:74:7d:70:75:
         f6:07:be:6b:a7:ae:57:6b:f3:ce:34:4d:8a:22:46:dc:c6:12:
         38:a5:32:7e:4b:38:c9:3f:3c:a7:22:a2:e1:4c:5d:f6:8c:d7:
         07:17:2d:95:37:10:38:56:22:ee:8a:23:ca:8a:03:68:87:84:
         42:fa:b6:0e:7c:f3:e4:c5:1b:2c:b5:77:3e:c0:0b:d8:d1:9f:
         25:ea:60:33:94:33:88:0f:b2:d1:81:59:74:7d:e7:5b:2f:d5:
         a9:57:36:35:11:89:2d:ce:a5:24:e3:8b:91:f8:03:cf:24:af:
         52:2b:ee:b7:14:40:8e:7c:2c:1b:00:65:20:2a:90:74:03:73:
         5d:bb:5e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:32:18 2024 by rpki-client on console-ams.rpki-client.org