Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3cce6d36-dd4f-39a4-aaf6-786185f487b2.roa
File:                     3cce6d36-dd4f-39a4-aaf6-786185f487b2.roa (raw, json)
Hash identifier:          NyA9z/J2NIlQJX9BjfL0brs4kyyC1CwyRqSGekfnj2A=
Subject key identifier:   E5:EE:2B:35:E4:C7:44:3D:0A:95:C8:B4:2F:41:FC:21:CB:62:EB:76
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847E094E327CA5F34D4F03A6E80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3cce6d36-dd4f-39a4-aaf6-786185f487b2.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     132335
IP address blocks:        166.0.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:e3:27:ca:5f:34:d4:f0:3a:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=28e0a3d3-85e4-4e4c-b757-ea2a61d57307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2c:77:fe:ef:a7:cb:aa:db:4a:01:a8:43:a9:
                    1c:4e:c1:32:51:94:d6:cf:4a:b2:3e:55:da:75:9a:
                    9a:09:e5:9b:5c:13:ef:8b:a6:08:e7:e1:68:26:6e:
                    2b:74:21:df:a0:ce:de:f3:fb:ff:33:bf:9e:1e:56:
                    22:45:4a:99:e5:e4:45:6a:b8:30:d8:f8:cb:2a:2d:
                    f1:f8:88:cf:1b:35:c0:56:28:44:ae:da:a8:8a:db:
                    39:5f:d1:d6:e8:af:ca:d0:b0:4d:a5:bf:ad:69:51:
                    e7:0d:09:06:d1:6c:62:09:8d:a7:b6:c3:85:81:5a:
                    85:96:59:85:a2:95:d7:b9:f6:fc:ea:52:18:40:93:
                    69:c1:f4:c6:ab:51:0f:45:c7:0d:46:1b:48:d7:49:
                    ba:39:f0:d4:94:7a:21:cd:d0:f6:03:b8:4c:c3:63:
                    60:94:75:70:59:f7:b5:83:74:ab:b9:14:4f:66:7b:
                    74:54:b4:86:d8:16:20:98:d4:d3:5c:2d:c1:74:8b:
                    17:ed:ce:51:46:3c:96:7a:0d:7b:f3:b6:36:d2:ca:
                    b8:18:f8:c6:dc:12:fc:98:b9:84:69:ea:11:10:5c:
                    b5:49:f7:83:55:69:ec:cc:0a:38:7e:5d:c5:23:a8:
                    55:49:ec:12:b3:1b:e9:6c:23:e7:0e:72:19:08:31:
                    25:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EE:2B:35:E4:C7:44:3D:0A:95:C8:B4:2F:41:FC:21:CB:62:EB:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3cce6d36-dd4f-39a4-aaf6-786185f487b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:37:d5:0d:63:0e:4e:22:e6:ec:14:db:e4:09:78:65:a4:a1:
         64:1b:6d:28:9f:5d:1b:68:f3:58:fa:16:a2:8f:a6:96:95:4e:
         b8:bc:67:26:a6:5d:20:96:fb:20:61:be:58:ac:2b:bd:13:91:
         4f:e1:5d:73:cb:89:e7:2d:df:fe:7e:b1:21:f5:14:e8:28:e5:
         ad:49:f1:1f:1c:b8:4b:a9:79:ee:9b:1d:a9:58:f2:da:79:1c:
         1a:e8:b2:51:39:48:de:a1:7e:4d:2c:f3:42:c2:5e:0f:33:ef:
         c9:51:12:a0:0c:76:52:c5:84:a5:31:63:da:89:97:f7:37:05:
         86:a1:f4:80:8b:52:8f:07:fe:bd:a4:f5:87:41:38:b7:5a:e4:
         96:5e:22:51:a0:c5:12:64:8e:06:47:a2:81:33:b1:0f:34:15:
         1b:eb:4d:6f:6f:61:82:4d:bf:54:7d:ca:a6:58:2a:6e:5a:83:
         a6:6b:ed:f6:68:5b:83:db:d8:d0:ac:e1:8e:91:71:b8:5a:dd:
         e0:5a:7e:65:31:08:b8:81:bd:31:bc:cf:32:2d:17:5b:1b:fa:
         77:58:88:37:9e:c3:17:a0:a9:f7:28:da:5d:00:ba:50:4f:0d:
         f3:aa:ca:5e:36:1e:44:d0:cb:a7:3a:31:6e:5c:1b:2c:f1:fe:
         f5:88:c8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:39 2024 by rpki-client on console-ams.rpki-client.org