Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d40e9cf-1479-3b19-82e3-9229dff28f10.roa
File:                     3d40e9cf-1479-3b19-82e3-9229dff28f10.roa (raw, json)
Hash identifier:          Y4TJB5y1SXjnKQ0R8lHAjiNGc7+017BC0Ts6AIW4g4M=
Subject key identifier:   04:2C:5B:DE:63:ED:C3:87:9A:DD:73:F1:AD:E7:48:5E:B5:57:02:64
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847600B9BEE6D2EAED2C51A9B00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d40e9cf-1479-3b19-82e3-9229dff28f10.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     62240
IP address blocks:        166.1.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:9b:ee:6d:2e:ae:d2:c5:1a:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=53c31209-92ab-4c03-b804-2698902fb773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:10:15:4c:f5:4b:b3:29:64:80:1e:ec:d8:d7:
                    ee:36:49:8f:e5:09:c9:4d:c3:32:19:8d:4c:84:92:
                    32:b4:34:d2:c2:52:47:13:24:23:58:db:12:54:a8:
                    b3:46:17:78:98:d5:36:cd:30:3a:52:fc:78:ae:6f:
                    50:de:2c:70:bf:58:bf:ef:ec:00:6c:83:6a:ee:03:
                    9f:e1:9e:55:d8:1d:74:30:a8:56:bb:5d:ad:55:2c:
                    a6:12:f5:90:8c:20:d4:91:e4:a6:b2:eb:6f:81:28:
                    89:fd:ed:84:d2:5c:00:a0:a6:c2:61:25:4d:d6:c6:
                    a2:77:32:dd:36:a6:3f:c8:d0:66:9b:2a:2f:82:2b:
                    80:99:54:61:b9:34:21:8a:25:ed:95:a0:0e:d4:d8:
                    ed:7c:c3:3d:c3:95:26:85:db:44:da:29:03:52:0e:
                    69:39:91:3c:5d:ad:e4:ee:21:94:1b:94:55:4c:bb:
                    6f:98:88:fb:93:71:c9:4a:0f:f8:f3:3d:26:ce:b3:
                    97:14:ae:37:bb:0d:09:ea:f3:d5:70:d5:01:11:24:
                    0b:58:c8:1d:bd:6a:a8:29:d1:55:a9:d1:cb:89:78:
                    0f:6e:35:5b:0b:0a:e4:fa:b8:e4:89:b4:47:68:41:
                    d2:6b:32:47:66:29:32:97:9d:b3:17:e1:f0:19:c6:
                    d3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2C:5B:DE:63:ED:C3:87:9A:DD:73:F1:AD:E7:48:5E:B5:57:02:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d40e9cf-1479-3b19-82e3-9229dff28f10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:27:7e:f4:4d:ff:b1:51:61:84:a6:e8:a0:64:33:fe:02:d7:
         36:af:fe:be:12:14:a2:06:1f:cb:bc:bb:b8:b6:61:3b:52:6d:
         1f:9f:57:da:c7:e9:24:ef:32:25:ee:5b:15:59:7a:de:81:78:
         00:09:a7:76:0a:9e:78:1b:18:5e:86:9c:cc:e2:0b:ab:b7:ce:
         e1:44:e4:dd:07:e3:1f:d2:3d:c2:42:fa:f9:10:ce:fb:b8:22:
         31:6a:6c:1c:29:e9:10:f0:9e:e7:8d:b0:bd:c3:99:df:17:14:
         e0:e6:4b:c1:c7:d0:8c:bc:87:ac:68:31:70:94:5e:67:90:fc:
         0e:66:be:17:a8:4a:1e:ca:f1:6a:e7:09:82:dc:fc:80:16:a6:
         8f:a0:4f:e3:db:6b:35:36:f4:18:e7:d9:53:a4:77:e7:53:ae:
         e8:fe:18:44:95:72:33:9a:b0:c3:e3:cc:d7:5e:9f:10:bc:da:
         bd:19:5a:e3:d2:1c:c5:41:89:7a:95:e0:f0:a5:81:c4:e2:3a:
         8a:66:17:41:2c:09:d5:dc:e4:38:b0:7d:16:f8:42:62:41:5e:
         4f:b8:f4:8b:dc:e4:17:d1:8e:ad:0b:e4:56:4f:84:15:b1:4d:
         e7:2c:5d:78:d0:56:a1:34:de:42:4d:54:e7:f1:d9:ea:08:93:
         97:34:5e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:01 2024 by rpki-client on console-ams.rpki-client.org