Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d781de4-1c8c-3956-9cfe-7222f660fecd.roa
File:                     3d781de4-1c8c-3956-9cfe-7222f660fecd.roa (raw, json)
Hash identifier:          PCkFaK8PBv9/6N/2WoLyr+e5N+CP6QxgsFiR+avgwT0=
Subject key identifier:   7E:CF:7E:7E:52:94:E4:94:94:86:81:DE:0E:12:36:13:E5:BB:E0:12
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845B7B37DA85BDA3C7084DD7490
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d781de4-1c8c-3956-9cfe-7222f660fecd.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     9009
IP address blocks:        166.0.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:7d:a8:5b:da:3c:70:84:dd:74:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=da81aa1a-bddf-49ab-baa7-de2e40819e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ff:af:f7:ad:33:92:3a:44:2a:51:b1:87:ba:
                    b1:3c:87:ec:83:bf:61:91:1a:a7:94:e8:01:12:2a:
                    6a:6f:6b:31:54:be:ac:62:b0:37:2e:ae:32:f1:5d:
                    38:92:ce:24:72:d7:5f:79:cb:5b:2a:6c:39:c3:96:
                    1a:df:ac:e6:e2:88:f6:71:6e:f1:22:b3:0a:ce:97:
                    d7:66:45:98:f9:2e:91:35:db:39:f5:97:30:c8:35:
                    78:f8:6f:25:d3:e9:5e:7f:e5:10:c4:b8:2b:67:ae:
                    49:8f:23:c3:9d:74:e4:e4:6a:e8:ff:70:ab:d5:bd:
                    f7:d6:02:71:76:e7:5c:58:8d:3f:d1:d3:cc:74:af:
                    46:6b:45:53:0a:8c:0c:09:9f:1c:1e:b1:d3:e3:af:
                    85:f4:f3:21:f1:47:1b:d7:27:e8:fb:4a:58:91:61:
                    9c:bf:9a:0d:66:25:d9:ff:98:6e:da:69:07:68:bb:
                    e6:75:93:79:99:db:32:3c:fc:9a:39:82:e0:f1:1d:
                    c5:1c:4d:d1:db:57:39:61:dc:28:54:0f:56:60:a3:
                    1b:ff:9f:da:d6:e8:29:43:f0:4b:c0:bf:0e:8b:a3:
                    76:5c:80:31:78:f7:12:f4:76:42:8e:cd:54:a9:29:
                    01:bf:e8:a8:3f:09:07:11:22:fc:20:92:6d:7e:83:
                    07:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CF:7E:7E:52:94:E4:94:94:86:81:DE:0E:12:36:13:E5:BB:E0:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d781de4-1c8c-3956-9cfe-7222f660fecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:27:26:4f:04:01:42:b8:0a:db:02:c9:dc:be:e6:c5:21:9e:
         63:f9:5c:e4:71:a2:90:f5:ab:95:1f:bd:e7:81:6d:e9:a3:b8:
         57:a2:36:15:aa:bf:10:25:c7:05:91:e4:6f:40:37:01:dd:5a:
         c6:58:49:91:73:7e:41:05:71:6e:f6:17:39:1a:c7:7d:ab:74:
         e2:c5:08:d7:e3:11:43:37:01:7f:f1:cf:44:d7:2a:f7:ef:fe:
         21:61:3a:08:a3:97:84:5f:5a:45:77:93:f3:14:c1:11:1b:09:
         e7:cb:a7:a3:58:ac:7a:cb:1a:a0:12:ab:0d:1f:f8:8e:12:22:
         f9:5b:61:d4:bc:50:49:8e:93:79:a4:81:54:8d:2d:10:3c:80:
         86:03:6f:e5:10:72:e5:85:0a:03:bd:a9:02:bf:53:93:99:40:
         be:91:80:2a:0c:2e:85:91:fb:be:d3:f2:ad:7c:52:ab:a8:52:
         74:e3:8a:4b:dc:57:80:8d:ea:9e:f0:dd:2e:64:38:39:e9:14:
         d0:1f:60:a4:ba:a7:88:36:5e:f6:b9:1a:b4:9e:a6:79:97:f7:
         16:6e:ad:16:41:46:6c:8b:81:17:f0:6c:a6:07:ec:60:ac:90:
         57:60:ed:7d:fe:d3:41:67:73:ac:d3:cf:09:43:23:cb:07:eb:
         7c:80:17:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:58:54 2024 by rpki-client on console-ams.rpki-client.org