Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3e6d894a-7cc8-30f4-9f89-23f3839b8b29.roa
File:                     3e6d894a-7cc8-30f4-9f89-23f3839b8b29.roa (raw, json)
Hash identifier:          fjwGVjr+0Lp2MfWPVuTCAUrv4pmDNlljLpLbLrQZNH8=
Subject key identifier:   CE:3A:39:95:15:10:76:65:CE:C7:55:06:9C:85:7C:D3:50:2B:DD:37
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858457A4879523D3A1B4B9751FFE0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3e6d894a-7cc8-30f4-9f89-23f3839b8b29.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     399646
IP address blocks:        166.0.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:79:52:3d:3a:1b:4b:97:51:ff:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=7bf16390-3845-4cc1-8bb2-5d1d05f3463a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:21:7a:98:c6:a3:5b:c2:54:d5:6d:8d:43:69:
                    96:d9:7a:f1:b6:5f:62:38:01:83:cd:35:b9:21:55:
                    a3:57:72:ba:38:e8:3d:ee:d3:ca:64:4c:64:44:1f:
                    5c:dc:63:c6:35:3c:8c:e7:f7:cf:da:44:5d:96:0f:
                    ed:62:7b:d8:ee:99:c0:bd:bd:ea:19:28:f0:fb:e9:
                    0f:a7:eb:5d:2d:d7:bf:ba:d3:81:a2:b9:df:96:da:
                    bc:eb:de:e9:02:42:8a:71:7a:59:b1:50:bc:b5:ba:
                    b0:0e:81:ef:f1:7f:d2:54:1b:eb:90:5f:e6:0f:d6:
                    66:58:21:38:21:97:08:81:2b:7d:51:c1:96:f0:6e:
                    d7:79:e0:e6:35:65:76:70:cc:a5:4f:f9:ae:89:df:
                    0f:f7:ae:a8:10:5a:de:14:e5:1a:39:e4:c7:56:35:
                    e1:e9:40:2a:57:8a:7f:44:3c:de:70:a1:4d:82:ea:
                    d5:24:87:74:4d:c1:6f:e8:9d:5b:01:39:4e:86:20:
                    39:5c:8c:ea:0a:d9:e1:e1:12:fd:70:dd:32:6e:6f:
                    00:89:ce:c4:20:9a:99:a3:73:79:af:a7:9c:61:02:
                    b1:8e:af:01:35:af:7a:25:a1:28:12:ef:ab:5b:88:
                    7b:28:c5:d0:cc:db:be:d4:ca:72:d5:9f:f3:0d:d9:
                    51:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3A:39:95:15:10:76:65:CE:C7:55:06:9C:85:7C:D3:50:2B:DD:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3e6d894a-7cc8-30f4-9f89-23f3839b8b29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:e5:aa:ae:2c:8e:5c:54:a4:97:0a:b4:35:35:db:d4:8f:bd:
         84:50:7d:6b:8c:7b:79:ab:ec:bb:ec:88:8e:d8:49:0b:36:c2:
         1d:dd:e7:0e:37:b0:01:25:a2:71:c1:e0:30:5c:64:01:f8:aa:
         ce:a5:10:33:30:d1:0d:8c:1e:2d:8b:e5:08:fe:7d:d7:13:57:
         c7:3c:16:c9:36:4a:8c:6a:c4:1d:eb:82:77:05:e8:73:96:8e:
         5d:21:87:20:0e:0b:c1:9e:f6:32:96:6f:7a:48:a9:87:79:55:
         0d:6d:67:6b:a4:34:ee:f9:bb:31:2f:d4:cd:e4:c6:a0:cd:c6:
         6b:b3:e9:e3:ba:9a:09:4e:7a:b0:35:56:94:1e:77:7d:38:31:
         6d:25:af:c1:17:8b:98:e6:0f:93:7b:49:b7:e0:45:86:8c:fd:
         b0:a0:d6:6f:4f:01:7e:01:f8:db:69:96:52:47:f5:96:fe:01:
         29:88:79:ae:eb:c2:d7:14:c7:c2:b4:67:a7:c3:6c:52:6c:bf:
         b2:8d:19:7f:4d:28:8c:7d:73:e0:9e:76:5b:bf:26:43:da:74:
         03:dc:28:cc:1d:78:93:40:7e:a6:5a:e1:b7:ee:7f:9d:16:35:
         1d:b2:7f:75:89:e8:b8:5a:be:3d:17:9d:b0:33:9a:3a:5f:22:
         85:99:47:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:55:46 2024 by rpki-client on console-fra.rpki-client.org