Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f11d603-f72d-321f-a89b-05a0bdf070cf.roa
File:                     3f11d603-f72d-321f-a89b-05a0bdf070cf.roa (raw, json)
Hash identifier:          CFIvbO+aacL9/ZcS8WiXJIobIqSd620p2W8E/2f+87o=
Subject key identifier:   85:C6:AD:6F:B7:C1:34:99:35:A3:8B:DD:EB:16:B3:08:EC:DF:1B:FB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845A15E090608EB4F686C6C7940
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f11d603-f72d-321f-a89b-05a0bdf070cf.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     62240
IP address blocks:        166.1.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:09:06:08:eb:4f:68:6c:6c:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=05586052-dc60-4dd4-b128-df0750cf2ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:aa:c9:6d:9d:00:50:93:f4:4f:d6:6e:09:88:
                    32:de:dc:1c:0f:b9:0e:ba:4c:7c:75:5f:bf:e0:96:
                    a1:49:ce:22:cb:9a:82:44:47:3d:e0:ea:02:6a:42:
                    e3:b9:c8:f1:4c:69:06:52:4b:01:eb:45:52:02:41:
                    70:1b:83:62:66:1e:bb:d5:20:d3:80:bd:bc:c8:69:
                    bc:ae:96:01:20:99:bd:b2:3f:01:52:6e:ed:9e:cc:
                    ad:f5:14:27:fa:d2:2e:9b:a5:7a:3f:a9:d8:b1:ac:
                    cc:29:17:f5:e1:d8:1e:e4:5b:1f:c2:6d:75:c9:4f:
                    4f:90:f7:f0:b7:e0:93:4d:7e:ad:f7:10:8d:78:28:
                    4e:33:44:c6:16:ff:41:86:5c:af:22:f7:2c:7b:9a:
                    ef:2a:7a:6a:72:57:02:86:c1:56:a2:56:6a:81:f8:
                    24:b8:e6:3c:e4:ad:43:eb:fa:ec:00:85:72:5e:b5:
                    c8:c0:86:6c:9e:01:4f:48:69:ae:e8:ae:de:55:b5:
                    8c:ed:fb:c5:13:68:e2:f7:97:2a:4f:cb:df:e3:9f:
                    20:55:6d:97:0b:fc:4a:8a:ba:cb:6f:fe:d3:1c:70:
                    60:db:65:d0:98:6b:d5:15:58:fa:06:42:22:4f:52:
                    e3:bb:e3:24:cb:3f:60:27:0c:fc:cf:df:b0:ed:7f:
                    e7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C6:AD:6F:B7:C1:34:99:35:A3:8B:DD:EB:16:B3:08:EC:DF:1B:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f11d603-f72d-321f-a89b-05a0bdf070cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:de:96:5b:7f:36:e2:77:0a:a9:3e:4a:0e:24:2e:8b:55:20:
         9a:06:e7:1d:9c:79:91:34:c2:b5:08:7c:60:d4:ec:d3:77:63:
         75:35:ca:d8:fc:f1:e7:55:c9:26:eb:8c:65:33:34:ad:9c:0e:
         ca:a7:50:f6:6f:cf:ef:d6:8d:3d:4b:ee:90:35:38:4c:cf:b0:
         df:ea:c8:76:31:c1:ef:64:10:17:26:5b:c5:85:e2:c9:7d:0c:
         54:c2:b2:cf:7d:72:5d:fe:e2:64:d7:9c:6b:70:a4:33:ca:7f:
         df:d1:02:93:a0:af:31:08:d6:b2:53:3d:50:3c:72:2a:13:f5:
         63:9b:60:42:96:19:95:bf:a9:58:11:2a:10:f7:7c:c6:be:35:
         f1:e9:95:e1:d8:30:08:af:61:ef:86:cf:32:7e:84:61:96:9f:
         c1:bd:33:f8:8a:92:74:23:10:86:9a:59:21:a8:85:94:0c:94:
         31:95:5d:07:72:5c:83:e6:fd:f2:9e:00:c4:8f:1d:f9:0e:cf:
         8d:93:76:e5:d4:83:de:bf:f1:0b:a2:c7:59:d8:bd:80:43:14:
         80:23:98:a6:b8:be:09:04:f2:2e:d9:81:84:7f:74:da:d3:ad:
         f5:b2:7f:d0:bf:1a:ba:1f:b9:7d:a6:d3:4c:de:e0:13:e2:a5:
         f1:8b:f5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:56:19 2024 by rpki-client on console-fra.rpki-client.org