Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4654830d-6096-317f-a65b-4cf46a3605e0.roa
File:                     4654830d-6096-317f-a65b-4cf46a3605e0.roa (raw, json)
Hash identifier:          0zGid4K5pzjkePXX2TFgfXWMn2VvTbmnDUbTWIoUDpA=
Subject key identifier:   FC:5B:7E:66:9F:5F:24:A3:41:7B:A7:7F:5F:17:8A:AC:A3:68:D2:16
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845726AD842DCDA263A6BDE5180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4654830d-6096-317f-a65b-4cf46a3605e0.roa
Signing time:             Fri 05 Apr 2024 17:23:30 +0000
ROA not before:           Fri 05 Apr 2024 17:23:30 +0000
ROA not after:            Thu 04 Jul 2024 17:23:30 +0000
asID:                     58061
IP address blocks:        166.1.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:72:6a:d8:42:dc:da:26:3a:6b:de:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  5 17:23:30 2024 GMT
            Not After : Jul  4 17:23:30 2024 GMT
        Subject: CN=e4088957-d91c-4404-8bce-c80836169adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dd:4b:c4:93:97:58:1f:0c:95:7d:75:11:8b:
                    aa:a3:b4:a2:d2:b1:e2:24:83:0d:5a:be:fe:31:09:
                    62:44:48:5b:ad:74:e4:1c:f7:1a:b2:9f:02:b7:94:
                    be:db:a9:67:87:83:16:68:9b:02:ff:24:4e:a9:bd:
                    e2:e2:5d:da:b8:d7:65:bc:6c:0c:62:d9:b2:82:d1:
                    78:a6:d0:15:ca:c1:d1:7b:0a:7e:01:26:80:d0:8c:
                    55:aa:60:8e:f1:3a:aa:c9:a8:53:46:d8:07:b3:4d:
                    90:4e:09:d1:48:92:1f:ef:7e:70:7f:eb:d7:ac:47:
                    9d:54:92:72:3c:d9:a4:3f:26:8c:e0:57:c5:cd:84:
                    31:c9:a9:62:76:38:ad:b9:49:e7:f3:4a:2c:97:3e:
                    07:23:a5:88:82:13:e8:a4:c3:91:53:d2:bf:de:0e:
                    2b:3c:02:15:37:aa:62:68:8c:76:0e:f5:b9:64:bd:
                    13:eb:8e:14:c9:c3:00:eb:25:0d:f8:17:b3:a7:94:
                    a5:de:54:9f:2a:fe:5c:79:f2:90:3f:95:9f:14:b7:
                    ad:b6:9a:e4:c5:e8:ca:06:d9:b4:8b:20:fb:5e:43:
                    71:62:27:f4:bf:bc:f8:04:82:8b:84:ee:4e:6d:8b:
                    7e:d5:10:d8:73:84:84:49:00:62:2d:81:35:84:f9:
                    66:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5B:7E:66:9F:5F:24:A3:41:7B:A7:7F:5F:17:8A:AC:A3:68:D2:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4654830d-6096-317f-a65b-4cf46a3605e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:8a:36:8d:04:2e:ea:d2:66:49:30:48:0b:c0:57:c5:cb:c2:
         b6:81:a3:c1:40:37:38:8e:29:95:30:df:da:3b:ac:4b:b5:60:
         7b:70:28:46:51:e5:22:64:13:87:8a:fd:1b:50:96:9f:d1:40:
         db:79:33:a8:53:cd:00:95:7a:ba:f8:fa:2a:8b:6e:3a:e4:24:
         3e:27:63:af:72:e4:9a:76:e1:be:df:e5:ed:ac:22:26:5e:13:
         3e:22:82:aa:b0:76:69:87:ae:e2:43:c2:8e:10:2d:cc:4a:1f:
         02:47:2e:da:1f:df:2c:d0:4d:67:24:d1:33:9a:97:b6:43:23:
         ef:06:f5:fa:9d:78:ea:86:07:9e:8c:97:6b:ac:3a:9e:88:5e:
         08:d8:5a:2d:b3:ae:a4:33:b6:85:e3:52:a5:74:ea:63:27:87:
         91:b7:df:da:b6:84:6f:44:b1:23:20:58:11:50:3c:2a:c5:10:
         ea:79:23:db:69:12:ee:ea:c6:d2:af:b2:a5:ac:9f:ba:ff:89:
         72:4c:34:7d:16:7c:a0:f2:6e:f1:ae:0f:09:5c:a8:05:ab:86:
         ac:f3:55:0e:ac:ce:67:d2:c2:21:62:3d:07:45:0b:65:b7:a1:
         6b:f6:35:cf:7a:03:af:96:d9:0e:8d:54:03:c8:2b:ed:0b:c4:
         c3:23:ec:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 21:45:36 2024 by rpki-client on console-fra.rpki-client.org