Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/46f6a2f4-325f-33da-b223-08db1a1149c1.roa
File:                     46f6a2f4-325f-33da-b223-08db1a1149c1.roa (raw, json)
Hash identifier:          4QzQJMr5PGvuVkvNZY8RRjsupm7U3Aks2k+Tr8DJh0w=
Subject key identifier:   9D:AF:3C:1E:46:EF:10:8E:AE:D6:69:0F:22:22:88:DC:E4:68:B2:B6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858454272BFA8F787E0554B726E20
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/46f6a2f4-325f-33da-b223-08db1a1149c1.roa
Signing time:             Tue 19 Mar 2024 13:00:34 +0000
ROA not before:           Tue 19 Mar 2024 13:00:34 +0000
ROA not after:            Mon 17 Jun 2024 13:00:34 +0000
asID:                     211440
IP address blocks:        166.0.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:42:72:bf:a8:f7:87:e0:55:4b:72:6e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 19 13:00:34 2024 GMT
            Not After : Jun 17 13:00:34 2024 GMT
        Subject: CN=bdfdcc2b-f240-4bd0-b571-a454aaf58471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3a:22:92:21:b1:5b:9c:4a:9a:44:5d:c5:b0:
                    e7:41:00:bd:e6:3d:23:5c:d1:16:1a:6d:6f:d3:84:
                    30:10:7c:3f:95:49:8b:41:a4:6a:7d:49:2b:15:74:
                    12:32:07:4d:21:e5:a0:cb:06:07:2b:e5:8c:4b:49:
                    1b:bb:65:bf:be:7b:ff:f9:1a:fa:df:4e:a6:a9:c4:
                    e2:6e:00:36:74:94:8c:77:f0:19:32:5f:7a:cc:9f:
                    51:08:b9:fe:58:19:6c:79:b4:0b:68:8b:4b:04:95:
                    fe:65:2d:c7:b7:c0:50:8b:60:ee:83:31:67:c2:35:
                    7b:7e:6a:b3:ae:3e:ab:02:0b:c1:4a:d5:ca:fd:62:
                    cd:af:8f:ce:c1:8f:4d:35:32:04:ef:94:2a:86:43:
                    18:8a:fe:eb:8a:66:cb:d7:29:20:ca:10:fc:17:2a:
                    8e:34:3b:b7:95:fe:ac:27:ea:61:5e:42:9c:aa:f1:
                    a1:2a:f1:02:ee:18:74:2f:03:e1:7e:21:1b:4a:b5:
                    69:9f:f9:d2:08:8d:59:c9:df:d4:7b:25:74:8b:a7:
                    bb:03:39:dc:36:80:16:c3:77:13:a5:40:36:cd:2a:
                    19:02:d9:c2:bd:28:dc:e7:0a:2a:6b:6b:fa:b8:3c:
                    bf:09:d0:2b:c9:e8:0b:39:73:5c:96:e8:6f:e9:58:
                    de:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AF:3C:1E:46:EF:10:8E:AE:D6:69:0F:22:22:88:DC:E4:68:B2:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/46f6a2f4-325f-33da-b223-08db1a1149c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:0c:6e:c5:88:bb:b9:57:77:8e:97:e2:31:0b:16:9d:fd:0c:
         07:42:57:87:3b:a0:49:e9:5a:c2:85:39:76:22:fe:98:d2:f1:
         64:37:e9:d6:7d:2c:d8:f4:50:40:c9:03:e4:68:e2:be:84:10:
         47:e3:f9:c9:c6:18:2d:d6:9f:b5:54:e8:85:09:e9:cf:77:b7:
         56:09:70:d8:df:e8:dc:12:49:4e:d7:e7:6a:70:2f:ef:41:97:
         d2:ab:ad:35:1e:71:e0:41:b1:db:eb:66:98:6b:0e:a1:b4:2b:
         a2:95:75:25:f5:2b:2c:e9:a0:7b:20:cd:1f:e1:df:3b:cd:21:
         aa:85:b9:40:0e:1c:36:bf:0b:c1:5d:66:c7:84:cf:c5:58:40:
         4f:9e:ef:64:b8:bc:b6:6f:03:98:0e:a9:bb:e2:65:e5:fa:af:
         fc:e3:38:55:50:df:25:47:25:ec:a2:39:c1:59:e9:23:e0:76:
         66:64:03:96:06:1c:10:5b:c3:1e:b0:75:50:e2:8b:ed:21:f6:
         70:56:29:0c:68:8e:02:f8:d7:60:9c:a3:f9:e9:09:fa:c3:f1:
         0d:a1:3b:59:02:64:bc:33:96:42:90:73:45:81:c8:94:1d:6e:
         ee:3d:4a:ff:5e:f0:fc:1a:c9:30:d7:51:db:fa:73:4f:38:c5:
         fb:2a:fa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 21:45:36 2024 by rpki-client on console-fra.rpki-client.org