Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/46f6a2f4-325f-33da-b223-08db1a1149c1.roa
File:                     46f6a2f4-325f-33da-b223-08db1a1149c1.roa (raw, json)
Hash identifier:          oEhuPjUhWWPyBj/Krm4Zb8vWqb0D7mOwY2mzNi+a4Ic=
Subject key identifier:   45:4C:BD:8C:97:F1:A1:C2:AA:80:51:8A:A0:93:FE:47:32:99:80:70
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847E35F6CE8426BD1AF136CD440
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/46f6a2f4-325f-33da-b223-08db1a1149c1.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     211440
IP address blocks:        166.0.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:6c:e8:42:6b:d1:af:13:6c:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=75f59b49-098d-4c97-b186-e3a409779d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:90:97:4e:70:dd:8b:37:90:ed:89:29:88:74:
                    76:a9:a5:3d:c6:fd:18:6a:10:53:44:4d:51:1b:b6:
                    b0:40:a8:d5:6f:ac:a7:41:b5:f6:d1:9a:d0:63:0d:
                    45:eb:68:58:4b:52:c1:d8:a5:63:90:fc:22:74:ed:
                    89:8e:92:0c:88:5c:17:bd:19:25:e5:26:da:72:f8:
                    f4:4e:15:b5:7a:35:63:b2:eb:0a:ac:98:28:ec:99:
                    8a:ef:66:e1:ec:27:d0:74:13:72:32:00:de:1f:ca:
                    fe:99:d7:c2:1c:ea:b6:cb:00:6b:c5:d9:71:7f:0e:
                    41:23:a5:21:2f:4b:89:cf:06:45:09:44:1b:3e:39:
                    90:34:c3:26:df:0d:ed:02:58:d4:ce:e4:e2:fb:07:
                    14:f7:f9:10:19:1d:78:48:ad:04:b0:6a:23:68:6a:
                    c9:ee:3f:d5:4d:37:ce:3a:7c:a1:2d:9c:8a:3a:5d:
                    1c:15:f4:57:47:c0:0e:63:96:e2:38:48:80:37:b0:
                    a9:c7:bd:dc:65:12:98:f6:b1:4f:5b:47:2d:39:e8:
                    f1:c5:4a:f5:0b:b6:de:b6:ca:4c:ac:b3:d4:1d:37:
                    c7:09:ec:02:cf:5f:ad:00:7d:4c:35:fd:81:b7:e7:
                    64:50:1e:2a:93:1e:e6:25:9a:c7:8b:55:5e:1b:a6:
                    c9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4C:BD:8C:97:F1:A1:C2:AA:80:51:8A:A0:93:FE:47:32:99:80:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/46f6a2f4-325f-33da-b223-08db1a1149c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:87:b7:8c:df:82:83:5f:8d:ee:d4:f3:f5:76:18:5f:e4:c2:
         1e:5c:5f:d3:bf:77:0b:79:64:2e:3f:40:5f:9a:35:d5:3b:2a:
         f5:6b:c9:e8:25:3e:1a:03:fd:77:d0:3b:4a:f3:26:55:29:f9:
         b5:f4:24:0e:06:b8:a4:75:fc:bc:52:f5:b8:8f:8a:09:81:50:
         f3:77:be:ed:ca:59:56:dd:85:ff:43:f9:f1:b4:87:60:82:ec:
         5a:1d:7d:e8:ee:20:88:8c:f8:1d:4e:14:d3:01:7a:51:bf:ad:
         7a:fa:e2:db:92:3c:84:08:9e:17:60:d6:1c:da:8d:25:21:4c:
         e1:d4:c7:2c:65:88:b4:bf:1a:cc:79:6e:6a:b0:76:bc:96:3f:
         85:2a:4c:f6:92:0f:14:e5:b4:4b:e9:7e:08:6e:74:d5:1d:d1:
         a5:c1:49:e2:bd:8b:b6:2b:be:20:84:6d:da:01:48:1b:30:55:
         69:14:c0:49:24:97:87:96:00:74:25:a2:3a:fe:68:70:9c:79:
         e1:4a:ce:fc:0e:18:91:22:4b:fa:99:6c:b2:b5:af:87:3c:e1:
         4c:89:b2:7f:fd:fd:35:7f:cd:f0:89:43:49:c0:82:92:f7:c3:
         b2:b0:b5:6f:50:92:dd:4c:71:d5:ff:58:84:d3:3c:c7:51:b8:
         c9:46:c7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:40 2024 by rpki-client on console-ams.rpki-client.org