Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4823bf29-773b-3b22-ba04-b89fd87ecdce.roa
File:                     4823bf29-773b-3b22-ba04-b89fd87ecdce.roa (raw, json)
Hash identifier:          P54TLyqHM0Qge+peB2x+sKlNBE8BVcwRQJjZDgEBYWE=
Subject key identifier:   A4:62:10:83:11:9F:46:79:E8:E1:7B:C3:A3:0D:34:B4:43:0C:CF:4E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858482F5925C55D0A929ECDA7B900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4823bf29-773b-3b22-ba04-b89fd87ecdce.roa
Signing time:             Thu 12 Dec 2024 19:09:30 +0000
ROA not before:           Thu 12 Dec 2024 19:09:30 +0000
ROA not after:            Wed 12 Mar 2025 18:09:30 +0000
asID:                     14315
IP address blocks:        166.0.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2f:59:25:c5:5d:0a:92:9e:cd:a7:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 12 19:09:30 2024 GMT
            Not After : Mar 12 18:09:30 2025 GMT
        Subject: CN=e6da9c71-95d1-4fb1-9291-140bf027ccba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:89:82:67:ff:7f:b2:ca:a8:bf:be:6a:91:68:
                    52:03:6b:58:4b:f8:08:95:3a:b1:a7:b3:95:20:34:
                    aa:81:9c:96:da:43:41:45:c1:49:36:e8:74:f5:92:
                    65:40:b2:14:0e:dd:b9:bd:53:81:d6:b2:13:4b:97:
                    2f:5d:a5:0a:ee:3a:b9:cb:a7:59:ef:79:d3:04:a8:
                    2b:03:5e:ee:69:5c:ac:66:58:76:a7:3a:bc:74:9f:
                    f6:a1:6e:c3:b2:ee:4a:9d:17:47:ab:9b:e5:42:f2:
                    5c:7a:3c:e3:30:e8:01:38:0b:95:f4:97:dd:79:f2:
                    7c:17:58:2c:7d:80:fc:14:4a:f8:15:e3:bf:e2:59:
                    0b:bc:cc:49:3d:22:f9:dc:61:fe:d2:da:a3:78:38:
                    27:49:8f:c1:af:a5:b8:b8:46:2c:c9:c0:39:f7:af:
                    e6:7a:53:32:54:b8:61:2e:19:51:e6:f9:12:b2:c3:
                    1d:19:a7:59:af:76:67:d9:15:79:42:64:47:42:d4:
                    46:71:cf:75:f6:b3:96:9e:c9:46:02:e1:92:f0:54:
                    a9:37:7a:de:d2:c8:8a:55:1d:ad:6e:e3:f0:93:18:
                    2b:96:b3:90:87:4b:6a:13:a0:40:e4:97:41:b2:a1:
                    90:d8:fc:b5:9e:2a:b0:d0:65:be:cd:20:b9:6a:42:
                    c2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:62:10:83:11:9F:46:79:E8:E1:7B:C3:A3:0D:34:B4:43:0C:CF:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4823bf29-773b-3b22-ba04-b89fd87ecdce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:4c:65:49:12:9b:93:f5:e9:c2:94:30:32:f6:5d:cb:cf:f1:
         6f:6f:33:75:84:7d:d5:12:a7:5d:49:28:81:54:ff:22:42:d3:
         40:eb:74:0b:df:04:6c:d6:8a:a0:b2:a9:6c:2f:0f:3c:3f:5c:
         ef:b3:f9:2e:8a:48:b6:a4:a1:47:93:41:15:98:8d:2f:46:e0:
         36:74:33:04:37:a1:3e:48:af:ae:a0:48:7d:65:f5:7d:5e:f8:
         4b:3a:2b:2a:da:7d:bc:09:09:e6:1f:25:be:a5:a2:f3:73:ae:
         3f:48:f5:be:be:ae:65:fc:45:5f:3c:ee:3f:76:ff:a2:7e:e3:
         07:dd:31:7b:5e:d8:43:fc:18:16:92:8a:fa:02:77:1d:fa:ac:
         45:0b:42:15:7d:60:f3:3e:8c:35:2a:36:f7:c3:98:5f:22:56:
         ff:e8:9a:9a:71:bc:e9:0e:82:48:92:4e:3c:af:5d:7c:0e:ae:
         dd:3e:29:4b:bd:57:38:1d:e1:6a:ac:b9:29:56:9c:1c:21:98:
         a8:4c:b3:f6:f0:f4:c6:24:16:00:eb:68:d6:46:d2:fc:80:fa:
         e8:ad:a1:1a:f6:16:ed:e3:50:6b:54:d8:4d:7f:1d:b7:dd:ca:
         07:9f:73:7e:68:27:18:83:ad:18:85:78:88:7b:39:50:45:22:
         57:85:32:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:55 2025 by rpki-client