Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/499d83bf-7287-3a46-86de-faf4b11263ae.roa
File:                     499d83bf-7287-3a46-86de-faf4b11263ae.roa (raw, json)
Hash identifier:          BII7Yk/BrlNJ+yQD7yhloMdckWWtYJt9rMrcrUTGUBs=
Subject key identifier:   94:76:EB:58:8B:3C:0A:55:EE:20:5B:6E:56:A3:6B:C7:38:39:CE:AE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845A15E097CC5CB4BC2463CDB00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/499d83bf-7287-3a46-86de-faf4b11263ae.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     62240
IP address blocks:        166.1.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:09:7c:c5:cb:4b:c2:46:3c:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=51958e8d-595b-4579-9ece-31c283ffca8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:26:9f:5b:56:3f:54:b1:77:36:63:02:68:8b:
                    5e:25:f4:cf:b7:c6:95:c3:ec:e9:40:fc:10:6b:1a:
                    01:62:f7:99:f3:26:13:ea:26:2c:e3:5b:76:1d:f0:
                    7c:f9:d0:a9:4a:73:cf:15:55:c3:aa:a4:39:b8:77:
                    7d:1b:5e:f1:37:0a:1b:9b:f1:fe:30:b6:6e:03:2a:
                    e0:ad:c2:e1:4d:8b:db:95:92:fe:98:d0:60:3b:1a:
                    80:34:02:78:f6:08:56:38:a3:c1:25:b9:91:0e:ac:
                    30:75:b8:72:e5:f3:c7:3a:73:93:2e:a4:37:82:a7:
                    8a:04:01:0b:77:2d:62:d7:ca:2b:a7:30:5c:ec:70:
                    18:ee:c4:90:5c:74:99:f7:3d:1b:10:27:0a:08:17:
                    a5:91:a8:b1:66:84:1f:25:78:64:33:3b:50:4d:3f:
                    12:7f:56:07:a3:5e:20:c3:5f:71:dd:79:c2:9b:7e:
                    a2:f1:10:0e:6f:f5:83:08:5e:bb:8c:65:0c:b7:e6:
                    b4:34:b7:0e:41:1b:9c:4c:ae:f2:25:91:85:35:89:
                    0f:d5:11:33:5b:01:2b:b9:61:f9:b4:6c:cf:67:da:
                    01:13:aa:39:85:32:0a:f8:38:6b:06:79:90:1f:84:
                    e9:a5:70:fe:91:cb:86:0f:d2:bd:6d:5a:98:49:60:
                    ff:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:76:EB:58:8B:3C:0A:55:EE:20:5B:6E:56:A3:6B:C7:38:39:CE:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/499d83bf-7287-3a46-86de-faf4b11263ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:2a:eb:cd:74:5b:c7:fd:07:93:b0:e7:64:dc:51:b5:ab:d0:
         b9:6e:49:bf:ff:8b:9b:b5:a4:29:4c:87:e1:fa:1c:9c:98:90:
         34:de:ae:fd:67:74:df:63:b0:1a:83:ad:39:10:24:28:2c:15:
         28:63:c0:c8:f3:47:eb:f7:67:47:9c:6a:f9:08:c5:2b:f3:04:
         0b:eb:da:a3:71:aa:4d:29:f1:1a:5f:db:cf:cb:49:43:f6:34:
         89:57:51:35:b5:54:81:24:a8:1f:f4:b4:68:8f:45:65:9e:46:
         00:14:a1:56:9a:3d:14:ac:28:9e:e6:fd:c1:0d:e8:c1:a5:4f:
         49:03:00:d6:e8:8e:d7:bf:26:9b:cf:5c:36:c7:5e:dc:17:c1:
         73:78:67:95:e5:cc:09:53:7c:55:1d:8f:92:ac:d6:22:cb:22:
         85:d9:34:c1:32:b6:ed:67:6a:eb:ba:e9:bf:a8:5b:08:b8:8a:
         f4:5f:b0:ec:c1:83:18:36:07:4b:78:a0:87:c5:6c:dd:c1:81:
         c4:63:36:a4:9c:1d:22:cc:ea:c9:6a:e9:a3:b5:3a:25:2e:ac:
         30:2e:11:7a:df:74:82:80:94:4f:5a:5a:e6:8c:72:90:8d:cf:
         ac:ff:b4:bf:e8:fe:df:95:54:88:ad:c3:09:46:5c:5f:66:c7:
         27:ff:5a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:06:27 2024 by rpki-client on console-ams.rpki-client.org