Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4aad17b8-991a-3330-8668-fb4cb79ab027.roa
File:                     4aad17b8-991a-3330-8668-fb4cb79ab027.roa (raw, json)
Hash identifier:          t4C0q+2Lz45pWh6+VcXJhJfw0s2j23JDoQFuBnhI1BQ=
Subject key identifier:   4E:1B:45:0B:E3:64:F9:E2:FA:BF:DF:E5:3F:02:16:A9:DF:F0:7F:88
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847F2BA3C76C7ACB382EBE21600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4aad17b8-991a-3330-8668-fb4cb79ab027.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     51847
IP address blocks:        166.0.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:3c:76:c7:ac:b3:82:eb:e2:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=b680d537-db29-4a1f-9417-341d3ea7223e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f8:d3:64:3f:4d:78:e3:5e:49:14:1e:f8:f7:
                    54:89:c8:7b:af:f5:d0:1a:e2:b7:e6:48:2b:fa:d3:
                    a1:16:22:90:bb:f0:74:b5:bc:ca:ff:29:7b:7c:10:
                    ec:28:86:cc:40:ea:88:8a:d6:46:01:2b:69:8e:ca:
                    24:1b:90:71:37:8b:10:4f:a5:e2:99:d4:83:37:c4:
                    6c:02:91:02:b0:79:23:a6:eb:3f:55:e0:1f:c5:33:
                    17:f5:eb:fe:05:0c:80:38:27:10:e1:fa:dc:37:f9:
                    85:c1:09:12:aa:1f:2b:bc:08:9c:d8:f4:a4:f4:b8:
                    41:07:88:d7:bb:4f:73:10:95:02:67:9a:54:b5:fe:
                    47:c4:bf:87:37:92:a2:20:d7:89:65:7c:59:cc:93:
                    21:ec:bc:69:eb:13:32:81:43:20:ab:46:f0:07:19:
                    67:c4:8d:28:09:9c:ca:a8:a3:cc:2e:dc:67:11:16:
                    a4:ef:54:64:db:7b:59:dd:53:59:76:98:61:42:f0:
                    58:48:f7:f1:ed:99:8f:1a:dd:4d:d5:0a:19:fd:95:
                    e0:10:51:43:ba:ae:df:be:5a:34:ff:d1:30:f1:48:
                    c2:d2:b9:6e:d7:fd:1f:07:62:58:eb:e6:f8:3f:37:
                    93:b2:36:ab:2b:e5:72:a1:b7:f9:ec:7a:05:88:15:
                    8b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1B:45:0B:E3:64:F9:E2:FA:BF:DF:E5:3F:02:16:A9:DF:F0:7F:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4aad17b8-991a-3330-8668-fb4cb79ab027.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:4b:c7:b5:7a:b4:a4:57:4c:bc:d6:cc:b5:8f:92:1d:f3:09:
         32:05:ca:73:7c:cc:43:bd:cc:b7:ef:2d:47:d0:76:11:e1:5e:
         d0:e2:02:23:ff:99:38:89:10:4e:94:d5:70:1c:f0:fa:a4:30:
         35:95:74:4a:6c:c5:b2:1f:9c:a8:af:92:95:51:20:4c:20:a2:
         b4:f6:09:53:ab:79:45:16:59:52:61:b9:aa:9f:3f:90:63:9e:
         de:93:60:09:78:29:fb:cb:27:1d:bd:ea:cd:43:dd:2e:a2:86:
         6e:d2:6b:7f:62:7e:5f:10:17:1d:08:ea:c7:b7:a5:31:45:0b:
         08:96:91:d3:0e:c7:cc:8d:4b:bd:4e:66:a6:08:55:1a:84:f3:
         d2:7d:86:3c:f2:6f:7e:30:42:6d:9c:f3:58:b3:e9:17:18:5a:
         86:4f:78:fc:30:9e:1f:fb:32:63:d1:83:6c:84:37:88:1a:66:
         f1:16:a0:53:8b:79:46:26:1a:d1:aa:01:84:cc:bc:40:79:75:
         c8:04:30:87:e8:64:06:51:55:49:b9:31:b8:97:a2:34:ec:e3:
         4f:39:55:b9:15:50:1b:f8:70:fc:88:91:34:91:ec:dd:e8:f7:
         fa:c9:fb:91:69:ce:78:1f:42:de:0d:1c:fa:dc:dd:a1:af:67:
         24:c8:ea:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:19 2024 by rpki-client on console-fra.rpki-client.org