Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4e96b9b3-85f4-33a1-930a-b93f4ada033a.roa
File:                     4e96b9b3-85f4-33a1-930a-b93f4ada033a.roa (raw, json)
Hash identifier:          QTU2zK9bWKvyLu9Qq7se0wPM0f0xbdGC2m/bK67Skhc=
Subject key identifier:   C9:34:58:AB:FA:1E:25:25:69:39:0D:3D:8F:12:B3:05:80:F8:A0:8E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847EA9C143401CC3B5E78712D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4e96b9b3-85f4-33a1-930a-b93f4ada033a.roa
Signing time:             Mon 18 Nov 2024 04:13:35 +0000
ROA not before:           Mon 18 Nov 2024 04:13:35 +0000
ROA not after:            Sun 16 Feb 2025 04:13:35 +0000
asID:                     834
IP address blocks:        166.0.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ea:9c:14:34:01:cc:3b:5e:78:71:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 18 04:13:35 2024 GMT
            Not After : Feb 16 04:13:35 2025 GMT
        Subject: CN=33abb173-97df-4705-98af-2a8cc5082451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d0:2e:45:1c:18:ef:f1:27:64:a8:9f:80:59:
                    78:13:84:0d:1c:0e:91:54:a9:ef:da:33:ea:92:f3:
                    99:36:e9:c0:7d:70:5c:7c:c5:d5:0f:c6:f1:6c:d5:
                    f7:d0:05:22:5b:27:98:20:84:62:e3:ae:61:d6:0a:
                    e0:4a:38:6d:72:b0:97:61:38:1c:47:57:47:12:35:
                    6e:bb:42:a8:4a:23:05:89:fd:52:9a:96:27:6d:f5:
                    f4:4c:e4:5c:5b:38:8a:e4:11:ab:0b:14:3d:9e:16:
                    29:40:05:0e:94:b0:0a:0d:fb:5a:8d:fb:9d:8c:ee:
                    15:49:03:cf:ed:bf:18:fe:e5:92:f4:a4:d2:58:e9:
                    47:06:e9:01:03:41:b1:1e:20:83:4b:44:af:39:68:
                    a9:20:b7:0a:16:e8:a0:fc:08:a1:29:85:a2:69:7d:
                    ef:a4:99:3d:c9:43:a8:25:89:59:12:8e:e5:26:ee:
                    24:a7:9c:5e:fe:71:46:de:51:74:26:ca:be:b3:2e:
                    1f:f6:ba:59:98:ce:a6:51:86:49:66:96:a2:cd:d9:
                    18:7e:17:bf:7d:66:13:69:ae:c5:5f:70:1e:09:99:
                    12:01:26:39:25:39:81:a5:d1:47:da:c7:42:d2:93:
                    d4:c0:11:6d:4c:1f:fc:6a:0d:dd:21:35:89:63:67:
                    cf:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:34:58:AB:FA:1E:25:25:69:39:0D:3D:8F:12:B3:05:80:F8:A0:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4e96b9b3-85f4-33a1-930a-b93f4ada033a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:27:e1:8e:e5:85:62:f1:44:05:a9:57:c9:b7:2d:d2:4c:b5:
         e6:39:33:e6:a6:f8:8a:9f:2a:d4:b1:b3:b2:1b:e2:7d:6b:6d:
         01:45:e4:e1:35:3b:a5:94:1f:11:c5:c9:4a:4c:30:51:38:14:
         41:c4:4c:0a:b1:55:b1:d9:8a:b0:52:30:a9:58:dd:c6:e4:3c:
         19:ac:11:99:cd:24:03:07:61:a3:41:19:7f:4f:aa:b3:d0:5a:
         ce:e7:ce:ef:63:a5:78:c1:a5:95:fd:37:ff:a3:54:24:98:09:
         fc:6f:ab:cc:7f:53:d2:0d:3d:c8:22:a6:2e:7d:4d:a5:62:8b:
         43:2e:18:af:e5:64:df:d9:14:ba:47:5a:b2:d0:16:13:3e:74:
         81:ef:b7:77:6b:29:77:d3:69:4a:51:8d:88:46:ae:26:02:3a:
         5b:85:1b:9b:2a:37:01:80:02:9c:ff:8c:df:ca:fd:b2:c1:82:
         68:8a:61:e2:bd:81:53:01:0e:0a:85:be:b1:10:64:c7:fc:0f:
         61:07:82:97:c4:7e:ff:ab:2b:c4:e5:2a:26:c2:b9:d1:e8:84:
         04:9e:4c:14:c7:d6:b8:cc:26:40:27:ad:6f:91:f3:c6:77:13:
         3e:80:8d:32:72:07:4c:1d:7b:c0:17:e6:bc:fd:75:69:b8:00:
         9b:15:12:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:34:50 2024 by rpki-client on console-fra.rpki-client.org