Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5bab609d-416a-3e94-acc8-e9f94ae5256b.roa
File:                     5bab609d-416a-3e94-acc8-e9f94ae5256b.roa (raw, json)
Hash identifier:          4huliesGfFLCKI5Nx6Dc+uv9//gg/0J3cFHKb52t0IY=
Subject key identifier:   1F:85:E1:F7:15:63:FE:EC:D7:22:1C:4B:C1:5C:35:66:AE:25:3F:3C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584832F03F02377721162499BB80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5bab609d-416a-3e94-acc8-e9f94ae5256b.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        166.0.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:3f:02:37:77:21:16:24:99:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=21999d4d-e873-453e-bb9c-db77969b54ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c8:e9:e6:d6:ec:5f:3a:84:0a:66:49:8e:d6:
                    e3:1b:b7:14:23:13:a8:64:56:44:50:04:ed:8b:e3:
                    ba:84:96:bc:50:7a:cf:2d:5a:43:14:33:7d:4e:f6:
                    52:1d:16:35:a7:cd:cd:b6:13:57:ca:0a:ca:e3:3a:
                    8d:e7:ff:6b:cd:7a:da:19:78:71:e3:a9:7f:ff:c9:
                    0d:89:e4:7c:44:64:63:c4:74:4b:6e:5e:eb:6b:30:
                    0b:92:cc:ab:ef:ea:30:bc:1c:eb:10:d7:94:60:01:
                    bb:0c:b8:cd:84:17:b8:5a:65:42:da:9f:b9:13:66:
                    fa:a9:0f:ba:d4:26:f9:37:b4:85:7c:11:d6:c7:7b:
                    ab:1b:5f:be:a7:67:1e:80:eb:44:3f:d1:7f:9a:51:
                    fd:4a:0b:09:60:79:f3:da:fe:cf:2d:d8:e4:96:b8:
                    c8:bc:7e:dd:65:f4:b6:3a:5b:34:98:0a:61:0d:3b:
                    49:de:32:7b:53:b7:66:29:66:84:20:e5:6e:4b:a1:
                    72:33:4e:55:fc:7a:d6:b4:98:17:2a:5a:1e:45:1f:
                    07:63:d3:f1:23:85:5e:91:63:e3:23:75:8e:39:6a:
                    42:20:25:ff:c8:f5:1e:77:23:55:2c:d7:79:b6:cd:
                    b0:5d:22:26:02:0b:92:48:04:26:0b:80:58:79:52:
                    ac:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:85:E1:F7:15:63:FE:EC:D7:22:1C:4B:C1:5C:35:66:AE:25:3F:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5bab609d-416a-3e94-acc8-e9f94ae5256b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:b2:05:84:75:be:9f:4e:7b:e9:2e:d2:59:3d:c3:9a:a1:7d:
         48:a1:86:fe:c2:2d:a0:f0:73:08:28:83:23:84:a4:41:3d:5f:
         e8:fc:47:aa:b4:19:b8:c6:16:e0:a6:f9:ba:ff:bd:8e:2e:2d:
         9c:66:0e:76:7c:85:f1:84:8c:e1:d9:4c:eb:92:0d:37:6d:3c:
         f3:b8:2d:cb:8f:b0:f8:42:33:00:24:df:a4:fa:a5:e5:15:4c:
         be:5d:17:6c:91:1a:7a:2d:00:ae:e3:00:04:bb:63:28:a8:f9:
         c7:b4:ae:10:58:ba:91:0f:f7:b6:1a:fd:48:87:f5:01:86:04:
         91:c2:d7:ca:2f:71:5f:94:4a:3c:ff:6f:68:d1:7e:c1:c4:15:
         3b:69:0c:03:ce:7e:ea:47:88:2e:2a:bb:9f:4d:5f:8a:ed:b6:
         ee:7f:a7:d1:06:97:f7:96:39:fb:69:45:53:4a:e6:33:d6:33:
         20:be:73:65:1b:a4:e0:95:09:61:a2:43:7e:9c:89:b1:53:23:
         67:65:29:a8:36:c2:e4:71:cb:95:d2:73:6e:bc:37:f7:70:93:
         77:c4:c8:7f:e0:84:7b:8e:0f:a0:12:b8:cf:5b:ff:78:e0:53:
         09:3d:36:5e:2b:78:69:6b:c9:da:67:cd:3a:f0:7b:de:f1:62:
         d9:13:79:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:16 2025 by rpki-client