Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/61891448-5f55-308e-a979-8cd12abda79a.roa
File:                     61891448-5f55-308e-a979-8cd12abda79a.roa (raw, json)
Hash identifier:          2kWC63LopvFKt8rbTVYsAIf67ueZTzFURRnLikFspOc=
Subject key identifier:   7A:72:DC:07:B8:3D:23:84:83:DA:6C:7E:0D:32:5F:5F:14:98:88:58
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845A15E095DD65A8C65F8A06BE0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/61891448-5f55-308e-a979-8cd12abda79a.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     62240
IP address blocks:        166.1.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:09:5d:d6:5a:8c:65:f8:a0:6b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=7a2f92cc-138d-4930-9e58-7cb95bf23dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:16:d2:46:ac:19:4d:68:02:92:ac:10:cb:5e:
                    73:d0:23:f5:fa:79:4d:0e:71:e3:af:eb:e4:93:89:
                    d9:eb:eb:f3:f9:c9:a8:4d:bf:54:3f:96:ca:c5:26:
                    7d:b0:13:f7:1e:53:91:29:b3:63:e0:51:72:b6:f0:
                    64:41:e5:a1:92:8c:93:a1:45:60:73:df:3b:ff:0c:
                    05:98:c4:6b:ed:b8:4b:9d:1d:ce:d3:f0:2f:bc:f4:
                    3b:cf:01:a6:34:e1:e8:dd:a6:26:ce:e7:51:08:31:
                    a3:33:7b:eb:35:00:f7:72:e5:10:d7:00:d9:c2:7f:
                    e0:13:41:48:af:19:96:88:14:fb:a2:76:5b:c0:55:
                    9f:3f:55:4c:f0:8a:5b:d8:12:cc:53:78:0f:09:2d:
                    e7:4b:e2:32:b7:de:58:79:06:1c:3b:58:89:49:cf:
                    16:52:b6:50:c2:ad:89:24:ed:d5:4c:73:d0:9d:f8:
                    06:36:34:d3:86:8b:a3:94:92:39:88:66:39:86:5f:
                    50:40:38:40:ed:11:6a:19:b2:b1:14:cc:df:69:fd:
                    2c:6e:bf:f7:8f:53:6f:9e:30:71:8a:11:dd:90:96:
                    a7:ea:41:bc:a4:81:fe:4f:59:46:91:77:94:60:0b:
                    1b:f0:44:44:44:77:1f:b6:14:12:7f:83:13:ef:76:
                    38:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:72:DC:07:B8:3D:23:84:83:DA:6C:7E:0D:32:5F:5F:14:98:88:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/61891448-5f55-308e-a979-8cd12abda79a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:fa:8a:dc:97:e2:01:3c:d4:77:72:ae:b9:46:97:91:c5:dc:
         81:50:71:be:1c:1d:56:ff:a4:8a:7d:15:d2:fe:32:0d:4a:ff:
         be:02:d6:ba:cb:fe:a5:79:81:b0:f6:6e:69:88:d3:13:e2:32:
         f9:4b:a2:4b:c1:07:17:52:aa:74:bb:05:6c:c2:0e:80:db:8a:
         ae:f2:29:77:72:54:2a:f2:50:32:fa:5a:ff:a3:b7:28:30:e6:
         1a:1d:bf:92:25:bd:d4:96:eb:87:00:8a:9d:f1:0e:62:05:a4:
         bb:b9:3d:5c:00:6f:f1:17:ef:2f:e9:68:52:c0:32:06:7f:fa:
         56:76:60:7a:2e:a0:58:e6:1e:2a:6d:82:7c:87:bc:53:df:68:
         9b:bf:a8:47:0b:a1:72:5b:8f:37:5f:7d:65:47:a7:53:d0:c4:
         2a:17:e3:a9:6c:38:56:aa:e2:5d:5a:fb:e5:50:3a:8f:f6:4e:
         6d:e6:0c:20:cb:0b:8d:7d:a0:15:3d:20:af:0a:47:25:d3:b4:
         13:c3:84:16:4a:43:9d:38:1c:29:c5:e9:a0:fa:b5:dc:4b:25:
         4a:08:a3:2c:25:34:4f:a1:a5:6a:f9:00:5b:fd:7e:3c:06:ab:
         61:21:a9:ce:c5:f0:d0:04:d1:93:e1:2c:29:a3:4e:bc:38:fa:
         24:66:b4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:32:21 2024 by rpki-client on console-ams.rpki-client.org