Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/715428cd-51e8-3718-9fab-b7fe3ffcff32.roa
File:                     715428cd-51e8-3718-9fab-b7fe3ffcff32.roa (raw, json)
Hash identifier:          yixAYgPr9ciIw5FUgyajkWsKikrUn5eJ6LV0zwbC+Qo=
Subject key identifier:   59:B6:4C:CA:93:EC:3A:02:78:31:AC:7F:E3:F2:16:0E:9D:B5:A0:73
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858455658A5A61221747261827500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/715428cd-51e8-3718-9fab-b7fe3ffcff32.roa
Signing time:             Tue 26 Mar 2024 16:04:12 +0000
ROA not before:           Tue 26 Mar 2024 16:04:12 +0000
ROA not after:            Mon 24 Jun 2024 16:04:12 +0000
asID:                     58061
IP address blocks:        166.1.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:58:a5:a6:12:21:74:72:61:82:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 26 16:04:12 2024 GMT
            Not After : Jun 24 16:04:12 2024 GMT
        Subject: CN=90686f37-f1a5-4a0e-9adf-3ac061b3fac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:94:37:4b:37:a2:0d:c6:69:cf:95:3b:d0:76:
                    de:fb:c3:f3:4c:9e:ed:de:ff:4c:04:e0:7e:c0:55:
                    e7:8a:c0:85:19:4a:e1:82:ae:57:c7:f9:0f:13:7d:
                    6b:05:eb:aa:20:bf:3a:eb:14:c3:26:21:80:d5:77:
                    50:53:e0:81:55:4b:4a:5e:1a:5c:6b:66:51:8e:cd:
                    45:54:e4:b4:a7:bb:1e:03:1d:94:7f:6e:57:99:b5:
                    14:7a:38:1c:fa:e7:f7:dc:25:05:50:47:e2:8c:1a:
                    5a:7a:aa:e1:1c:d7:1b:7f:af:2c:94:05:35:26:52:
                    a3:3c:2b:95:ce:4a:05:5c:f9:25:1e:78:0b:a6:79:
                    d6:dc:54:a1:2b:3b:be:e0:f3:d4:a7:a0:b4:03:ee:
                    d1:2d:4f:0a:7c:5e:62:8a:0c:91:25:a8:11:0a:6c:
                    ec:c7:5f:07:f9:be:1a:34:40:db:a5:73:73:36:18:
                    da:72:4d:e2:4b:1a:1f:80:83:57:37:c0:4c:b1:43:
                    2f:73:d6:07:6e:e0:dc:81:16:f8:7d:a6:6b:8b:c4:
                    16:27:88:57:ee:a2:00:cf:fe:e4:ae:4b:4a:50:16:
                    cc:e9:19:fd:e5:f2:9d:56:ce:6a:9a:d8:76:bc:a3:
                    33:52:98:f1:b9:fb:b0:69:c5:84:00:a7:b4:52:02:
                    32:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B6:4C:CA:93:EC:3A:02:78:31:AC:7F:E3:F2:16:0E:9D:B5:A0:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/715428cd-51e8-3718-9fab-b7fe3ffcff32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:85:98:95:93:ec:d1:ce:54:53:dd:2a:5a:6e:96:9d:fd:aa:
         2d:31:55:80:0f:88:1d:64:63:61:52:a5:a3:97:5f:33:7f:43:
         9d:59:c8:e1:2e:5e:e6:15:75:3e:aa:a1:b3:c8:f4:61:04:18:
         01:75:f0:1d:69:3a:c4:b8:23:03:8c:ad:99:04:a7:f2:c5:0c:
         82:c3:46:81:53:38:66:cf:31:7a:cc:15:0d:94:3f:7b:21:88:
         fa:89:3a:96:b1:c7:b3:39:48:c4:ad:da:5b:93:86:8e:e7:bd:
         da:aa:28:42:f6:f8:12:fc:ee:00:2a:a4:45:20:dd:bf:b9:bf:
         4a:78:07:14:d4:8a:28:cb:67:f5:c2:4f:d7:e8:73:88:02:2c:
         41:e4:4d:a5:cd:3a:bd:2a:99:2b:eb:69:29:af:d8:61:5d:01:
         ac:42:9c:aa:81:97:ac:4a:2b:e1:c2:4d:7f:57:99:91:84:e0:
         6e:14:8a:2e:69:e5:53:52:b2:5d:57:c5:a0:55:d4:8c:cc:dd:
         97:1e:14:c2:e5:73:0c:02:61:f3:d6:a0:77:13:f5:49:58:37:
         d6:66:8f:1b:53:d4:21:ed:eb:78:3a:17:5a:b7:0f:5d:2d:ad:
         a8:a0:f8:7e:33:b9:01:29:c6:73:6f:eb:cf:e5:b7:e1:79:0d:
         11:37:07:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 22:27:23 2024 by rpki-client on console-ams.rpki-client.org