Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/79dd3205-4f12-3d01-b3ba-5e96c43def8d.roa
File:                     79dd3205-4f12-3d01-b3ba-5e96c43def8d.roa (raw, json)
Hash identifier:          cX5wSn/bVInJlxEJJT+JLNVw+b1bFdkXUClC4mIbe5Q=
Subject key identifier:   94:80:1F:B2:5C:79:F4:57:F5:3B:C5:2F:AD:49:F7:C4:46:64:48:82
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847792BAFCF9742E4EB21220600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/79dd3205-4f12-3d01-b3ba-5e96c43def8d.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     395111
IP address blocks:        166.0.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:af:cf:97:42:e4:eb:21:22:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=3f918175-eb95-4d9a-a557-0ff8f429153f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c7:77:45:9a:51:07:e1:fb:51:b8:09:2a:82:
                    26:57:b7:1e:6f:c3:d5:6d:7a:5f:bf:f3:2e:5e:21:
                    98:92:1e:82:9e:e6:02:e2:bb:f9:11:38:80:dc:a8:
                    71:a7:51:7b:c2:0c:57:f8:58:92:72:f9:ef:07:2a:
                    29:42:c4:3f:90:41:b1:b3:1d:27:99:2b:bc:70:1f:
                    2e:58:30:61:88:0e:d7:bb:1d:8e:1b:fe:ba:e3:60:
                    26:c6:8e:49:e6:e5:3d:f9:b2:9b:41:68:37:b6:b4:
                    77:41:0e:4e:6d:5c:d1:0a:9e:1a:a6:33:9a:de:fc:
                    bb:05:7c:02:38:ec:1a:67:88:92:cb:5d:87:4c:dd:
                    0d:78:36:fb:b9:c8:6a:e6:73:00:a1:8c:37:ff:ab:
                    e9:ad:e0:4f:ac:17:e9:6b:e4:d6:a2:ef:6c:18:9e:
                    bd:40:93:4e:87:1f:cd:2f:02:6a:ae:a7:a4:b5:53:
                    94:87:90:a8:90:9a:7f:70:80:8f:f7:a3:12:9f:20:
                    de:7f:f7:b0:0e:37:84:94:55:95:52:e2:c7:cb:ae:
                    95:f1:5b:56:35:40:ff:f3:d1:b9:32:4b:74:e1:99:
                    19:97:cf:3a:11:a0:54:e5:49:7d:f5:20:4c:41:f8:
                    77:8d:8a:5e:7c:3e:8a:9f:47:33:e7:b3:ca:e5:ce:
                    97:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:80:1F:B2:5C:79:F4:57:F5:3B:C5:2F:AD:49:F7:C4:46:64:48:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/79dd3205-4f12-3d01-b3ba-5e96c43def8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:d6:38:a2:ba:5b:59:60:27:8d:2b:09:a0:44:87:2c:29:8d:
         c9:e8:9c:23:42:64:65:53:11:9b:41:e3:c0:14:f6:2b:58:cd:
         dc:05:ed:1f:f6:2b:b2:ab:51:73:9d:46:50:a1:4e:72:7e:bd:
         81:38:1a:7b:cf:8c:43:db:d2:6c:9a:92:74:f6:f9:e2:0c:fa:
         ff:cc:f6:5a:69:6f:98:62:37:39:2f:51:b6:bb:46:4b:5d:f5:
         22:62:fa:9e:b2:ca:91:4e:c7:4c:17:f5:07:82:f9:14:55:47:
         c8:60:10:13:0d:d2:ed:d0:ec:c2:64:dc:4c:09:f1:25:cb:52:
         6f:b3:64:29:30:e7:52:85:f6:9e:12:e1:42:7e:b1:6b:d4:6e:
         a3:84:e1:6a:b8:4b:73:f4:dd:e5:50:ee:6a:6d:17:16:25:61:
         76:c6:40:a7:92:93:6f:dc:0a:e1:4a:91:a7:17:60:c9:27:44:
         a8:52:0d:d7:23:f1:17:82:fb:a0:a8:6f:95:52:9c:02:3a:58:
         40:29:fe:43:49:45:22:5d:c3:99:62:44:8b:60:47:f3:c0:b5:
         5d:db:07:1e:06:32:80:41:cd:b7:f1:02:07:d4:5e:fd:4a:c0:
         c4:cf:c0:2c:bb:c1:fb:dd:3f:d2:ce:c0:4e:41:6d:d9:11:82:
         8a:a3:67:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:43 2024 by rpki-client on console-ams.rpki-client.org