Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7c06209a-9bb1-35bd-a962-94d8b47105ae.roa
File:                     7c06209a-9bb1-35bd-a962-94d8b47105ae.roa (raw, json)
Hash identifier:          +86NI91jectdgDF7NJENE2eVlBq0vZiWSQCCke+Q9Dg=
Subject key identifier:   EB:81:5A:0D:A6:FD:4D:55:76:E6:02:E8:02:1E:54:92:C4:3F:E6:3D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584731FB9D28923A78CC630E6810
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7c06209a-9bb1-35bd-a962-94d8b47105ae.roa
Signing time:             Fri 13 Sep 2024 01:00:32 +0000
ROA not before:           Fri 13 Sep 2024 01:00:32 +0000
ROA not after:            Thu 12 Dec 2024 02:00:32 +0000
asID:                     58061
IP address blocks:        166.1.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:31:fb:9d:28:92:3a:78:cc:63:0e:68:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 13 01:00:32 2024 GMT
            Not After : Dec 12 02:00:32 2024 GMT
        Subject: CN=785c4e30-fcb3-41f9-a630-5646a42d880f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e4:2f:63:17:c2:19:24:42:e9:68:0a:0d:98:
                    49:4b:6e:40:a5:77:af:d7:1f:ab:d1:fb:03:01:90:
                    80:98:43:da:e0:ed:e7:ff:a6:a5:4c:89:08:50:fb:
                    0a:cc:6c:d3:da:ca:82:62:9c:76:08:2c:31:d2:5c:
                    a4:af:01:da:46:4f:1a:f9:c0:14:9b:62:c5:00:36:
                    65:9f:dd:89:99:17:6d:3e:bd:4a:33:b4:bb:96:2d:
                    53:47:dc:eb:6a:a0:8e:6b:ce:0e:38:98:3e:67:06:
                    be:85:98:b3:41:fa:91:a6:2c:bb:24:05:34:b8:85:
                    e8:78:04:c0:5e:c9:2f:db:a8:2c:70:a3:40:2b:7d:
                    56:cf:29:40:f6:66:8f:f9:bc:1f:b2:4e:85:3b:35:
                    0e:3a:1c:6f:55:cc:1e:11:86:88:bf:b4:84:8a:f9:
                    a3:ce:02:22:8b:b4:14:b7:ec:9f:c8:06:69:16:03:
                    75:87:83:02:b9:5e:57:21:f1:43:d7:ef:5f:a5:01:
                    3a:c2:c9:aa:65:df:c6:74:e1:31:ea:fe:fa:16:cb:
                    b5:a8:c2:58:78:f7:a9:d0:c7:62:ed:69:4a:e1:c6:
                    3c:42:28:72:8a:88:5d:25:f2:e3:25:e6:e6:60:a7:
                    de:5b:3d:cd:6d:00:87:0d:03:94:55:e3:e5:da:ac:
                    8c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:81:5A:0D:A6:FD:4D:55:76:E6:02:E8:02:1E:54:92:C4:3F:E6:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7c06209a-9bb1-35bd-a962-94d8b47105ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:76:ca:e9:9b:9e:46:10:11:06:f1:93:b2:b8:0b:bc:f5:25:
         70:c6:04:4c:8a:f6:ae:6a:d0:38:b3:50:28:e8:32:5f:d6:e6:
         08:2c:ac:21:e1:4b:5a:e6:9b:06:2b:18:e1:02:39:23:9a:2a:
         20:f9:cb:7d:71:b1:ba:2f:7a:15:b1:c6:26:0e:c9:80:3a:42:
         76:f5:f6:7a:5e:89:ed:d7:b9:a9:1c:f4:e8:29:77:93:1d:dc:
         a7:f4:93:09:03:f4:01:e3:80:58:82:65:7b:c2:6d:01:21:51:
         02:90:82:32:41:33:75:48:25:cb:bc:38:8e:10:44:01:6a:b7:
         8a:c4:e3:58:da:c2:94:ac:50:fe:46:4e:9e:c2:6e:cc:4d:4a:
         5a:23:52:b1:d2:17:53:de:af:5d:34:d0:cd:cb:10:bc:12:7f:
         93:7b:15:ba:6d:ff:74:0d:ef:1d:5e:96:17:9a:eb:79:dd:f5:
         c7:a4:37:fb:c6:da:5f:8f:a2:1a:2f:74:21:90:75:56:00:2c:
         85:1c:3f:ae:01:6f:73:2a:04:42:b8:56:b7:4a:ca:7a:ae:bb:
         81:c4:55:9b:ef:b1:8e:c7:8f:38:8b:ab:b9:7f:42:b0:07:36:
         3b:68:f7:b6:88:fc:1e:cb:32:68:53:ed:98:f5:bd:66:b8:8c:
         4c:6a:a2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:22 2024 by rpki-client on console-fra.rpki-client.org