Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7e0aab37-12ba-3ded-a6cb-087dde572bc4.roa
File:                     7e0aab37-12ba-3ded-a6cb-087dde572bc4.roa (raw, json)
Hash identifier:          /buER5OsQdcukROEmlRvIvtfD/VMCd/eaAUCka3jXnY=
Subject key identifier:   1E:49:4F:88:2E:4C:7E:36:5E:46:D0:45:24:E8:4A:C2:ED:19:FE:75
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858473A5B8DCAB1CAE7B718F9C910
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7e0aab37-12ba-3ded-a6cb-087dde572bc4.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     26383
IP address blocks:        166.1.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:8d:ca:b1:ca:e7:b7:18:f9:c9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=8ad21ed7-52f0-4e1f-8a73-841f2429e924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:09:6b:24:b1:da:63:9b:14:d1:ea:3b:b2:7f:
                    85:c4:48:f3:d5:34:70:a4:d0:4c:d2:39:63:5e:63:
                    a2:0d:4c:b8:ee:a7:95:e2:18:d8:ff:70:88:9d:18:
                    ce:b6:b9:85:cd:63:85:06:a2:2d:6c:22:4d:ad:79:
                    66:82:7b:32:65:f5:c9:e7:80:21:1b:eb:2c:6b:e5:
                    b5:fa:27:e0:de:01:8c:4a:77:84:c4:25:07:9f:86:
                    80:6e:b5:da:4a:55:d1:b8:df:0e:5c:38:58:63:fc:
                    e0:69:dc:ad:98:7b:ff:19:d6:5b:c8:4f:a5:f8:2b:
                    3d:d6:39:7d:18:d2:b5:24:d6:95:f1:85:ae:83:d4:
                    c7:36:3c:89:e8:b2:a7:94:ad:3b:38:31:a7:51:f9:
                    99:69:cc:bc:81:4a:ab:85:78:d5:a1:ac:a0:93:46:
                    da:c5:e8:ae:b3:d0:7b:03:7e:38:54:94:44:1d:32:
                    c2:99:9d:a4:ca:7f:35:32:7c:47:54:a3:56:74:a9:
                    7f:7c:ff:ed:09:9b:00:a6:88:18:13:1a:23:8d:15:
                    1b:27:43:54:06:cf:1c:13:6f:1c:9e:81:63:ab:3e:
                    41:dd:96:fd:a1:df:ac:f2:91:de:7a:2d:eb:76:df:
                    1b:f7:e1:9e:d4:eb:2e:9a:7f:f3:f7:34:1a:dc:12:
                    72:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:49:4F:88:2E:4C:7E:36:5E:46:D0:45:24:E8:4A:C2:ED:19:FE:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7e0aab37-12ba-3ded-a6cb-087dde572bc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ce:88:64:3c:0e:ea:fe:fd:99:80:ca:e8:03:f8:48:f0:ec:
         d7:e0:4e:d5:f7:68:ed:de:1e:22:e6:cc:38:4f:83:88:a8:74:
         1d:43:da:71:37:a5:7b:2a:f0:82:7f:e2:1b:72:b5:5a:fa:48:
         53:fb:1b:cf:83:1a:34:da:cc:5d:31:50:1f:e3:f8:0a:8f:dc:
         f6:ff:e6:52:58:e6:f0:c3:a9:d2:f8:c6:57:38:68:df:80:60:
         80:ee:0a:b5:bb:ef:9f:6b:ee:e8:d2:25:63:46:16:49:ef:92:
         f5:9d:ad:1b:f1:0e:ea:bf:11:0b:af:bc:76:2c:ae:72:76:b3:
         b6:ed:e1:c5:a6:7b:bd:1c:f2:0f:8d:de:e9:6b:31:03:b8:1b:
         06:40:22:89:8b:22:d4:06:59:21:dc:fa:18:5e:30:64:6d:a6:
         1e:15:cf:7b:77:88:e8:40:6f:55:21:8a:a2:b1:1a:17:7a:1e:
         77:82:fd:92:87:55:54:f3:08:fa:82:8c:12:38:9c:2e:bb:27:
         97:1b:90:d9:3d:6d:f9:20:01:db:10:9f:8a:91:77:88:8b:6e:
         80:82:03:14:9a:09:d5:5a:bb:da:80:27:cf:11:1b:88:49:44:
         77:b2:0e:eb:70:4d:52:15:3b:e3:a1:ab:56:b6:35:9b:62:51:
         78:6a:2b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:44 2024 by rpki-client on console-ams.rpki-client.org