Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/83d44fb3-310b-32e9-ab0e-83348af29824.roa
File:                     83d44fb3-310b-32e9-ab0e-83348af29824.roa (raw, json)
Hash identifier:          llsQYg1LQHLXwSp03Zatz1UVONQyJDzski/d5DfGkhQ=
Subject key identifier:   05:AF:52:31:56:B1:46:F2:D3:7A:E7:D3:B2:D5:29:0B:78:FB:09:BD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858455F105FDDB90FEB17694E8C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/83d44fb3-310b-32e9-ab0e-83348af29824.roa
Signing time:             Fri 29 Mar 2024 19:00:52 +0000
ROA not before:           Fri 29 Mar 2024 19:00:52 +0000
ROA not after:            Thu 27 Jun 2024 19:00:52 +0000
asID:                     7224
IP address blocks:        166.0.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:10:5f:dd:b9:0f:eb:17:69:4e:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 29 19:00:52 2024 GMT
            Not After : Jun 27 19:00:52 2024 GMT
        Subject: CN=60e7e0a7-46fa-48ce-b157-f75fb7200245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:37:73:9c:b7:fc:c4:30:98:1f:4a:da:19:4d:
                    a9:5b:07:2f:66:43:4a:31:ef:8a:aa:a9:db:fe:e7:
                    2d:ce:82:ad:c8:89:e0:e7:8c:e9:07:bc:44:56:22:
                    24:58:79:91:bd:cd:9e:3c:15:be:7b:60:e8:36:9d:
                    3d:79:54:09:35:6f:99:33:b3:f6:2c:5d:af:78:a7:
                    74:a9:27:3f:b6:6e:23:39:ae:36:40:d3:08:db:12:
                    92:ec:de:7f:48:ab:2d:8f:55:57:7d:a6:d9:73:75:
                    1d:06:80:01:d9:f7:43:f6:52:fc:82:27:eb:41:b7:
                    5c:ff:ba:3c:f2:63:dc:36:0f:71:80:7c:5a:10:19:
                    30:91:15:b5:b1:6b:60:ed:6d:23:94:34:f5:2b:73:
                    80:63:9f:9a:cf:07:5a:a2:be:f4:d3:de:c0:87:94:
                    92:c5:12:3f:0c:6f:ac:fe:13:0a:09:13:82:e4:f0:
                    af:cc:33:7f:a5:da:74:41:7a:46:6d:9f:95:7f:93:
                    76:8f:4a:d3:69:34:ec:92:43:8f:d1:8e:18:b0:21:
                    2d:3a:cd:fd:85:48:73:98:af:9c:93:74:4a:8d:1c:
                    f4:c6:5c:84:83:39:c3:65:51:80:e6:b2:af:41:16:
                    e0:27:da:1f:2e:19:0a:40:16:fc:fe:56:e8:b2:dc:
                    d6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AF:52:31:56:B1:46:F2:D3:7A:E7:D3:B2:D5:29:0B:78:FB:09:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/83d44fb3-310b-32e9-ab0e-83348af29824.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:48:56:30:33:d8:21:b9:75:32:3b:ad:8f:4e:8a:ab:fc:83:
         8d:75:a3:ad:13:54:58:97:55:7b:78:5d:7f:83:92:fd:a2:3c:
         99:80:87:9b:a0:5d:dd:cf:3c:cd:f9:cb:ef:06:5f:0a:2f:ca:
         59:0d:76:c2:8e:86:4b:bf:75:6a:78:f0:8d:a4:de:ff:8f:dd:
         86:29:35:47:56:dc:fb:2a:cc:24:f9:a2:71:7f:c8:25:c2:77:
         c7:64:f9:66:a6:fe:93:c9:a9:b5:46:06:6e:b1:75:e2:29:3c:
         49:1f:6c:77:fc:d1:81:b6:0e:ec:ce:49:4d:1f:80:03:a9:61:
         95:ac:f1:64:55:a2:a9:63:02:24:d4:e1:e6:83:c9:39:59:cb:
         ed:a4:22:75:e7:34:9a:3d:41:62:59:42:6a:e2:eb:82:62:60:
         cd:66:a1:d1:55:3a:5c:e8:ef:76:0d:74:05:ea:38:bc:71:1a:
         0f:77:f2:4c:c5:e6:5e:c7:d6:3a:13:44:8e:cc:5e:f7:14:8a:
         4c:7a:a2:2d:ca:cb:67:af:bc:67:c6:e6:8b:0b:5c:8c:a4:93:
         62:54:4c:09:4e:30:e1:db:c6:2d:d6:5d:fb:da:50:30:d9:d9:
         b6:21:cf:0c:f9:df:f9:3c:15:be:e1:09:0a:bf:16:07:13:80:
         c0:0e:6f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 21:45:41 2024 by rpki-client on console-fra.rpki-client.org