Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8ca550e7-ebf5-38a5-8e14-fdb4f79e72cc.roa
File:                     8ca550e7-ebf5-38a5-8e14-fdb4f79e72cc.roa (raw, json)
Hash identifier:          u2KdyDOG0r6R7jc3eX/ljLkO+iK1DwanBWWUZgOFc5w=
Subject key identifier:   1B:32:B3:9B:2B:41:8A:98:2C:49:AC:68:9D:1F:9E:8C:D4:C1:D7:E1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845A15E0DF49AE16D3649C9CC80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8ca550e7-ebf5-38a5-8e14-fdb4f79e72cc.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     62240
IP address blocks:        166.1.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:0d:f4:9a:e1:6d:36:49:c9:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=a3d74e56-4cc6-44b6-ae1d-9a232c8a5901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ba:92:aa:15:ec:1b:d7:9f:f7:06:d1:5d:af:
                    fa:7a:58:3e:61:77:90:23:00:a8:99:81:d9:7f:0d:
                    bb:34:55:9e:e3:20:83:2c:21:eb:f4:c4:88:6c:35:
                    68:87:d8:97:9f:69:89:3f:6e:12:d8:0e:dd:bf:85:
                    78:20:b6:e0:2d:01:0e:e7:a1:70:3e:3b:15:35:b4:
                    b1:31:6a:08:5e:e6:10:bb:ef:17:f6:4c:10:1a:38:
                    73:26:bd:85:34:c3:69:5a:89:5f:a1:f0:d8:d3:9f:
                    64:06:22:28:21:d8:c5:e1:f4:a5:34:13:c1:d7:ac:
                    75:90:a6:93:e6:33:d0:1e:ee:74:73:57:b8:70:77:
                    9e:0c:7f:96:3c:75:97:e0:1f:88:94:7a:dd:53:7f:
                    44:fc:ad:5d:c0:06:ae:c4:a8:70:ff:16:5f:fd:dd:
                    83:6c:b2:3c:9b:df:2e:09:21:62:09:34:0b:da:ed:
                    c6:51:36:e4:94:61:51:21:3b:38:22:1e:68:c8:d4:
                    15:91:79:35:59:2f:5b:ed:fc:d3:6b:da:98:74:5f:
                    7f:e7:4d:90:b7:8f:09:9e:df:f4:81:43:a3:e8:ae:
                    75:3f:c0:4a:e1:51:71:26:48:0e:92:79:b5:73:fe:
                    e8:1d:6b:61:39:72:03:30:c7:77:ca:7c:cd:63:96:
                    61:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:32:B3:9B:2B:41:8A:98:2C:49:AC:68:9D:1F:9E:8C:D4:C1:D7:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8ca550e7-ebf5-38a5-8e14-fdb4f79e72cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:53:3a:82:af:61:92:4c:f1:c4:70:be:89:e0:04:4b:df:44:
         2c:0c:20:f0:82:7c:56:c6:d9:a5:2f:e2:a4:e3:d8:99:c4:73:
         7f:6d:75:29:42:41:62:91:77:78:07:42:45:b2:6c:83:47:d2:
         03:08:5d:81:b0:2b:a8:6b:bb:80:c6:39:07:4e:dc:48:16:d0:
         bc:db:2b:a2:b5:ef:e9:ad:53:02:b1:41:13:17:dd:44:95:9f:
         74:cd:bd:50:7f:98:38:a6:66:d3:d6:d9:65:02:f4:e1:cb:48:
         7b:25:64:d6:b9:89:4a:8a:52:7f:86:5a:2b:c1:e0:a3:1a:a4:
         ea:e8:86:68:79:a8:a9:eb:56:c1:2a:4b:31:8f:89:b9:16:09:
         5d:b4:8a:1d:33:d3:8f:77:7f:3e:3c:98:a5:ba:c8:30:45:7c:
         aa:8a:1c:46:e1:1d:4d:e2:c8:74:16:82:ff:28:8d:be:09:3d:
         57:95:31:64:65:e8:c0:f5:d6:f9:a1:d7:d0:3a:d6:d3:c8:c1:
         0d:54:dc:bc:04:e5:9e:e6:8f:97:ff:d7:9d:92:5f:ad:7b:6f:
         35:09:0c:91:3e:fb:0d:53:45:b6:7a:89:d3:fe:dd:7c:5a:99:
         e2:a7:3f:f9:42:ee:ab:02:89:6a:c9:62:4a:5a:bc:ee:3f:4f:
         ba:6a:7a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 22:27:24 2024 by rpki-client on console-ams.rpki-client.org