Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8f1ee71c-f8d7-373a-a07c-07aa43551a1f.roa
File:                     8f1ee71c-f8d7-373a-a07c-07aa43551a1f.roa (raw, json)
Hash identifier:          m/g5ppwSnBUegzzANlhiZR8VOHtxoyEXDbYGTx2b8bM=
Subject key identifier:   9A:1E:F6:C6:AA:EB:0E:8F:D5:A6:75:6E:55:17:BD:7E:13:39:02:2A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847F584F8E330B96DD5DD409200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8f1ee71c-f8d7-373a-a07c-07aa43551a1f.roa
Signing time:             Fri 22 Nov 2024 02:00:40 +0000
ROA not before:           Fri 22 Nov 2024 02:00:40 +0000
ROA not after:            Thu 20 Feb 2025 02:00:40 +0000
asID:                     58061
IP address blocks:        166.1.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f5:84:f8:e3:30:b9:6d:d5:dd:40:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 22 02:00:40 2024 GMT
            Not After : Feb 20 02:00:40 2025 GMT
        Subject: CN=eac0a7db-3283-415e-a012-54f4aaa8b982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1a:6f:5f:6e:92:a4:81:e5:da:b7:3d:58:3d:
                    7c:e7:41:21:44:2a:df:85:e2:56:18:de:6a:3e:c4:
                    e5:e8:7e:bc:93:d8:69:7b:9f:de:26:12:26:24:00:
                    94:c1:bd:ee:ee:b9:5c:ca:e0:36:a3:c2:f7:03:9b:
                    96:7c:62:13:74:35:e2:2d:3c:b4:fd:e7:25:f4:88:
                    8e:56:d1:40:f8:80:a7:79:f4:96:5f:be:f5:12:15:
                    fc:51:49:85:b6:7b:4c:95:66:42:07:88:b3:d9:99:
                    33:9e:7d:34:ca:9e:ad:82:9d:4d:52:a0:f0:f5:e5:
                    42:eb:8b:1a:d7:c9:68:01:58:82:17:b2:e6:94:c7:
                    c9:38:de:05:e7:27:76:5d:8b:c2:e5:6e:29:86:96:
                    ea:0e:85:af:b0:63:cb:f6:36:70:15:f9:8e:f4:73:
                    7f:7d:fb:2e:bc:af:74:01:10:69:67:44:df:20:bc:
                    8b:49:a5:5d:1a:5b:41:72:03:29:ed:e1:dc:87:c2:
                    a9:d7:30:a2:c8:ac:32:c4:58:1d:ce:25:63:95:83:
                    0a:25:61:51:ba:9c:06:3a:ee:57:8f:fe:0c:67:19:
                    b3:e2:11:b5:38:d7:b7:e0:36:44:6d:77:a8:9e:4c:
                    37:26:86:0d:e9:ed:74:8a:4a:01:ef:1a:1c:33:4c:
                    a5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1E:F6:C6:AA:EB:0E:8F:D5:A6:75:6E:55:17:BD:7E:13:39:02:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8f1ee71c-f8d7-373a-a07c-07aa43551a1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:5b:86:f2:f2:f0:3d:ef:a7:90:21:3b:ef:91:bc:83:d0:bc:
         54:d4:da:9f:37:6c:42:39:e3:0b:bc:40:e6:91:91:81:09:48:
         9f:c2:85:74:48:c8:f0:61:66:15:ce:4a:af:17:c4:50:b2:91:
         98:b0:77:e9:88:1b:97:d7:53:f0:dc:f2:cc:9b:ad:12:22:a2:
         18:e2:cc:50:9e:ce:15:6c:82:14:22:58:e9:c1:ae:34:98:12:
         f8:14:8c:d3:f0:95:d0:1f:26:09:8a:eb:36:34:ea:e4:cd:f2:
         05:37:66:ae:bd:39:10:24:22:ed:a8:c4:e0:ca:35:11:b8:ff:
         1b:87:d5:d7:d2:d9:f5:11:59:09:a2:a6:76:f3:4c:7a:6e:ae:
         cb:a3:b0:8b:26:31:6f:3e:1b:62:4a:be:d0:40:8d:e9:2b:b8:
         3a:1c:c4:13:e8:92:22:01:5b:78:95:01:b6:ce:0f:7e:e3:a9:
         b3:c3:d9:56:c9:21:de:16:c0:46:7a:97:ab:0e:f4:34:8c:fa:
         ff:92:b6:9c:6d:d7:6d:95:ba:5e:0d:c0:c0:e8:8b:ee:5f:84:
         fa:08:15:bc:c9:32:bd:0b:c0:44:2e:eb:d0:f9:10:c2:2d:08:
         ce:7d:34:82:f6:1c:6c:9c:34:5d:c9:16:a4:79:c5:c2:91:03:
         f3:38:f7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:32:19 2024 by rpki-client on console-fra.rpki-client.org