Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9362f9cc-4906-360f-8c25-457686ae58c0.roa
File:                     9362f9cc-4906-360f-8c25-457686ae58c0.roa (raw, json)
Hash identifier:          4VLEqqvgvRxiZN0dHYP6cP7VYV0iMMm9mftr+RHMbGQ=
Subject key identifier:   08:C1:E2:88:4D:A4:2D:6E:50:D4:DE:8F:09:47:1C:71:BA:16:D3:9F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584790AF76CF1E974CEFB8168780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9362f9cc-4906-360f-8c25-457686ae58c0.roa
Signing time:             Wed 16 Oct 2024 23:09:53 +0000
ROA not before:           Wed 16 Oct 2024 23:09:53 +0000
ROA not after:            Wed 15 Jan 2025 00:09:53 +0000
asID:                     8881
IP address blocks:        166.0.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:90:af:76:cf:1e:97:4c:ef:b8:16:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 16 23:09:53 2024 GMT
            Not After : Jan 15 00:09:53 2025 GMT
        Subject: CN=78f62e64-4464-45bc-ba8a-b4efba1a0639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:70:6a:4d:bd:32:4a:cb:ff:07:ff:9c:36:7b:
                    78:29:7d:a6:32:f2:79:2c:40:5d:bd:37:b9:a0:5a:
                    fb:ae:c5:44:c2:7d:58:65:57:07:cf:b4:c5:04:f9:
                    e2:1e:02:7e:e5:c1:a8:57:14:a9:9b:ae:06:1d:f5:
                    79:cf:d7:b3:70:f7:7a:4a:5e:01:11:5b:3e:32:3b:
                    77:cd:85:d4:8d:80:00:ae:09:11:82:11:f7:14:83:
                    5a:4f:9c:3d:f4:72:ca:96:e2:6d:e9:7a:73:7d:e7:
                    11:38:0e:2f:80:8e:dc:03:63:33:f3:62:41:3f:1b:
                    44:2c:2c:d4:9c:a6:ed:81:7f:61:61:75:e8:6a:20:
                    e2:f7:f2:60:ae:a3:aa:cb:db:15:f7:fd:69:7a:be:
                    7d:d6:af:f7:ba:96:9d:b2:b5:09:32:37:47:96:0c:
                    78:3b:23:91:9c:32:ab:30:5c:16:45:52:b6:d4:95:
                    82:7c:6d:89:d2:a7:75:03:aa:65:19:ff:c9:c6:b9:
                    18:d9:53:01:ed:d0:a1:f2:5a:54:61:4e:65:2f:07:
                    71:29:4c:f3:02:03:4f:2a:87:bf:7a:a9:69:9d:c6:
                    52:1d:35:d6:66:f3:03:27:18:a9:5e:23:64:8c:64:
                    68:6c:2b:21:d5:2c:f2:7b:fd:14:fb:af:4a:62:fe:
                    80:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C1:E2:88:4D:A4:2D:6E:50:D4:DE:8F:09:47:1C:71:BA:16:D3:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9362f9cc-4906-360f-8c25-457686ae58c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:cb:cd:97:9f:32:d1:1a:50:77:32:ef:fe:e8:99:14:9a:95:
         18:96:d5:a7:fc:10:e7:db:14:71:0b:02:b4:7a:e6:dd:8b:fd:
         fe:4e:b4:1d:23:e0:65:49:40:c8:e5:17:9a:c7:71:ef:96:c8:
         d9:d0:43:d1:de:39:56:1e:ed:e7:bd:91:8c:73:63:be:99:e9:
         ca:e6:bd:92:4b:ac:54:e0:2d:2f:21:90:fb:2c:bf:47:d5:8b:
         1b:31:3a:46:62:62:be:38:b4:6c:26:28:8d:d8:ad:3e:48:ff:
         9e:a2:50:25:22:0f:d8:3f:52:dc:4c:9f:28:76:52:93:94:1f:
         60:40:7d:48:4a:f3:99:5f:ab:4d:e6:7f:c7:c3:19:8e:cd:aa:
         76:59:6c:b2:e1:a4:68:71:8c:ba:0d:2c:42:71:9d:ef:62:d9:
         cc:bb:80:0f:e2:ff:96:09:b4:33:9c:57:16:e1:fc:6e:6d:27:
         b5:1e:c5:1d:2e:fb:c9:30:09:b7:de:6a:ee:58:63:5b:fe:76:
         d3:4b:8c:2b:be:29:0d:8c:26:5f:bb:c8:5b:81:fa:3c:fe:6a:
         10:14:ff:7c:da:96:f0:6b:be:2f:f8:ac:e5:a7:b0:ae:bd:14:
         2c:8e:77:d2:10:35:5d:d9:61:45:69:57:6c:27:81:e7:b5:a3:
         58:41:48:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:24 2024 by rpki-client on console-fra.rpki-client.org