Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9403772a-d791-3cdb-a289-ffa5815892d1.roa
File:                     9403772a-d791-3cdb-a289-ffa5815892d1.roa (raw, json)
Hash identifier:          I8tu2Y8ffPjD7FpkYNTpnt8yj2T09FzGLCgdUuppj50=
Subject key identifier:   1D:7D:CC:75:A0:B5:D1:50:EA:BE:DD:54:B6:03:55:5B:1F:0C:07:7F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847E62B6F7BA684BB370AC98C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9403772a-d791-3cdb-a289-ffa5815892d1.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     58061
IP address blocks:        166.1.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:6f:7b:a6:84:bb:37:0a:c9:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=b6343b63-4455-4060-a605-fd0708f46fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b7:fc:2d:64:0c:d9:2a:2c:ea:36:e3:eb:a2:
                    e8:b4:47:bd:ca:96:63:46:02:46:21:d5:e5:b9:93:
                    a9:94:a7:7b:42:f4:83:ec:de:74:27:3d:11:40:dd:
                    87:3e:2a:da:86:d4:bc:4f:6e:d6:a9:25:0e:2a:c8:
                    bb:22:95:b1:77:ce:c0:40:62:8b:b1:9d:8b:6f:e9:
                    0e:2b:00:51:0e:97:e7:4e:15:bc:8c:48:83:00:90:
                    bf:c1:f5:d3:be:1e:45:d1:bd:ce:77:a8:9a:b4:86:
                    9d:a8:e8:3b:fe:a7:e0:23:5f:bc:09:18:a0:0a:42:
                    62:6c:ad:f3:99:f8:9f:32:e4:2a:7e:99:56:17:a6:
                    23:14:60:f0:ac:e9:8c:2c:15:91:b0:80:b0:6f:9e:
                    5f:b1:c7:da:32:c3:59:1b:f9:2e:3d:a9:07:cb:c9:
                    51:85:a9:d9:22:eb:66:e3:42:b8:e3:ce:df:17:2f:
                    6b:da:71:c6:2e:96:38:e8:e2:90:22:a6:db:42:32:
                    0b:fe:28:d1:8f:ba:3c:d7:2c:1b:9c:8e:28:ab:98:
                    82:08:f5:36:64:d1:14:dc:6f:e0:6a:d4:8d:19:81:
                    51:3e:98:61:b7:70:b6:a8:e9:95:03:94:d1:5f:7c:
                    00:ff:81:e5:1d:a5:ec:c5:df:f4:4e:c2:78:04:37:
                    af:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7D:CC:75:A0:B5:D1:50:EA:BE:DD:54:B6:03:55:5B:1F:0C:07:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9403772a-d791-3cdb-a289-ffa5815892d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:13:07:24:7d:7f:99:64:44:7a:e1:fa:c6:74:21:1c:81:34:
         96:32:78:99:a7:c8:59:ab:3e:71:45:f4:e9:85:20:ec:bf:36:
         81:29:60:da:3f:1b:e5:ec:6d:e3:21:ce:83:69:c1:fe:c9:e2:
         96:ef:c6:71:25:11:be:2f:bb:56:a2:5a:fc:cc:55:9e:7b:3b:
         ae:d8:3a:d6:5a:cc:a9:bc:b9:48:e4:9d:02:6c:d9:9d:d8:57:
         c5:49:27:65:8c:2b:e9:15:28:d9:49:7f:a0:18:b7:ca:89:24:
         11:cb:26:aa:61:20:ca:b9:9b:6d:6b:be:77:c9:82:c0:a5:39:
         77:fe:11:8e:a8:72:da:14:d6:83:54:ca:88:fc:37:22:4d:0c:
         fb:28:4c:6d:8e:cc:19:65:50:e2:92:95:e7:bb:09:87:cf:1c:
         ad:36:eb:b2:02:8c:1e:5e:84:6d:8a:3b:d4:58:bb:4e:90:9b:
         40:29:e6:8c:43:4f:db:f7:a4:3f:48:ee:b9:ae:71:64:52:e2:
         6f:d4:0d:e9:c3:85:e6:8c:3e:1a:9b:98:38:11:29:c4:f2:78:
         0f:a2:98:68:de:40:26:af:4d:0f:76:6a:3b:d7:27:0e:17:aa:
         cb:bf:fd:2c:49:a5:4a:2e:05:ae:89:f7:c2:c3:e4:e4:55:a6:
         24:8b:6f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:45 2024 by rpki-client on console-ams.rpki-client.org