Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9659c30f-f154-3866-a6ae-f2d2d4197b98.roa
File:                     9659c30f-f154-3866-a6ae-f2d2d4197b98.roa (raw, json)
Hash identifier:          hqtlyS1SygzeqST2e7M/AF0WNGD7hiV4yzYPjhB4SGM=
Subject key identifier:   55:D2:16:E3:10:36:2E:65:14:B7:19:38:FF:A5:68:09:EF:63:A8:46
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858483F80381CD9D5A9A78E79C380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9659c30f-f154-3866-a6ae-f2d2d4197b98.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     62240
IP address blocks:        166.1.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:38:1c:d9:d5:a9:a7:8e:79:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=2b2a0a97-8fd9-413c-afff-e9d092ee495b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7a:30:97:8b:d9:0b:5b:6d:2d:f9:bc:51:9e:
                    1e:7a:b0:f3:ea:45:8a:70:4e:7d:58:9c:15:20:ec:
                    d4:02:92:98:4d:4e:6e:73:1b:ab:4b:06:a2:d2:73:
                    a8:3d:47:41:1e:77:f9:31:6e:15:94:7d:37:29:ca:
                    a5:ec:78:e2:52:19:78:4d:d0:20:7a:5e:22:5b:ea:
                    e8:be:9e:ca:74:29:b9:51:ab:50:80:5d:d3:e8:cf:
                    a0:8c:fc:e8:44:e2:f3:12:a1:78:80:7d:c8:2a:d3:
                    aa:7c:72:fd:46:42:cb:c2:32:02:b9:64:07:29:f2:
                    9d:52:f8:1e:ac:99:d8:83:69:92:0b:e5:5f:8a:d8:
                    16:92:56:af:95:67:2b:48:ba:53:98:72:d4:0e:32:
                    d2:80:a0:7c:d8:e0:3b:42:23:b1:7f:26:1c:d9:e7:
                    a6:22:5c:aa:4f:a9:b6:87:e3:54:fb:87:d6:ce:fb:
                    20:03:d9:07:e6:59:1c:7b:43:3f:41:6c:72:b3:ff:
                    ff:78:82:8e:19:be:bd:41:ac:24:4d:48:16:24:1b:
                    86:66:cd:20:8f:0f:49:3d:ae:62:08:97:98:9b:6d:
                    06:2a:97:d3:3d:17:76:9e:2a:e7:4a:96:e8:6d:33:
                    73:9c:e4:fb:9c:55:76:3e:c9:e8:17:23:e7:6d:12:
                    2f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D2:16:E3:10:36:2E:65:14:B7:19:38:FF:A5:68:09:EF:63:A8:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9659c30f-f154-3866-a6ae-f2d2d4197b98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:46:3a:8d:1c:e0:5a:0d:09:d8:08:43:59:11:a1:37:6f:9c:
         f9:99:55:43:56:b7:4a:af:94:a0:5c:c8:fd:ee:56:ce:c5:fb:
         58:31:e2:50:cd:6e:e9:ea:00:25:d7:1b:14:d9:72:9e:29:40:
         71:08:bb:cd:79:06:b2:7e:2b:99:40:be:31:8c:cd:da:89:7f:
         8d:71:61:2b:6d:a4:a7:ed:58:64:55:8b:71:44:32:97:da:31:
         0a:63:eb:f8:27:28:cb:ce:2f:98:24:61:ac:26:d3:12:73:ef:
         2b:89:69:fd:7d:8a:e4:b3:69:f7:c4:0b:d9:7a:23:07:27:7f:
         70:40:39:33:44:4e:e1:67:02:07:24:9a:7e:f0:5e:ec:3a:8a:
         98:ca:d8:cd:94:26:65:97:17:c1:3a:e6:bc:92:9f:47:08:08:
         20:42:40:18:29:1c:b8:e2:07:cb:2c:f2:d7:8e:5b:c9:62:e5:
         2e:86:7a:7d:8a:e9:ce:eb:2e:88:0e:b6:75:a7:60:a8:e1:e3:
         33:b0:63:b2:d5:b8:02:8c:b8:18:35:4b:9c:6a:c4:59:f5:cf:
         b9:b1:67:ff:ea:99:ee:2a:01:a9:3e:22:85:d2:ca:e8:6c:b1:
         8e:eb:62:62:d2:69:bc:18:91:af:89:1b:e5:2a:ed:28:d0:75:
         f1:a9:28:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:09 2025 by rpki-client