Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9a7a185e-bd72-3434-a7a3-6c7800078fe6.roa
File:                     9a7a185e-bd72-3434-a7a3-6c7800078fe6.roa (raw, json)
Hash identifier:          8jGyAFoQbSuCFZXsfbnG3FJG3/amzpmYrQCMaW/YSJU=
Subject key identifier:   97:04:01:99:70:2E:90:E6:A0:34:E8:AE:2A:B0:C0:AA:DB:E0:7A:0D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847600B9508D022444D6B519380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9a7a185e-bd72-3434-a7a3-6c7800078fe6.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     62240
IP address blocks:        166.1.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:95:08:d0:22:44:4d:6b:51:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=16d99928-72eb-44b5-b643-5e8e0021fc4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:72:b4:4e:9f:97:67:4f:ee:48:a5:bb:5e:bb:
                    21:c9:36:1a:56:c0:6f:dc:a8:86:2e:0a:24:f8:c5:
                    99:52:da:cd:8a:71:b2:23:2b:6a:93:62:3c:7e:c7:
                    23:25:b3:72:3e:f5:e9:39:4c:e8:07:4e:cd:c4:24:
                    4b:c8:8c:30:dc:8c:0c:0a:ad:e7:80:6f:ff:f3:73:
                    78:a2:d1:d2:48:86:34:29:c0:3e:e3:5b:6e:86:16:
                    e8:1e:4a:93:d3:ae:3a:f6:93:40:9f:50:f1:67:55:
                    f6:48:83:0c:94:fc:91:38:43:ae:aa:3d:58:23:06:
                    d7:32:70:57:10:1b:7b:4d:9d:9d:89:04:27:a5:9b:
                    f0:d5:7a:8e:f8:b0:2c:ff:da:d0:38:98:a1:f8:63:
                    7b:0f:44:97:f5:5a:d0:2e:d0:a8:c0:57:cc:31:c2:
                    f8:2a:a6:00:be:29:f7:21:e0:f2:5b:06:87:dc:2e:
                    56:db:88:7c:63:17:70:12:7c:fd:ea:58:40:9c:dd:
                    d5:fa:06:8f:28:7c:69:78:91:56:11:4b:38:4b:6e:
                    00:1e:ab:13:3f:a5:ce:b7:bb:5f:c1:af:9d:71:35:
                    e9:1f:b9:fb:c4:2c:02:22:ab:78:1f:fb:95:2f:3c:
                    0e:fb:8a:53:3e:c9:2a:57:fc:ec:99:58:52:2b:9d:
                    c2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:04:01:99:70:2E:90:E6:A0:34:E8:AE:2A:B0:C0:AA:DB:E0:7A:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9a7a185e-bd72-3434-a7a3-6c7800078fe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:a1:5e:39:f4:db:01:11:4d:6b:56:c8:5a:8b:12:4c:58:14:
         a7:7a:67:25:ce:65:66:05:19:fe:9f:99:77:2b:be:3f:b0:7d:
         d0:ed:43:7d:49:a4:ce:26:b6:a3:65:58:52:62:a2:e9:26:1d:
         b5:b1:c5:ff:d3:39:81:5c:d3:68:dd:95:41:46:41:98:36:89:
         f9:45:49:84:3f:1f:ec:41:88:66:82:50:bf:bc:27:f7:42:d0:
         7a:de:ec:7e:6a:26:7b:bf:4d:34:60:68:ba:07:23:fc:ad:69:
         63:81:56:2d:97:49:d7:e0:ea:b4:94:a9:81:57:f2:f9:48:cf:
         81:3a:06:b6:c5:16:dc:64:60:9f:d6:49:1a:83:fa:91:0d:a3:
         7c:23:fb:74:df:c8:74:a4:a7:82:34:55:97:8b:46:a1:c6:44:
         8f:22:10:59:b2:09:ed:08:95:a5:ed:fd:5b:ed:66:da:c3:03:
         fd:41:0d:af:26:e4:c7:1c:1e:1e:cd:02:5d:53:60:4a:22:9c:
         da:ba:8f:d5:bc:c6:3d:4e:86:32:73:5e:27:12:10:58:8a:16:
         85:97:39:e8:41:a0:dd:9e:cc:3b:19:ac:ea:b1:36:c3:f1:e6:
         49:d3:4f:34:d7:04:0f:99:1a:1b:3b:f3:f0:b2:fe:e2:0d:6d:
         91:3b:5e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:13 2024 by rpki-client on console-ams.rpki-client.org