Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a1839dfe-bfd9-3121-9fc0-4e57974475ae.roa
File:                     a1839dfe-bfd9-3121-9fc0-4e57974475ae.roa (raw, json)
Hash identifier:          Yzt91r+xqUfqD0wUtu/TdszbfE8ofn0cK7V/jlEB8wE=
Subject key identifier:   F2:78:08:F3:B4:A1:44:D2:93:AF:B3:12:FE:65:15:32:2B:74:38:3B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845B7B37E9917A2E9D373661600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a1839dfe-bfd9-3121-9fc0-4e57974475ae.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     9009
IP address blocks:        166.0.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:7e:99:17:a2:e9:d3:73:66:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=6f5cf743-4767-4af6-9b22-93200bd0b272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ee:70:cf:bd:61:31:11:91:ab:80:79:94:0e:
                    c0:57:e8:a7:a4:f2:c4:29:e4:63:cd:da:1f:30:58:
                    99:a9:4e:b0:b4:ff:c8:2e:67:76:d9:e6:52:cf:04:
                    e3:a7:71:84:de:e7:4a:41:15:8a:bb:13:30:c2:7f:
                    c0:f9:19:e7:3b:2b:38:a9:a7:35:7d:21:0d:19:09:
                    ce:f8:ff:68:91:d5:c1:43:77:e6:1d:0f:b3:88:7d:
                    19:d3:de:99:64:4c:48:ba:bd:70:98:08:3e:d9:e9:
                    ec:f9:de:59:0e:a0:17:aa:60:2c:9d:73:ef:17:da:
                    90:49:c9:d1:73:b0:67:8e:b6:d4:18:70:3b:d2:1e:
                    54:b0:35:85:59:19:d0:cf:52:ce:66:33:89:f0:73:
                    8d:98:cb:92:43:a1:79:a5:7a:fc:6e:72:56:80:ce:
                    eb:43:e5:7e:4a:08:0a:5a:1e:9a:a8:6f:ea:e6:12:
                    a0:10:78:82:15:d6:6a:d2:ef:26:50:ee:c6:a5:ed:
                    ba:d3:00:23:92:49:97:56:d3:7f:fb:ab:64:a6:46:
                    56:61:0f:73:c8:e7:00:f6:bf:25:5b:52:dd:d0:e8:
                    85:4d:3c:4c:45:9e:43:5a:88:d0:f1:57:99:e5:85:
                    c6:0f:a1:78:1a:18:3e:2c:33:16:1d:b5:7f:e9:7e:
                    50:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:78:08:F3:B4:A1:44:D2:93:AF:B3:12:FE:65:15:32:2B:74:38:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a1839dfe-bfd9-3121-9fc0-4e57974475ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:25:02:54:15:47:fd:ca:fd:62:0d:d1:83:84:f4:a4:97:e4:
         55:d9:de:61:e5:46:1d:ca:72:71:c4:b4:e6:b4:2e:51:11:fa:
         47:42:33:e8:3c:a5:89:b2:ad:0b:bc:05:04:61:05:b7:fc:7f:
         f1:e9:da:e6:57:1d:20:9d:09:83:74:f2:c4:c8:5c:24:90:be:
         1c:df:58:17:9d:f9:7d:2a:dc:e1:ec:89:ae:e0:21:56:15:8d:
         2f:c2:e1:8e:0b:e2:e8:af:e6:3d:51:01:72:a1:37:81:48:0a:
         95:69:2f:e0:ac:5d:4e:34:25:cc:74:7a:8b:0a:9b:2d:34:f7:
         cb:8f:8c:a9:cf:38:4b:1c:ea:fe:dc:2c:de:af:39:4d:4e:88:
         b0:4b:74:67:89:25:a3:1e:23:9d:2a:99:4f:0a:50:22:52:ca:
         04:f0:4e:b9:89:7d:f6:e1:b6:89:03:d0:c2:d9:39:dd:aa:3e:
         f3:fc:0c:97:9e:e4:06:9e:d2:7d:66:9f:79:bb:5f:33:9f:15:
         61:03:7d:5c:9a:9b:17:d9:89:7f:22:0f:2e:dc:1f:57:04:27:
         a7:9c:d0:34:0a:66:f8:dc:17:a3:f9:d1:26:0a:66:8c:6d:ad:
         88:9d:28:bf:4a:b9:6d:54:f7:15:77:e1:35:e1:b9:27:6a:40:
         cb:86:6d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:55:53 2024 by rpki-client on console-fra.rpki-client.org