Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aea8a3e2-1969-384b-bd4f-6a2c3f6d28a9.roa
File:                     aea8a3e2-1969-384b-bd4f-6a2c3f6d28a9.roa (raw, json)
Hash identifier:          LaL3dowzUdd+A3sVrAywyVyjk70VoTtQFE7c8mtKei8=
Subject key identifier:   F3:CB:AC:82:D4:05:EE:56:1C:F5:EC:95:3C:71:55:87:DA:89:11:B0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858474759777E99C87E7BCDE47EC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aea8a3e2-1969-384b-bd4f-6a2c3f6d28a9.roa
Signing time:             Fri 20 Sep 2024 16:42:36 +0000
ROA not before:           Fri 20 Sep 2024 16:42:36 +0000
ROA not after:            Thu 19 Dec 2024 17:42:36 +0000
asID:                     205220
IP address blocks:        166.1.68.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:47:59:77:7e:99:c8:7e:7b:cd:e4:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 20 16:42:36 2024 GMT
            Not After : Dec 19 17:42:36 2024 GMT
        Subject: CN=b773b657-785b-42ed-a4fe-d2f89e255151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:15:1a:27:2e:04:56:6b:48:7d:7a:ef:07:2f:
                    06:79:85:b9:fe:01:6d:38:89:ae:9d:8c:cf:63:63:
                    16:49:92:8b:0c:ab:e0:00:a0:0e:61:91:76:ea:32:
                    bf:ac:f5:c9:0b:ac:0e:ba:46:93:2f:9e:e7:aa:ed:
                    80:ad:11:92:9f:6b:2e:e0:e1:aa:d1:95:f1:da:7c:
                    ad:10:6c:7d:6a:66:8c:9c:e3:47:e0:e8:41:a5:36:
                    60:ab:61:79:58:1c:dd:b1:33:bc:22:53:e8:9a:d9:
                    03:0d:d2:47:af:6e:31:47:05:d3:95:d7:c8:c1:39:
                    5c:b0:d8:75:e8:9e:e6:2f:9c:2e:cf:1b:bc:30:78:
                    23:5c:3a:cc:46:80:db:8c:7d:e6:03:55:b5:a3:ae:
                    ef:96:0a:de:a7:5e:b0:e7:6c:69:24:01:49:88:a8:
                    c9:de:f3:66:80:8e:1f:b1:16:74:67:90:77:a7:b4:
                    1b:1b:2a:c3:46:62:aa:24:7b:28:63:76:58:df:6a:
                    df:14:05:a0:04:bf:7e:bc:c4:20:1a:21:99:94:62:
                    62:86:11:d1:ea:4b:ac:b5:22:9e:d9:c8:60:e0:e0:
                    04:ff:e7:58:05:0e:94:cf:24:b0:74:a3:6c:a3:8b:
                    53:3a:fe:47:da:28:3c:d7:78:ea:32:80:9a:e3:34:
                    26:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CB:AC:82:D4:05:EE:56:1C:F5:EC:95:3C:71:55:87:DA:89:11:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aea8a3e2-1969-384b-bd4f-6a2c3f6d28a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:b4:1f:8a:77:6c:f6:39:5d:db:eb:b1:b2:fb:07:77:47:f1:
         b9:38:13:c0:1d:fd:c0:c0:5e:87:df:4a:03:a9:55:ad:88:dd:
         42:38:73:53:87:95:e3:aa:15:6c:0b:f5:62:2d:a0:fe:a2:25:
         7a:27:16:4c:e6:16:29:fb:82:02:26:ae:53:ef:6d:e4:c4:c5:
         7a:3e:af:51:0b:61:a9:84:54:76:05:26:fb:ec:0f:d5:08:61:
         bd:27:5f:99:ac:66:0f:85:f9:2b:80:19:46:9d:c4:21:00:85:
         05:fc:9e:89:c3:72:15:5c:28:be:1d:5f:0b:9f:d7:02:d4:50:
         69:cf:5c:39:1b:f0:ff:30:04:50:3b:4a:46:43:df:9d:aa:ff:
         bc:d6:4e:18:a6:95:62:5a:e1:60:c5:e0:d8:28:7a:61:d7:c2:
         8e:97:20:45:8a:6f:28:a2:09:70:bd:f4:16:ec:31:df:5f:de:
         43:56:45:5a:91:70:f6:4f:14:32:b3:bb:90:00:1b:ae:94:fd:
         af:73:de:da:e8:06:8e:e6:d3:8b:42:7b:ad:41:3c:e9:ef:3c:
         f3:ad:d0:20:78:0c:79:63:54:fe:a3:9c:29:92:d9:4f:0f:ae:
         fd:64:b4:ea:6f:57:e4:45:72:7e:67:b5:99:c6:7c:b4:ae:be:
         07:ec:bd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:46 2024 by rpki-client on console-ams.rpki-client.org