Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b4f16d56-087d-3da4-8765-ae65ce9fdb4e.roa
File:                     b4f16d56-087d-3da4-8765-ae65ce9fdb4e.roa (raw, json)
Hash identifier:          KYD0nON91r+nf+4kKxIiKs/yYDAiyDex3fVokX6Ttjg=
Subject key identifier:   B5:65:BE:B0:CA:70:59:33:E7:52:E2:7C:5B:3B:A9:49:84:F2:86:BF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847600B938D56E023DEA5A1F920
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b4f16d56-087d-3da4-8765-ae65ce9fdb4e.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     62240
IP address blocks:        166.1.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:93:8d:56:e0:23:de:a5:a1:f9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=b5dea6f1-9556-4378-bd8c-627bd723938b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:41:c0:9d:77:3d:6a:1f:04:4f:aa:ea:1c:b3:
                    b3:38:de:0c:2a:d4:8a:e0:0d:d2:c3:0e:d5:c1:d7:
                    89:4b:35:ba:bc:40:18:9d:05:c0:fb:16:a7:64:ed:
                    9b:08:64:72:85:4f:3d:a5:d2:82:6e:8a:ca:5e:9a:
                    d1:5c:97:93:ce:c9:8a:06:25:25:b1:67:d8:ad:60:
                    a1:75:e9:db:d9:cd:91:1b:6d:09:05:96:bb:32:89:
                    0b:d7:b2:6c:0b:76:12:5a:14:20:bb:6b:94:cb:43:
                    ed:f1:48:81:8f:d6:71:24:bc:23:aa:91:6c:a8:69:
                    9a:e3:0a:ce:9e:64:21:1c:3d:e3:8d:56:38:f2:a9:
                    e5:55:44:f6:c0:b2:ae:5f:29:df:04:4b:78:7c:e8:
                    de:4f:1e:99:87:22:3c:4d:51:37:8e:54:41:11:7e:
                    6d:ee:76:86:54:0e:e7:11:62:47:11:f0:80:f0:7b:
                    c4:88:5d:1f:3b:9c:81:03:da:86:c5:d8:3d:d9:2a:
                    d8:7d:08:97:29:d0:b6:77:df:62:5e:15:a7:1c:e0:
                    c6:47:20:32:f6:27:ab:89:1e:df:25:f4:4c:89:40:
                    15:09:5b:65:41:5f:49:7e:e2:e0:9d:75:28:a2:a6:
                    9d:6f:d5:d3:17:46:de:af:81:97:73:45:9d:d5:1c:
                    cc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:65:BE:B0:CA:70:59:33:E7:52:E2:7C:5B:3B:A9:49:84:F2:86:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b4f16d56-087d-3da4-8765-ae65ce9fdb4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:80:72:27:c6:02:85:1e:9b:3a:f7:e2:59:92:b4:4a:ed:99:
         03:cc:35:36:38:c7:0a:3f:54:b7:17:72:93:6b:c1:84:09:73:
         4f:3d:b8:72:07:f0:59:29:0c:57:6e:d9:58:ef:f6:c6:b2:1d:
         2f:60:7b:fd:a6:8f:66:5a:c8:93:af:fe:3a:cd:2e:52:ce:9b:
         7e:7b:ad:3b:38:5e:7b:da:48:82:ae:a6:b8:d1:f3:6a:85:6d:
         22:f1:5e:06:c9:1f:5a:4f:e0:60:46:f9:d2:10:84:49:fc:95:
         4b:ae:27:a4:3a:bb:c1:62:5e:cb:44:f8:33:ec:91:08:db:96:
         8f:44:b6:0f:85:6a:7d:2c:d9:c8:59:33:2d:11:3f:27:42:d6:
         ab:96:98:9d:40:9a:4c:66:24:4a:c4:6b:c5:47:c7:87:9b:96:
         99:d4:e7:88:24:8b:5c:6a:cf:bc:58:dc:fb:4e:33:eb:20:50:
         2f:a7:03:dd:6c:1f:1b:5a:9c:8e:f8:75:0a:59:88:fe:d5:c6:
         7d:7a:3d:82:b1:75:9e:de:39:4d:33:62:2d:5a:a5:fa:89:34:
         a2:e2:5a:b0:03:5d:73:8c:ff:5e:3f:95:60:44:68:b7:fe:8a:
         18:b6:3a:a0:ad:89:7b:25:6f:f5:36:1c:5c:2c:92:31:e1:75:
         f7:d6:bc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:35:05 2024 by rpki-client on console-fra.rpki-client.org