Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b822ff03-909c-3a81-bf9d-02ffa4ff2926.roa
File:                     b822ff03-909c-3a81-bf9d-02ffa4ff2926.roa (raw, json)
Hash identifier:          PKQNGZztguxClSwMQgT8FkbhQwstwPl6x0DolAx84QQ=
Subject key identifier:   C2:9C:AF:FC:2F:65:7D:7F:A5:8F:24:58:6B:0F:34:5B:76:71:34:C8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858459116647BB262068E227DD440
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b822ff03-909c-3a81-bf9d-02ffa4ff2926.roa
Signing time:             Tue 16 Apr 2024 17:03:24 +0000
ROA not before:           Tue 16 Apr 2024 17:03:24 +0000
ROA not after:            Mon 15 Jul 2024 17:03:24 +0000
asID:                     1239
IP address blocks:        166.1.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:91:16:64:7b:b2:62:06:8e:22:7d:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 16 17:03:24 2024 GMT
            Not After : Jul 15 17:03:24 2024 GMT
        Subject: CN=3d23d4d2-64c0-49dc-88a9-eeaf2d550e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:72:bf:98:95:80:61:51:0c:5b:8a:08:fd:14:
                    98:60:d8:fa:df:64:06:cb:69:87:b8:34:1c:fe:1f:
                    d8:03:2e:59:92:03:b1:b3:be:13:3a:11:21:6a:d8:
                    24:13:e3:80:bf:18:d8:d6:29:b9:dc:8e:c2:32:e8:
                    69:db:8c:7c:ac:35:46:ed:a1:25:a7:0f:82:d4:d9:
                    e1:32:c0:52:f2:c2:fc:00:80:fd:cd:f6:62:af:0f:
                    39:a6:c4:62:76:a3:7c:38:be:2d:b5:12:06:45:fc:
                    05:2f:2e:20:a2:5d:4a:d7:90:e0:4b:82:d9:63:c0:
                    b9:ed:35:5e:6e:d9:d6:2b:3e:d6:ff:0d:2c:cf:2e:
                    9d:59:53:25:b4:0f:ec:e8:ab:e9:38:3f:fe:f5:97:
                    24:57:93:f1:67:c8:0b:e2:25:be:0c:ea:5c:bf:97:
                    d3:67:b9:93:bf:6f:2a:79:e1:e8:29:5e:8f:ae:10:
                    34:02:71:5a:ba:ce:aa:17:91:6b:c3:bf:8d:d7:7d:
                    a5:64:4e:c6:dc:a5:d3:e1:38:e3:7a:7a:94:7b:2a:
                    60:09:ba:6c:24:ff:52:2b:1e:48:7c:17:ae:75:6a:
                    23:05:2c:ed:57:3c:bf:2e:da:43:aa:4e:1a:01:07:
                    aa:31:a1:61:7c:38:73:62:0c:ed:08:67:54:21:d6:
                    6c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9C:AF:FC:2F:65:7D:7F:A5:8F:24:58:6B:0F:34:5B:76:71:34:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b822ff03-909c-3a81-bf9d-02ffa4ff2926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:0a:29:bb:a1:1f:0e:09:0f:ec:2e:8a:b5:74:24:9e:65:dc:
         08:f7:ba:92:3f:42:da:9e:6e:bf:21:4c:59:5f:5e:01:17:db:
         6a:16:e6:f0:91:7e:e8:94:c9:c1:36:7c:c6:0d:7d:32:d1:ac:
         84:1a:53:17:df:e3:d1:fd:86:8c:17:e2:ce:b1:45:8b:98:b1:
         c9:45:a0:45:3a:51:da:f7:cb:71:e3:2b:87:8b:00:ac:26:9b:
         30:ee:4c:cc:e0:a2:94:83:4d:fc:2e:94:7a:66:7f:f5:68:ff:
         a2:02:af:d7:aa:54:2b:ec:8e:98:2f:3e:97:3d:c5:cb:1a:9f:
         cd:97:ed:f9:50:e8:b2:56:66:33:b0:e3:63:20:3b:80:d5:b1:
         f9:c2:fb:7e:a6:c8:7e:1d:b3:da:88:5c:10:61:5a:55:d1:70:
         00:cb:f5:c2:0d:87:7c:82:1c:17:85:62:1f:44:5f:99:1c:64:
         b6:d6:f6:6f:6c:45:67:09:b0:c7:92:04:f7:38:55:6b:5d:2d:
         19:b2:d7:51:68:c5:1f:ae:3e:dc:cb:79:24:a1:1c:93:14:a2:
         b0:64:4b:56:ad:1d:0d:38:c9:83:9c:39:68:4a:0a:a4:aa:2f:
         96:6f:e1:8c:3b:8d:58:00:e3:a7:35:e0:59:7d:2b:ce:99:ec:
         ac:70:da:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:56:28 2024 by rpki-client on console-fra.rpki-client.org