Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bca07dba-0a76-39ac-a5cd-38e053a212dd.roa
File:                     bca07dba-0a76-39ac-a5cd-38e053a212dd.roa (raw, json)
Hash identifier:          wyc+gS9tcIqILDa7q+C6XFQ7YIHo2hpP/P0J/blkTHk=
Subject key identifier:   0D:C7:82:73:74:40:D2:D4:A1:96:E4:3A:A3:72:00:2E:4A:74:67:4D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845496D5F3FA930A0EC90855F00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bca07dba-0a76-39ac-a5cd-38e053a212dd.roa
Signing time:             Fri 22 Mar 2024 01:00:24 +0000
ROA not before:           Fri 22 Mar 2024 01:00:24 +0000
ROA not after:            Thu 20 Jun 2024 01:00:24 +0000
asID:                     205220
IP address blocks:        166.0.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:6d:5f:3f:a9:30:a0:ec:90:85:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 22 01:00:24 2024 GMT
            Not After : Jun 20 01:00:24 2024 GMT
        Subject: CN=c53b15e2-8508-4dfc-8a01-294d900ecb0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:85:89:ce:d1:63:d8:d5:a7:4d:a0:29:b7:9b:
                    89:64:9e:5f:c1:66:bb:5c:4a:eb:62:b6:1d:e7:6e:
                    20:40:20:7e:7f:cd:4f:67:c3:12:9e:0d:0e:a0:60:
                    7e:fa:5b:49:b3:0a:8b:20:66:41:17:53:90:a8:12:
                    93:45:3e:bd:b9:f6:cc:c9:be:42:92:70:4e:74:76:
                    7f:00:8e:14:42:4b:54:f2:53:92:15:71:cc:93:84:
                    24:03:94:82:54:40:f0:99:b3:d3:da:7d:dc:5a:a7:
                    15:97:80:a7:b5:dc:45:92:1e:bf:8c:2f:d1:3b:bb:
                    94:44:f5:49:41:34:41:44:54:ea:78:c0:8a:d7:06:
                    c9:87:f2:c0:ea:4c:aa:6c:ca:b7:85:0b:30:60:0e:
                    00:dc:09:6d:17:f1:f4:93:db:6c:a1:54:07:22:8f:
                    2b:37:ea:fe:ad:2a:34:16:e1:00:60:bd:c3:48:22:
                    9f:50:0a:a5:27:86:5e:63:c6:f6:c8:f4:73:8c:bf:
                    68:b1:36:22:91:5f:71:e3:41:72:6d:dc:fc:69:ca:
                    54:b0:10:7d:ac:d8:52:fd:4a:b2:2c:59:b8:70:d5:
                    0e:23:96:e8:3e:d7:95:a4:85:73:c1:cf:a4:fb:ee:
                    eb:df:11:4c:a4:04:48:24:65:ad:25:90:36:6b:0e:
                    7d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C7:82:73:74:40:D2:D4:A1:96:E4:3A:A3:72:00:2E:4A:74:67:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bca07dba-0a76-39ac-a5cd-38e053a212dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:bf:72:58:ca:fc:8c:f1:07:1e:ae:e5:38:93:ea:9d:8b:36:
         ea:27:8a:50:5a:0f:14:58:b1:ee:3e:7d:e5:cf:46:2b:72:43:
         f3:5b:7a:2a:e6:5f:04:81:3b:53:4f:dc:d5:a6:9f:70:d9:79:
         75:b4:7c:cc:b4:97:8f:17:71:42:0b:92:01:86:1b:0a:a8:ea:
         fd:90:c2:6d:d9:0e:db:46:f7:29:4e:a5:fa:cb:d2:c5:9d:35:
         5d:c7:8e:b9:0f:cc:18:db:81:aa:6e:48:84:a3:da:a8:b1:a1:
         bf:db:a2:50:b8:43:21:0a:0e:99:ed:66:99:fa:58:12:54:09:
         a1:22:f8:24:74:f1:58:1e:9f:93:96:8d:d7:b0:d3:46:95:78:
         f9:e0:2e:d5:80:16:cf:47:d1:7d:1e:02:94:d7:e0:08:5b:cc:
         97:75:8c:57:96:83:e3:07:46:ae:ce:10:c9:80:9c:6a:63:99:
         ed:b5:7a:73:0d:2b:a9:09:3a:4e:91:62:63:9d:7c:47:e3:70:
         ec:18:56:ee:c5:1f:a7:fa:fe:84:39:8e:49:cb:e5:b6:86:5c:
         28:f9:96:8c:0f:bf:6b:88:f6:01:cc:50:b1:f9:e2:f5:97:b6:
         da:b7:26:37:9f:94:e6:33:c9:a5:51:6b:5d:7e:c3:c5:de:ca:
         3c:61:22:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:55:55 2024 by rpki-client on console-fra.rpki-client.org