Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bfd07589-b879-3935-9f6e-b35105fe699c.roa
File:                     bfd07589-b879-3935-9f6e-b35105fe699c.roa (raw, json)
Hash identifier:          lu76e2ZEcfeRTIV2L89dlF8xHzWFpDtQnmil/vhdiyo=
Subject key identifier:   5F:F9:C8:5D:9C:43:5F:05:E8:95:02:92:25:F6:12:6B:C3:F3:20:59
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845840DD0D2AF2D7A09B02FFF00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bfd07589-b879-3935-9f6e-b35105fe699c.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     264409
IP address blocks:        166.0.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:d0:d2:af:2d:7a:09:b0:2f:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=d30dd2e0-8ee8-416b-9e6a-8011049c0fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:78:56:e3:84:6b:77:09:fb:51:d4:62:c0:4f:
                    bf:33:a2:5b:71:70:3c:8f:dc:c5:d4:7b:6c:49:c7:
                    92:5a:61:24:5d:a9:8a:f0:32:b4:a5:45:66:4e:da:
                    72:84:49:52:80:fd:74:c7:86:63:59:53:34:bb:1c:
                    0a:c5:2c:3d:7a:2b:0d:cc:9d:25:3a:10:74:b6:4d:
                    11:43:7d:f3:9e:6a:f8:05:a6:22:c5:9d:c9:8f:2f:
                    18:7c:c6:f3:6d:75:d5:ae:ef:c4:49:c7:17:18:e7:
                    c7:8e:d8:a9:bc:d0:af:3a:79:cf:87:51:ab:3f:6f:
                    95:07:85:b3:0c:df:fc:c6:a1:cf:9a:56:1c:58:aa:
                    bf:1d:65:82:bf:86:a9:81:90:f8:cb:57:7f:2a:d0:
                    10:33:59:65:5b:10:2f:cf:b7:4d:87:3e:9b:8d:ed:
                    cf:91:d6:0f:8f:9f:73:cd:ff:25:13:4f:f9:de:8b:
                    e8:db:b8:a4:3a:8d:03:21:09:72:1e:9c:bb:2e:78:
                    61:78:48:bf:82:8c:c8:fd:62:f0:7b:22:c2:63:93:
                    f1:f5:ab:16:ae:2f:93:9d:8a:f8:c3:6c:79:47:25:
                    52:36:cc:3a:f2:09:0e:1f:06:53:21:32:d8:a5:c3:
                    7f:44:63:db:c5:06:5f:bc:67:df:0a:5d:44:c9:00:
                    eb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F9:C8:5D:9C:43:5F:05:E8:95:02:92:25:F6:12:6B:C3:F3:20:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bfd07589-b879-3935-9f6e-b35105fe699c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:73:41:e7:86:f9:99:42:63:98:8c:59:1f:e6:d0:a5:57:b1:
         c8:6d:9d:27:18:e1:fb:cc:e0:5c:2d:7c:57:32:75:8e:c2:1e:
         cc:3f:d5:15:75:d6:f5:d7:78:2f:03:70:00:11:2f:1d:3b:32:
         33:a0:5b:7d:72:7f:52:f0:2e:6c:b7:94:45:7c:19:bd:2a:20:
         8e:ab:83:9c:51:15:cb:7d:79:45:ad:2c:c3:ca:0c:03:53:36:
         c0:b3:7b:ae:40:8d:89:4e:6a:31:03:5f:51:d1:dd:98:7f:07:
         c3:53:2a:60:a7:19:36:55:48:de:9a:b0:bd:74:80:66:fb:40:
         5e:f9:aa:74:2d:e5:c5:ab:58:a3:db:44:4f:c3:3c:ac:93:f2:
         70:96:c3:d2:11:06:40:44:ef:d8:34:0b:80:8a:58:2e:c3:36:
         f2:37:38:91:d3:65:1b:c5:30:44:09:4e:da:71:97:90:cc:77:
         00:af:5a:2f:dc:74:63:fc:b1:96:1d:3d:41:c9:13:bb:c0:2d:
         fb:8e:33:6a:92:be:bd:97:5f:f5:bc:00:df:b4:9a:58:93:1b:
         91:f6:40:0e:b2:f3:ad:70:d4:da:cb:ec:31:17:d8:70:14:48:
         ab:09:3d:9f:31:6f:de:b3:39:f1:be:40:3f:1b:93:d5:bd:24:
         4b:f2:75:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:32:26 2024 by rpki-client on console-ams.rpki-client.org