Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c5f56b5d-55a7-390b-8b51-d41ed9cae1c5.roa
File:                     c5f56b5d-55a7-390b-8b51-d41ed9cae1c5.roa (raw, json)
Hash identifier:          j50Ox/RYGl3yQy4A6Cgwqmk52N0OJfFaPsT+dmw7AXA=
Subject key identifier:   03:9E:F8:BB:05:C9:DC:33:B3:2B:49:95:80:13:CC:A5:AB:B1:27:C8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858479C112258F0488C9315A70200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c5f56b5d-55a7-390b-8b51-d41ed9cae1c5.roa
Signing time:             Mon 21 Oct 2024 01:00:31 +0000
ROA not before:           Mon 21 Oct 2024 01:00:31 +0000
ROA not after:            Sun 19 Jan 2025 02:00:31 +0000
asID:                     834
IP address blocks:        166.0.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9c:11:22:58:f0:48:8c:93:15:a7:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 21 01:00:31 2024 GMT
            Not After : Jan 19 02:00:31 2025 GMT
        Subject: CN=e050fe27-b17a-4ce7-a131-c1131d151ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8b:fe:79:43:4d:0e:7c:9e:47:f8:03:53:9b:
                    a0:25:ed:d4:e9:7f:76:b7:7e:c6:f8:47:05:92:b8:
                    de:9a:bb:a0:53:52:2a:36:48:8c:6d:81:3a:73:f3:
                    58:97:8a:41:b3:4f:83:74:c0:5b:a9:cb:c8:ec:78:
                    cc:8e:3c:b5:1c:db:11:a0:e6:d1:a3:42:3e:e0:dd:
                    8c:57:93:48:5d:d1:97:13:9e:e6:aa:27:57:2f:b0:
                    0b:f1:8b:a2:c3:12:3e:9e:f4:b2:59:18:97:23:b9:
                    30:9a:a9:1e:59:2f:c1:95:84:11:fc:35:bb:93:e5:
                    3d:03:41:e8:86:a1:d8:04:20:4e:55:0a:0b:51:9a:
                    e7:aa:5d:98:4a:c6:5e:5d:4b:10:7b:7d:e4:ff:5a:
                    4d:67:86:34:f5:b8:a4:27:5d:97:34:57:92:58:91:
                    df:44:44:34:41:9a:76:58:4b:26:9e:7c:81:01:60:
                    23:49:45:89:f1:79:e5:32:d9:be:0b:bf:4c:54:75:
                    9e:d4:1c:07:24:61:77:c1:f1:31:be:c7:7d:78:39:
                    e2:c5:03:a3:63:ea:a3:09:73:ec:17:b4:0f:61:8a:
                    fd:59:1c:60:70:01:28:eb:5b:d8:28:68:11:6e:a0:
                    a0:9d:e2:eb:93:e0:72:41:a5:58:30:6f:09:90:50:
                    17:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9E:F8:BB:05:C9:DC:33:B3:2B:49:95:80:13:CC:A5:AB:B1:27:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c5f56b5d-55a7-390b-8b51-d41ed9cae1c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:32:c8:d4:a1:db:a2:e3:30:d9:5d:12:57:ad:23:0f:87:24:
         5c:ae:7c:a6:53:82:7f:08:77:01:e4:ef:93:25:0f:1c:72:b2:
         92:ef:23:d7:df:c9:49:4a:08:40:5c:81:0d:97:5c:e8:62:b3:
         ad:42:d3:8e:c4:b0:08:62:c3:92:7e:a4:46:a9:e4:7f:62:92:
         fd:1d:74:7f:39:1d:76:8a:a3:dd:a2:f4:4a:eb:db:75:f4:65:
         04:89:91:48:0d:9e:37:2b:7c:45:50:ff:22:5a:24:72:b3:d9:
         78:13:df:25:f3:0d:1c:2c:d6:84:13:d6:65:8c:73:06:f1:8b:
         d5:28:a9:1d:f1:54:1c:d6:1c:65:33:d7:dd:ac:3f:2d:35:cb:
         a1:95:07:e6:fe:90:61:2b:46:a8:22:0b:72:d1:09:54:b2:3b:
         d8:1c:90:c4:b7:e3:01:46:f6:1a:5b:b7:64:1d:17:08:c2:e1:
         bf:1c:07:54:c4:96:74:e3:07:93:1a:4a:cc:1f:63:aa:c7:04:
         08:3a:46:5b:6d:e1:e9:65:70:da:c1:78:21:4c:42:42:8a:92:
         35:c9:3e:77:11:0f:0b:19:0f:4a:48:b0:f9:1a:bb:92:b2:0c:
         09:77:d3:3e:de:10:a4:44:b1:f6:18:29:3c:89:62:30:59:c0:
         35:a7:da:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:19 2024 by rpki-client on console-ams.rpki-client.org