Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c96effbd-29c1-3da1-8a6c-91bcef0b082a.roa
File:                     c96effbd-29c1-3da1-8a6c-91bcef0b082a.roa (raw, json)
Hash identifier:          WvAQqhZFnl7qXXdvXUkKgDz0Ke7Wt2b9PZClMIX8gTc=
Subject key identifier:   56:D3:20:DF:07:BC:77:4C:8D:98:CD:45:5B:50:EB:0E:82:10:AE:79
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845278D8650CA06D2A62284CB00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c96effbd-29c1-3da1-8a6c-91bcef0b082a.roa
Signing time:             Sat 09 Mar 2024 21:47:45 +0000
ROA not before:           Sat 09 Mar 2024 21:47:45 +0000
ROA not after:            Fri 07 Jun 2024 20:47:45 +0000
asID:                     215827
IP address blocks:        166.1.68.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:27:8d:86:50:ca:06:d2:a6:22:84:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  9 21:47:45 2024 GMT
            Not After : Jun  7 20:47:45 2024 GMT
        Subject: CN=9077fcbe-690f-455f-8ace-28f4c575e911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:13:15:c2:6f:16:14:0d:63:96:2d:4d:ed:30:
                    12:64:5c:0a:a5:7e:af:7d:e8:03:2d:83:fd:e9:74:
                    57:28:fe:66:34:a2:4e:74:dc:2f:35:7a:42:62:94:
                    c4:18:e9:d5:f6:83:81:42:df:b5:6a:59:2e:da:0a:
                    da:6c:ad:03:75:bd:8a:0d:3f:34:b0:84:17:44:7c:
                    11:3e:e5:b5:e5:fe:2b:35:e4:aa:09:84:83:67:25:
                    40:f7:ef:95:71:5f:33:50:7a:33:d4:4e:55:3b:4d:
                    a3:dc:19:e7:59:02:41:f9:f3:2b:3e:ef:34:3a:7b:
                    10:da:4c:86:9e:84:17:7f:f0:37:b3:a8:0d:f6:2e:
                    a3:1f:ef:82:79:c3:d9:3f:1d:a4:b9:8b:10:ec:c6:
                    e5:c2:87:7b:8f:93:c7:7c:e9:54:ec:e4:44:ea:72:
                    15:91:7a:f4:f3:9b:51:eb:12:51:58:eb:71:00:8f:
                    69:15:d4:fe:1a:7a:4a:a2:55:d9:d6:b3:b4:b4:f4:
                    04:b3:10:c0:e5:71:40:e6:61:2d:29:33:9f:72:c1:
                    13:b6:0f:db:d5:20:be:ab:a7:1c:a7:c8:2c:01:46:
                    c1:7a:46:56:e6:3b:30:97:e6:65:54:58:00:43:7a:
                    c8:c5:98:b6:ef:c4:9d:e7:47:c6:f0:a8:fe:c6:29:
                    52:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D3:20:DF:07:BC:77:4C:8D:98:CD:45:5B:50:EB:0E:82:10:AE:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c96effbd-29c1-3da1-8a6c-91bcef0b082a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:2e:96:ca:e8:ca:30:9b:39:0e:4d:37:3f:9b:a9:ea:b5:8a:
         f3:19:6a:a4:e3:75:09:45:34:e3:cc:3a:13:8c:e6:98:06:75:
         f6:cb:1f:3f:11:c1:b9:b6:2d:b0:de:9c:89:4c:e4:72:bf:e9:
         3d:08:2a:f2:37:52:26:0a:99:00:0e:4d:df:ab:9f:93:f0:a9:
         18:c4:20:66:c5:8f:6b:5d:53:bf:28:e1:09:85:50:e7:ab:17:
         0d:cc:89:f9:f6:aa:f8:0f:50:0c:f3:44:c1:e5:ed:2b:0f:ac:
         4f:86:8e:9a:a6:7f:e7:e0:ec:16:a2:67:3c:9c:71:5a:7e:71:
         ab:02:07:15:65:1d:18:f2:1f:05:f5:dc:63:c4:88:27:01:bc:
         ea:27:a5:be:81:e5:8f:90:8a:cd:eb:65:90:dc:89:fc:7a:e8:
         d4:0f:cc:fb:41:4f:03:6b:14:f8:0d:f4:49:77:fc:38:13:74:
         b5:4a:00:24:b1:02:ea:a2:4d:25:69:96:89:fb:b3:b0:ea:62:
         98:27:2e:99:30:fa:34:0f:77:89:b4:57:70:d8:bd:d0:7a:df:
         9e:29:ac:4e:1c:65:b2:9c:3b:b9:8e:07:dd:6e:0d:3e:e1:ba:
         77:1a:ef:33:4f:28:94:f1:b8:a2:e5:38:31:6b:89:32:27:00:
         66:8a:ac:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:56:29 2024 by rpki-client on console-fra.rpki-client.org