Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc1854da-b688-3405-aa93-0a182377317d.roa
File:                     cc1854da-b688-3405-aa93-0a182377317d.roa (raw, json)
Hash identifier:          A2ce/I0+Rxv3rqEsszphqRyd3JkOw94qqmk9EkRx5f8=
Subject key identifier:   EC:49:D7:C3:93:4E:BB:FA:23:C4:E0:C3:ED:84:F1:F7:49:37:E8:F7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847E62B6FCE906F38AB72955F40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc1854da-b688-3405-aa93-0a182377317d.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     58061
IP address blocks:        166.0.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:6f:ce:90:6f:38:ab:72:95:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=5a644f87-1c37-47e1-82fe-588b5248c8bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0a:74:b6:75:bc:50:e5:a9:0a:53:34:fa:8d:
                    de:58:03:cc:e0:aa:91:10:d8:2a:86:cd:ea:7a:cc:
                    93:4c:72:c4:6e:97:f8:65:3a:97:90:19:d9:55:a0:
                    e7:00:5a:fb:6d:d0:6b:27:3e:ac:d7:d7:90:da:c1:
                    6a:f3:dd:9e:24:a3:1c:be:ff:e1:96:a9:e9:05:25:
                    80:72:f0:5b:a0:3b:6e:47:39:d9:bc:0e:43:7c:02:
                    74:25:7f:17:3a:08:0e:58:40:e5:bb:8a:89:c2:fa:
                    35:ad:b6:8f:fc:39:d1:40:4d:13:74:13:d4:79:22:
                    b5:70:81:42:e0:ac:bd:53:01:eb:73:b5:bf:d0:24:
                    33:db:86:f4:fe:a5:ff:cf:c2:ca:0c:01:e7:49:37:
                    29:a5:7d:e1:53:f4:de:40:05:de:c7:15:ce:48:42:
                    94:4f:18:be:11:a1:1f:93:88:74:e0:ce:98:83:f8:
                    90:d0:5a:6b:57:f0:4f:28:05:55:a8:fd:73:d6:a0:
                    86:fd:23:9a:d1:95:2e:d6:4b:39:04:a4:02:19:2a:
                    a7:15:65:8c:1c:38:5c:ec:af:a8:72:d6:30:26:81:
                    28:39:8d:85:61:2c:c0:8e:06:bc:11:2d:c6:a1:cd:
                    d3:02:d7:5b:e5:cf:0f:b9:b9:f5:36:99:30:f6:43:
                    3c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:49:D7:C3:93:4E:BB:FA:23:C4:E0:C3:ED:84:F1:F7:49:37:E8:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc1854da-b688-3405-aa93-0a182377317d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:d4:4e:ca:5d:3e:ed:83:ff:6f:95:9e:26:2d:f4:0b:05:5f:
         97:09:0f:a3:24:60:24:9e:9e:d1:b9:15:60:b3:b2:5c:26:39:
         8a:fb:8a:5a:10:e4:ee:33:1c:0b:14:e6:39:95:b9:14:8d:a4:
         e9:f4:7c:5e:7d:78:1e:9b:5b:47:9c:9c:ee:73:62:e5:ad:42:
         5c:a9:41:6a:c4:fb:59:f5:5a:3b:b2:f5:48:8c:14:9c:9a:a0:
         2f:6d:70:ad:6c:fa:92:cf:31:12:14:ad:ab:07:50:8f:e2:45:
         94:8c:b3:63:9e:c3:3b:69:5e:50:0d:a1:25:47:b9:5a:a3:70:
         2f:00:16:75:32:a1:1d:83:e1:d4:2e:26:ec:4a:c0:fa:77:b6:
         ff:bb:2e:52:cc:f5:4f:c4:48:c9:1c:74:e1:8b:0c:cd:80:8c:
         f7:51:58:19:06:9f:50:fb:fb:bc:70:8a:bf:59:77:b0:b4:65:
         9c:8b:64:1e:98:ef:f0:1a:07:f3:3a:8b:11:74:0a:3c:2d:f9:
         ad:08:15:fe:c7:bf:e5:ba:4b:2c:2c:fe:b3:33:eb:81:fb:7f:
         1e:6e:04:3c:b4:6e:23:dd:3e:db:5b:74:f1:52:b6:28:c6:8a:
         39:be:a5:b2:3a:2a:57:2e:d0:c3:bd:d5:b4:12:eb:77:13:3b:
         ee:7e:46:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:27 2024 by rpki-client on console-fra.rpki-client.org