Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd5c4e71-e271-3d86-b5be-4fcb29e10590.roa
File:                     cd5c4e71-e271-3d86-b5be-4fcb29e10590.roa (raw, json)
Hash identifier:          D0qD0ZYODbx5qNeKZzfiEC3wjglBTp1fT01WbuhLF0A=
Subject key identifier:   F9:A4:41:E7:35:D8:3F:ED:BC:56:61:9C:EB:F5:AD:1A:5B:2B:F6:2F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584790AF75A128B8B4DA389E4980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd5c4e71-e271-3d86-b5be-4fcb29e10590.roa
Signing time:             Wed 16 Oct 2024 23:09:53 +0000
ROA not before:           Wed 16 Oct 2024 23:09:53 +0000
ROA not after:            Wed 15 Jan 2025 00:09:53 +0000
asID:                     8881
IP address blocks:        166.0.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:90:af:75:a1:28:b8:b4:da:38:9e:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 16 23:09:53 2024 GMT
            Not After : Jan 15 00:09:53 2025 GMT
        Subject: CN=99366fe9-038d-456c-b199-b7e10a73f1ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:99:c5:4b:38:1f:f2:03:9b:c2:98:d6:c3:86:
                    7f:a0:bc:77:89:71:6e:5d:a1:ba:df:22:14:b6:06:
                    d2:63:8a:cb:fa:d2:49:5b:d5:52:c2:7f:5a:5d:b3:
                    c3:4c:4d:36:80:33:0b:bb:fd:50:07:7d:1b:b2:a0:
                    c8:e0:ab:f6:e6:43:7c:99:70:6a:c9:8f:30:ce:7d:
                    f4:2e:50:9c:be:ae:cb:d5:5c:86:be:3e:56:66:93:
                    87:54:3d:dc:72:16:4b:cf:20:9a:ec:37:2e:9b:d9:
                    d1:3e:c3:8d:c3:fe:3a:5e:4c:d0:92:c3:29:4e:f3:
                    50:df:c2:ba:8b:37:b6:9a:02:09:1b:fb:24:8a:e9:
                    8c:33:33:ce:05:e3:bf:10:60:b7:9c:fe:ad:75:71:
                    43:7f:4c:89:87:4e:19:e7:ff:44:88:9f:d3:e0:17:
                    cc:8b:fc:93:db:f4:e3:7a:d0:16:f7:eb:68:f4:57:
                    17:a9:2b:7b:6b:27:a1:fe:62:63:a8:8a:9e:55:e1:
                    d4:42:27:19:ad:31:a2:72:51:d8:56:31:d4:6a:55:
                    66:6c:a1:6a:d0:72:31:6c:02:d6:63:9d:6e:52:06:
                    26:36:da:7b:ed:5f:bf:1f:d0:fc:36:9f:ee:df:05:
                    ba:61:f6:01:38:a0:bc:8c:1c:b3:5a:43:1e:d6:d9:
                    46:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A4:41:E7:35:D8:3F:ED:BC:56:61:9C:EB:F5:AD:1A:5B:2B:F6:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd5c4e71-e271-3d86-b5be-4fcb29e10590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:c7:7a:40:32:d4:a0:17:2d:cb:f0:cf:5e:b3:61:e3:b3:30:
         08:00:6e:f1:dc:bf:6d:14:07:45:f3:a1:5a:bf:98:24:1a:64:
         0f:17:ce:88:d8:c7:fd:d5:4c:9e:bc:ca:67:c5:4d:ae:73:2b:
         fc:3b:53:0a:86:6e:42:3e:91:cf:f9:69:30:8a:d9:8d:c1:10:
         d9:16:fc:91:09:aa:02:bf:3e:ca:7e:6e:91:52:20:a5:4f:5a:
         e7:94:3c:a0:2b:89:da:0e:de:c2:32:83:d7:74:20:f2:18:b3:
         a9:c5:13:2b:09:e7:a1:44:a2:1f:b1:62:e5:88:10:21:17:3c:
         1d:94:eb:43:8a:5c:4b:4b:0a:99:db:44:46:98:74:d3:40:99:
         8f:83:f1:82:4a:e1:3f:17:41:b0:47:12:f2:3e:62:73:22:4c:
         c3:f6:3a:1e:61:e8:fa:d4:86:e3:2d:c2:a4:07:85:0b:76:51:
         fc:5d:25:91:ec:61:48:8e:1b:37:7d:71:99:ed:55:db:66:b9:
         46:91:ea:b6:cd:e9:68:19:62:2f:3b:16:04:3e:c5:dd:0a:eb:
         42:12:f9:aa:cd:a7:38:10:45:22:1d:c7:76:f7:3c:7b:cd:77:
         86:fa:6d:ac:cf:cf:d2:d4:7e:fe:11:38:eb:38:e5:92:09:11:
         14:3b:ff:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:00 2024 by rpki-client on console-ams.rpki-client.org