Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf874917-27f8-3949-9b00-f01b9d427756.roa
File:                     cf874917-27f8-3949-9b00-f01b9d427756.roa (raw, json)
Hash identifier:          UqpISlEwZAeBn0kWh2gAoKVPDorMsjlVY09xKJzXhYk=
Subject key identifier:   C3:CF:14:8C:38:46:43:8C:73:42:E0:9D:5B:C2:D6:37:BC:94:5B:B5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847670625EEF3E6E735B4E3C160
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf874917-27f8-3949-9b00-f01b9d427756.roa
Signing time:             Wed 02 Oct 2024 01:00:31 +0000
ROA not before:           Wed 02 Oct 2024 01:00:31 +0000
ROA not after:            Tue 31 Dec 2024 02:00:31 +0000
asID:                     55286
IP address blocks:        166.1.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:67:06:25:ee:f3:e6:e7:35:b4:e3:c1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  2 01:00:31 2024 GMT
            Not After : Dec 31 02:00:31 2024 GMT
        Subject: CN=b811c6ee-eaff-4409-953c-19df106acbe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:60:74:68:0a:62:e0:2f:e0:b5:a5:bb:bc:0b:
                    15:18:72:b0:6a:2e:92:b6:b9:70:98:ce:ef:41:f0:
                    db:a7:1c:5c:3e:dd:53:d2:c5:c6:ed:6a:c1:72:df:
                    17:5b:77:c4:9f:2e:17:14:85:ae:21:94:eb:e8:ea:
                    b0:fb:b5:27:4c:bb:52:dc:2f:7b:35:7a:b8:bb:56:
                    c5:f2:b8:be:97:cd:7e:76:1a:6e:68:08:46:d6:9e:
                    4b:b0:da:19:b5:02:65:c0:6a:77:24:ee:62:f3:76:
                    49:c1:10:ba:34:b0:35:76:9d:19:f5:5e:1e:bc:ff:
                    5f:c6:b8:1b:8c:5c:17:ce:45:0d:c7:b0:02:4d:97:
                    b9:32:f8:4f:ac:77:c3:28:44:03:7f:a5:50:5e:60:
                    1b:fb:32:50:0b:0c:a5:a1:f8:c0:ec:fa:da:f6:90:
                    b6:63:59:62:3a:3d:21:c4:41:9b:a7:87:b8:9f:d4:
                    75:72:b4:14:3a:64:7d:1d:e5:7a:27:b1:e2:3f:9b:
                    43:70:77:19:4a:e2:14:bd:20:0c:8b:1d:65:23:c9:
                    22:39:ba:4b:ca:f3:66:d0:dd:df:37:01:61:db:89:
                    00:a0:ba:7b:c4:7f:de:d5:a2:e3:db:5a:57:c1:9f:
                    af:a5:d4:e7:42:9b:17:e7:e9:99:b2:82:f1:4e:ed:
                    36:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CF:14:8C:38:46:43:8C:73:42:E0:9D:5B:C2:D6:37:BC:94:5B:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf874917-27f8-3949-9b00-f01b9d427756.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:4a:b7:54:ff:54:f3:2a:51:c4:0a:33:ec:71:53:fa:54:7f:
         ce:1f:f2:a9:5e:47:ce:cc:61:7b:50:df:b7:ae:95:2f:67:8e:
         39:c4:c7:fc:4e:21:c6:8c:75:7b:61:80:7f:ac:d2:f7:2a:e4:
         4c:9b:11:ff:6c:6b:59:fb:d0:28:b4:e8:32:2f:40:f3:09:37:
         3a:4d:b9:51:97:1f:ef:51:da:d9:3e:31:ed:4b:5f:77:a5:dd:
         d5:55:62:bf:49:1f:a7:b1:b0:da:e3:da:ea:5e:72:9c:2f:f6:
         f4:08:d0:41:09:f2:8b:15:c4:e8:bc:7b:8e:b0:ab:63:8f:25:
         e2:88:a6:a6:8d:85:f0:e4:47:8c:60:ef:9b:61:88:09:1f:ed:
         de:ed:82:c1:29:5b:23:48:26:bf:76:28:f3:25:db:1f:0d:60:
         04:9f:6c:fd:a5:ee:d5:23:26:01:b6:48:91:e6:ae:8a:d6:a9:
         51:e6:48:b1:3c:0d:41:41:d0:95:9a:f3:6f:c6:11:f8:02:70:
         e2:0f:11:25:09:8c:57:cb:5d:3e:1c:71:23:cc:1e:30:ba:d0:
         86:58:db:79:d9:5a:3d:ea:b9:33:45:c7:d6:ff:dd:38:77:21:
         64:c5:8f:c9:d9:b3:1e:35:02:c7:3d:f8:f1:90:8b:91:19:55:
         a7:f3:6d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:48 2024 by rpki-client on console-ams.rpki-client.org