Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cfb29f2c-da2d-3103-a07f-9fc2c7a594b5.roa
File:                     cfb29f2c-da2d-3103-a07f-9fc2c7a594b5.roa (raw, json)
Hash identifier:          yp5AQuN4+7ARozToSJKkyS+2PyjxN3eCrBGpdOE6XLc=
Subject key identifier:   BE:AD:69:15:FD:0B:D3:27:90:67:CC:04:99:E3:4C:01:67:F4:7B:01
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847BD91536CBDBE73FCDAA00280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cfb29f2c-da2d-3103-a07f-9fc2c7a594b5.roa
Signing time:             Sat 02 Nov 2024 01:00:31 +0000
ROA not before:           Sat 02 Nov 2024 01:00:31 +0000
ROA not after:            Fri 31 Jan 2025 02:00:31 +0000
asID:                     205220
IP address blocks:        166.0.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bd:91:53:6c:bd:be:73:fc:da:a0:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  2 01:00:31 2024 GMT
            Not After : Jan 31 02:00:31 2025 GMT
        Subject: CN=481883dc-ab48-4f5b-b1e6-dc6325b274d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:49:3a:98:7e:eb:f2:06:31:36:87:06:7a:c0:
                    52:66:e0:b7:d5:4a:b7:02:34:d9:94:43:f8:8d:ee:
                    f7:eb:a1:50:e6:fd:6b:d9:16:54:f3:fa:67:52:7d:
                    c1:99:66:9f:6c:10:56:7c:06:e6:c4:8f:98:62:46:
                    3c:3e:6e:37:ba:8b:81:5d:fd:53:56:de:a4:8a:60:
                    27:eb:b4:a9:4f:50:24:15:b5:49:6a:52:78:c0:e8:
                    03:c9:66:ba:6c:b9:2a:bd:db:f6:48:4d:97:ae:6f:
                    68:0d:4d:76:62:0d:41:ee:f7:3d:f4:14:27:db:6f:
                    df:7b:02:74:09:6c:52:f4:47:84:70:d7:a1:45:cd:
                    f5:df:19:32:24:1d:cb:8c:64:e9:a8:0f:82:f1:e0:
                    2c:d6:bc:62:53:a4:7b:79:df:53:53:47:18:93:8d:
                    ce:ea:5d:9d:86:32:da:73:ae:a9:e8:56:84:dc:d6:
                    a1:5c:b8:cd:09:b4:dd:f2:9d:21:6d:85:c0:1f:f2:
                    e9:23:33:c4:40:61:fd:df:83:61:85:a2:58:75:df:
                    d8:49:c2:11:ef:e4:8e:fc:d1:7a:cb:ce:9b:da:7b:
                    01:d2:59:62:53:65:28:3e:43:7c:2e:db:a8:e3:f7:
                    d5:ac:39:62:71:80:57:2b:c9:e5:68:eb:ef:e0:00:
                    60:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AD:69:15:FD:0B:D3:27:90:67:CC:04:99:E3:4C:01:67:F4:7B:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cfb29f2c-da2d-3103-a07f-9fc2c7a594b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:a7:41:81:ee:48:bc:2f:8b:73:15:d6:7c:22:ca:2a:9e:f6:
         f1:ac:d3:da:c2:40:51:3c:8c:25:76:f7:38:3a:db:48:e2:ee:
         41:19:88:47:fb:90:f0:b5:1f:a4:eb:44:61:2b:7e:e5:8a:76:
         6a:1a:a2:42:ec:7a:23:56:26:49:0c:e5:c4:9a:9e:9f:21:03:
         91:de:16:f1:c1:ea:b4:c1:d5:24:7f:82:49:69:18:2f:03:86:
         c7:b3:40:fd:b9:6a:c4:b6:c9:05:26:bd:d8:51:ef:ad:df:2c:
         fe:32:7a:51:14:7b:38:80:4f:bb:c3:c6:da:e3:96:f6:2a:09:
         50:33:1b:ae:88:26:05:91:33:dc:e8:90:0c:16:d5:c5:42:7b:
         d4:5a:a3:66:3f:0c:d2:d7:ea:d8:a4:16:e9:01:27:c7:c4:a1:
         a8:4b:7a:e7:81:43:79:e3:dd:71:15:58:af:4c:e5:b0:20:e9:
         c7:f5:74:89:11:9f:83:13:bb:2e:4f:cd:a0:f1:e4:92:f4:00:
         d5:1e:a5:dd:1b:c7:c7:c8:8e:58:5c:cc:68:2d:9b:73:43:4c:
         29:6d:b9:88:26:09:76:31:5c:90:fd:40:a7:a3:50:05:42:7d:
         dd:d2:86:fa:b9:b0:6b:e1:5c:33:a7:a4:3b:cb:99:81:3c:8b:
         01:16:e8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 11 05:24:18 2024 by rpki-client on console-ams.rpki-client.org