Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d2c78023-410d-3641-bfed-7f18a7e1a0d1.roa
File:                     d2c78023-410d-3641-bfed-7f18a7e1a0d1.roa (raw, json)
Hash identifier:          96HtxDEjW+B3Q4VS2d423efd30CWnbLUAEQeYG+xoZ4=
Subject key identifier:   AF:84:05:BD:97:8B:B8:FF:DD:B6:CB:C3:12:20:65:6D:C0:2E:10:74
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584773965ECF7B15E778E2DDB900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d2c78023-410d-3641-bfed-7f18a7e1a0d1.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     44477
IP address blocks:        166.1.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:5e:cf:7b:15:e7:78:e2:dd:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=72a57a98-c034-4b7c-aba2-23f7f086410c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:36:0c:7a:67:30:20:fb:72:15:cb:37:66:d6:
                    cf:ba:80:ae:a8:81:7b:12:43:8b:7e:0f:7d:06:44:
                    5f:a1:01:e5:7d:58:4e:89:b4:36:ea:02:b7:b0:53:
                    12:25:ce:7d:68:be:eb:f1:74:4b:62:7c:e2:c4:59:
                    d2:dd:9d:58:29:ab:08:bd:37:54:15:bf:21:24:ec:
                    4f:9f:05:32:de:b9:c7:e7:0c:57:ca:a0:10:af:d4:
                    da:ef:df:b2:43:d1:39:63:7a:7b:8e:7e:cd:e4:23:
                    65:99:17:ed:f4:43:97:d1:b7:d6:99:e6:8d:0e:ca:
                    57:50:01:8b:dc:3d:88:ee:20:47:18:6f:12:1f:4e:
                    0b:c1:d4:89:d1:ee:68:c8:fd:6c:4e:71:d3:1c:ba:
                    5a:09:b2:0b:b7:d6:f6:26:2f:27:8d:26:2a:94:7b:
                    33:dc:77:ec:74:f6:f1:a5:bc:20:6a:10:a3:91:27:
                    cb:e2:03:b9:0b:2c:2d:34:d6:1c:03:e0:7a:50:59:
                    bc:ce:41:bb:bc:5c:a6:30:34:e7:39:a8:23:5c:3e:
                    95:5a:3c:bb:33:f4:f6:99:98:de:58:84:69:57:92:
                    21:fa:ad:bf:53:2a:44:28:9b:07:59:a9:b9:0a:e9:
                    27:5b:27:c0:bf:94:0d:04:ec:53:cb:13:1b:75:fd:
                    81:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:84:05:BD:97:8B:B8:FF:DD:B6:CB:C3:12:20:65:6D:C0:2E:10:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d2c78023-410d-3641-bfed-7f18a7e1a0d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:02:a9:a4:6c:4f:d5:ce:38:c1:8d:6d:ae:42:c2:b4:ba:b2:
         c0:20:a4:52:16:00:e1:cf:69:34:74:bf:26:20:a9:d2:b7:f5:
         79:d9:58:28:e6:e1:40:4b:0d:9a:88:dd:50:27:c2:bb:25:97:
         4e:a2:5a:96:3b:64:9f:e4:dd:60:b4:f8:31:ab:c9:a4:4d:7c:
         9f:2d:6e:8d:32:c5:e5:53:41:ec:bb:02:71:be:69:bf:62:62:
         59:0d:4d:96:e3:f0:98:10:e5:f6:23:8b:9c:af:eb:64:de:c9:
         3c:09:76:21:9e:8b:3f:bf:6f:e4:b4:d2:6a:77:97:35:df:a6:
         dd:e2:0a:0b:50:9c:5f:4e:a5:97:f1:de:b7:6a:97:98:8a:f6:
         8c:c5:f6:03:69:92:70:09:65:9d:13:b2:c7:40:be:6e:7a:00:
         16:dc:6d:89:5e:bb:d9:20:ab:5c:1d:70:58:71:01:d9:3c:4f:
         71:c0:ae:4f:0c:3d:81:3c:9f:41:1a:1a:06:28:d9:d9:5a:a9:
         05:95:60:78:0d:88:a9:a0:95:e2:6e:d7:73:f2:dc:a1:b3:47:
         91:f9:76:fc:8d:f5:91:ff:47:b3:07:0c:15:51:80:04:3d:50:
         9e:0f:52:ef:92:d0:e0:5f:95:5e:d8:a5:7b:89:f2:5f:36:ad:
         72:85:1f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:27 2024 by rpki-client on console-fra.rpki-client.org