Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d3eb10bb-e61e-3f7d-ba13-23b9f5946a86.roa
File:                     d3eb10bb-e61e-3f7d-ba13-23b9f5946a86.roa (raw, json)
Hash identifier:          Z9wYeYxpJVcyfgTxAQ05zlaj8+3KLjfCsKP/jJBsEOQ=
Subject key identifier:   64:CD:86:A4:FF:4E:88:2C:72:5C:C5:DE:D0:4F:75:C2:51:15:AB:95
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858454655D7B374E2B078E41D8E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d3eb10bb-e61e-3f7d-ba13-23b9f5946a86.roa
Signing time:             Wed 20 Mar 2024 22:25:37 +0000
ROA not before:           Wed 20 Mar 2024 22:25:37 +0000
ROA not after:            Tue 18 Jun 2024 22:25:37 +0000
asID:                     58061
IP address blocks:        166.0.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:55:d7:b3:74:e2:b0:78:e4:1d:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 20 22:25:37 2024 GMT
            Not After : Jun 18 22:25:37 2024 GMT
        Subject: CN=deadb5c2-8d13-4c3e-b772-d459d2cd2c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:82:84:8e:70:cc:18:50:46:ce:7a:87:cf:15:
                    18:78:c0:70:c0:4d:6d:10:a9:ab:ea:8d:1e:30:58:
                    bf:07:d8:38:67:88:ab:f8:d4:dc:39:17:59:af:c9:
                    b6:7f:03:8f:0c:59:82:0a:2e:5c:a4:7a:23:88:f6:
                    be:83:b2:97:21:67:8f:c4:a3:ef:c1:a8:c0:9b:5a:
                    b3:46:18:e2:05:6f:ce:a9:7d:c7:67:4d:ac:dd:c7:
                    a7:0c:b5:3f:f9:bb:36:4c:f7:90:3e:53:c2:c5:90:
                    6b:59:c2:8a:be:4c:ae:2e:c3:ca:40:4f:4a:f5:ea:
                    e9:fe:36:a0:49:a9:a5:0d:a4:08:26:1d:63:30:a8:
                    c8:e5:85:55:70:46:5c:9d:57:cf:7b:9e:51:05:c0:
                    83:14:4f:67:00:24:9a:f6:82:70:05:49:16:23:99:
                    22:b0:e4:d9:a6:b3:d1:e7:fc:06:d3:f4:65:8a:6d:
                    57:46:ab:d7:41:f5:95:68:6e:f8:f1:ca:f8:c4:7c:
                    f5:f3:e2:b9:0a:c9:80:d1:06:34:99:05:f3:90:1d:
                    5d:d7:8c:ee:d3:ea:fa:60:60:ac:82:51:6a:e9:0f:
                    f0:d1:e0:f2:fe:93:7c:06:c7:65:9e:4d:38:07:47:
                    44:ba:bb:34:57:36:fa:41:de:10:e4:fa:92:17:31:
                    a1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CD:86:A4:FF:4E:88:2C:72:5C:C5:DE:D0:4F:75:C2:51:15:AB:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d3eb10bb-e61e-3f7d-ba13-23b9f5946a86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:5c:c6:6f:32:f6:e6:0d:d6:a0:b9:10:a3:a4:ad:e2:b0:07:
         b6:42:08:16:bf:64:da:f7:48:8a:ad:97:14:a9:3f:fc:37:41:
         89:c9:f8:6c:3b:5e:86:c3:96:19:ee:28:5b:ff:22:b5:35:3b:
         b4:78:02:37:79:68:61:c6:ac:f3:3a:9f:2d:75:06:ae:a7:7c:
         6d:d8:9d:e0:b4:bf:0f:c8:ae:d8:55:b8:a1:37:f8:a2:03:00:
         af:37:2d:eb:86:c4:d9:46:ba:13:40:a4:d9:c0:be:1d:f4:06:
         e7:c2:f5:c0:85:09:e1:2b:38:bf:95:92:f2:4f:cf:b0:84:e4:
         37:c2:9a:cd:55:e4:dd:ec:8d:cd:50:a5:34:5f:ca:c6:ab:78:
         00:52:33:04:c9:61:78:0b:fb:36:da:0f:3c:7b:01:db:2d:a5:
         0a:0a:d7:7d:a7:e4:ac:fb:60:21:5f:68:56:a4:a4:ca:39:3f:
         ea:5c:a5:35:a3:e0:03:95:59:75:98:08:69:44:f7:2d:af:be:
         17:e9:e4:bf:f6:cb:36:12:5f:27:8a:7f:69:34:cb:6c:2c:0a:
         ee:c7:1c:1a:6b:32:b6:98:8e:06:84:83:68:43:99:de:c4:90:
         89:71:a1:09:d1:6c:1c:86:2a:24:79:1b:62:d5:a0:58:a2:d4:
         51:e6:f4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:56:29 2024 by rpki-client on console-fra.rpki-client.org