Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d68d6d32-c5a9-3ff8-9e1b-fc1ec5d3fb01.roa
File:                     d68d6d32-c5a9-3ff8-9e1b-fc1ec5d3fb01.roa (raw, json)
Hash identifier:          sKFwE04RIeg+WDpxz2EbSS5rvaz5WH2tbdlJ/XO4W18=
Subject key identifier:   BC:EB:6C:49:1C:62:82:DD:92:AF:EC:B9:D4:4F:3F:A4:15:5A:30:5B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584790AF75787D5266CFF01545C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d68d6d32-c5a9-3ff8-9e1b-fc1ec5d3fb01.roa
Signing time:             Wed 16 Oct 2024 23:09:53 +0000
ROA not before:           Wed 16 Oct 2024 23:09:53 +0000
ROA not after:            Wed 15 Jan 2025 00:09:53 +0000
asID:                     8881
IP address blocks:        166.0.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:90:af:75:78:7d:52:66:cf:f0:15:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 16 23:09:53 2024 GMT
            Not After : Jan 15 00:09:53 2025 GMT
        Subject: CN=7bef8ce1-a614-474b-aad4-88e5fa4fc0dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d5:c7:8b:b2:46:de:fd:a9:96:4d:c1:13:ff:
                    ac:f1:12:f4:e3:bf:5e:ef:f6:71:7f:f9:f1:d1:32:
                    e2:06:9c:6e:72:a1:0e:04:c7:92:6e:d3:8e:ae:7e:
                    ef:ad:a5:2b:f7:e0:80:5c:34:b6:fb:b8:1b:7f:aa:
                    e8:4e:b1:0e:9a:54:03:a2:9f:b3:b3:2d:86:2a:95:
                    8e:9a:d5:03:e9:1c:90:0e:de:eb:07:4c:99:c3:f8:
                    27:6d:65:d5:e1:78:16:cc:8c:93:fd:b3:2c:45:89:
                    e1:96:94:90:50:bc:6e:da:8d:99:dc:2d:fd:13:0e:
                    5f:83:0a:3e:a1:89:41:73:97:63:16:01:60:90:5f:
                    b8:ac:64:9e:f5:bd:0e:7f:7e:79:9a:44:d5:1e:cf:
                    40:ef:f3:4e:fb:6e:86:e9:c7:6f:64:35:e7:fe:8c:
                    07:af:37:5a:98:6f:55:fc:af:68:0c:5c:94:9a:c7:
                    dc:f2:0f:41:88:70:2f:e0:8e:4e:d7:c1:38:92:ed:
                    8a:fb:d7:f8:b8:38:b2:1f:ce:a3:f6:e4:7d:cc:60:
                    78:17:22:aa:a8:89:f9:83:f6:cb:43:3c:05:de:3c:
                    72:f7:35:82:ab:e9:b8:7b:49:01:79:5a:2f:57:72:
                    13:58:fa:d8:8f:99:6e:87:59:99:18:95:78:af:9e:
                    08:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EB:6C:49:1C:62:82:DD:92:AF:EC:B9:D4:4F:3F:A4:15:5A:30:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d68d6d32-c5a9-3ff8-9e1b-fc1ec5d3fb01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:6f:0a:af:6d:d6:8a:5d:96:10:8f:bd:11:16:ec:f6:cf:e3:
         ec:0e:9b:bd:d1:c9:9f:27:bd:b9:d4:a3:54:1b:b3:e4:df:c4:
         1d:7d:67:24:d8:9f:5f:e5:cb:ee:5c:53:a1:28:2b:ff:d7:85:
         8a:b6:b2:72:cd:6d:8e:fe:41:94:7c:73:42:33:ff:29:cf:55:
         b3:0f:e0:e6:d2:9d:b1:7f:be:0b:55:e5:b0:21:49:fb:ac:c1:
         77:26:61:e5:04:b3:cd:eb:0e:b8:ab:cf:86:cb:8f:a9:42:f6:
         07:6e:cd:58:28:60:4b:84:f2:99:c6:48:b6:85:c6:bc:37:42:
         4e:7f:bc:9f:5c:a9:c5:23:db:f8:ee:a1:bd:b0:f6:0c:0a:0d:
         04:99:29:a1:49:13:d7:3a:43:aa:c1:f1:a7:4d:dd:e7:37:da:
         7f:a7:e5:35:35:c5:b3:8f:2e:0f:39:fe:7f:00:8a:98:36:da:
         7e:1a:91:27:af:62:ef:9d:81:18:a9:ce:13:11:cc:51:fc:33:
         b9:41:8e:4e:4e:c3:8e:9c:29:98:bb:d8:fe:7b:90:72:15:18:
         3a:b6:20:d3:18:94:9b:81:99:4a:9c:09:b1:c5:fc:f5:21:7f:
         54:a0:78:15:5d:55:b8:1e:2d:f4:89:b1:73:4c:f7:eb:3d:2d:
         18:a7:ee:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:32:24 2024 by rpki-client on console-fra.rpki-client.org