Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dbf6b380-8993-3e4f-8415-445caf62722f.roa
File:                     dbf6b380-8993-3e4f-8415-445caf62722f.roa (raw, json)
Hash identifier:          qoEu4MLTmD3f4EBMkJAPcFTc9JkzMTeAX99Yr2tgBFA=
Subject key identifier:   7A:DB:91:D5:B8:FF:50:43:10:D0:4D:79:0E:87:06:82:7D:EB:A2:01
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847643B7CFD55D69D99008E36C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dbf6b380-8993-3e4f-8415-445caf62722f.roa
Signing time:             Tue 01 Oct 2024 01:00:31 +0000
ROA not before:           Tue 01 Oct 2024 01:00:31 +0000
ROA not after:            Mon 30 Dec 2024 02:00:31 +0000
asID:                     150249
IP address blocks:        166.0.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:64:3b:7c:fd:55:d6:9d:99:00:8e:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  1 01:00:31 2024 GMT
            Not After : Dec 30 02:00:31 2024 GMT
        Subject: CN=46b622c5-3f02-459b-93f4-9ee48df06264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:30:e5:15:40:93:f8:ca:f8:b6:61:3f:21:fd:
                    d9:a7:b4:5f:58:3a:eb:28:b1:d8:ba:22:6d:54:8b:
                    54:12:ae:1f:c5:8c:38:86:4a:8e:11:18:8b:2a:64:
                    c8:f6:d2:ef:e8:57:12:8e:56:73:72:ab:02:96:aa:
                    d1:35:af:b9:bc:e1:73:4d:4e:32:9e:91:1d:4c:c9:
                    7a:15:ef:56:8a:ff:50:e6:0c:0e:ce:d5:ae:09:fa:
                    f5:94:85:fa:6c:03:3b:ff:7e:e2:0a:1c:56:83:57:
                    93:ba:5d:57:dd:63:69:c4:17:e6:1e:5d:2b:18:d0:
                    ae:7a:98:21:44:c5:96:87:7c:c1:28:e4:f8:51:0b:
                    41:3f:db:9a:4c:e4:30:76:f8:f1:33:7a:96:e4:17:
                    8f:91:36:c4:a7:4a:fc:e9:82:45:69:0e:16:12:57:
                    df:11:51:7a:d4:95:e9:7c:10:cc:c3:0b:e2:64:7e:
                    db:7f:d1:d1:7e:87:fb:b7:75:d9:96:ee:58:85:4d:
                    5d:bd:be:32:2f:92:29:e4:94:e1:2f:b4:55:2d:5b:
                    0f:32:08:55:b3:84:bd:e8:44:ff:31:fc:f7:00:24:
                    ce:b1:84:69:12:6c:25:eb:6c:4c:51:65:6f:43:a3:
                    8f:4f:97:00:f0:d1:b1:3f:45:5f:fd:cb:40:52:00:
                    62:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DB:91:D5:B8:FF:50:43:10:D0:4D:79:0E:87:06:82:7D:EB:A2:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dbf6b380-8993-3e4f-8415-445caf62722f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:6b:5c:e1:7b:8d:17:98:f1:9c:be:16:68:e3:57:57:48:08:
         82:23:fc:ca:ae:66:a6:eb:16:96:65:b4:31:32:71:69:69:22:
         80:80:3a:fb:96:da:ba:54:d5:0d:8c:75:f5:55:4f:c4:c4:66:
         ac:2f:da:9e:68:5e:5d:04:a6:96:b7:7f:b6:0f:af:c7:12:11:
         68:c4:cd:29:b4:b4:8f:de:2a:eb:e3:13:a2:58:2e:cf:22:c9:
         b8:d2:16:9b:e3:36:b9:34:94:f5:eb:92:8a:a3:2d:56:60:0b:
         64:c2:90:61:ff:7e:df:ef:28:3e:7a:2e:c3:c6:51:a2:9d:02:
         77:db:0b:0f:e3:34:2d:96:e8:9a:18:63:d4:50:4f:ab:d7:28:
         fd:6c:e0:ba:dd:7d:95:4a:20:a8:a2:c7:16:c2:20:f6:1b:e5:
         a5:91:c3:25:8a:cd:b6:a8:0b:ff:3b:58:66:9e:fe:e7:b8:3b:
         72:25:cb:cb:8c:e5:44:4e:68:c9:c4:0c:0f:97:2c:6c:53:84:
         e7:1f:21:97:f7:3f:77:f9:2c:cc:cc:6a:cf:49:f6:67:30:24:
         e5:93:fa:5a:e7:5c:d2:e8:34:69:39:b8:60:48:fe:99:55:dd:
         ce:5b:3b:25:4a:0f:03:10:b9:28:21:66:14:c0:96:00:b9:df:
         9d:49:10:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:49 2024 by rpki-client on console-ams.rpki-client.org