Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dc67eb35-e99e-3456-b43f-57c539c5877a.roa
File:                     dc67eb35-e99e-3456-b43f-57c539c5877a.roa (raw, json)
Hash identifier:          AwWWZzPqo1bjFI7yuJfbS/77O6YmvMT/TZG+tccIRPg=
Subject key identifier:   C5:65:B0:7E:15:99:3B:ED:12:A9:70:40:52:B3:BD:AC:A4:D6:0E:47
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858475EA616011CFDCC39DE23A8F0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dc67eb35-e99e-3456-b43f-57c539c5877a.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     174
IP address blocks:        166.0.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:16:01:1c:fd:cc:39:de:23:a8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=76c66157-1592-41cd-abc3-bff212a260af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:44:2c:81:7d:2c:30:b0:67:9b:b8:61:ce:45:
                    36:33:89:66:1c:89:dc:48:e8:04:c2:69:7c:3e:de:
                    7f:6c:76:d3:47:7b:60:01:4a:60:9a:d6:ff:2a:19:
                    3b:eb:d1:da:ef:a2:cb:ae:b9:1f:a9:14:74:d9:21:
                    a4:31:2e:95:b9:38:d1:0f:2b:9b:2e:36:40:6a:0f:
                    56:5a:c5:f4:ec:ab:0c:20:d0:3f:e8:5b:d7:12:b1:
                    d7:79:0b:04:a5:55:21:8f:a0:0c:d8:61:22:2a:8a:
                    1a:78:21:81:7c:ee:78:15:89:06:c0:59:c2:50:96:
                    fa:bb:c4:af:77:92:e5:d6:6b:89:7f:d3:2b:78:8d:
                    1e:71:d6:55:ea:09:3a:82:83:88:fc:bc:73:d0:44:
                    3a:04:53:46:93:21:e9:8c:98:c7:3b:db:86:a6:4d:
                    98:eb:25:33:24:07:55:29:91:3f:4c:93:f2:43:59:
                    f9:bc:a9:56:b0:3b:8e:5c:0a:b2:54:50:29:6d:1f:
                    17:08:0e:88:d8:c1:e0:6d:30:59:6a:5f:f7:d0:ee:
                    0e:ca:09:b4:77:3d:5a:e9:6a:79:9d:63:fe:fc:cf:
                    ef:36:95:3b:63:3d:2a:ea:b3:e5:72:90:0b:58:7c:
                    59:2a:54:29:48:f4:91:34:da:4c:8e:4c:0e:e2:22:
                    d5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:65:B0:7E:15:99:3B:ED:12:A9:70:40:52:B3:BD:AC:A4:D6:0E:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dc67eb35-e99e-3456-b43f-57c539c5877a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:61:10:5a:12:ca:85:f3:9a:59:74:ed:d9:01:d6:fb:bc:26:
         4e:f3:d1:dd:8d:51:f9:47:7a:00:55:5f:63:01:ab:42:2b:b0:
         54:0e:a8:ab:31:53:ae:58:1e:d1:c0:b1:bf:16:8d:fd:99:cb:
         cb:77:03:ce:63:cc:74:23:2b:b7:e5:db:b0:cb:98:82:6a:14:
         aa:87:3c:ae:10:98:a0:5c:1c:bd:15:f9:e8:4a:7f:8f:71:bc:
         4e:aa:d3:b2:80:45:55:62:04:92:e5:c3:da:73:b2:8c:7d:ea:
         19:d8:ad:ac:df:af:0e:e1:a2:7b:d2:66:1a:f2:1a:a4:4a:0e:
         cd:67:fe:16:68:45:74:c3:28:73:82:19:83:b3:07:52:f0:28:
         b8:06:07:26:4d:70:b9:6b:44:89:42:b2:bc:dd:ef:d7:ef:7a:
         8d:bf:80:40:99:56:7e:54:ff:1a:86:86:ae:01:50:5d:a5:9d:
         4a:6c:a3:2f:ea:f2:a9:a5:0e:74:d8:f0:2f:aa:02:0b:a1:8d:
         b1:85:f4:e4:9b:5d:be:03:f7:d7:72:72:23:c5:d8:84:af:cf:
         b9:ee:a3:5f:c3:5f:a6:7d:fb:8b:4e:ba:a5:19:29:f5:a1:0f:
         9f:4a:34:57:d8:94:b1:00:19:98:ab:a7:35:eb:3b:a2:33:7c:
         24:78:de:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:27:16 2024 by rpki-client on console-fra.rpki-client.org