Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e11e8bc5-d834-3738-af0c-243fddb154ca.roa
File:                     e11e8bc5-d834-3738-af0c-243fddb154ca.roa (raw, json)
Hash identifier:          iVkERzsZDAxmqb1qjRFxcJrGCwdPCPjjJMgyDCJ3kcY=
Subject key identifier:   D1:2C:50:1A:71:A9:8C:DB:5D:23:D2:0B:31:3F:7A:2C:E1:F4:FF:43
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847CA3F8748C6828EED9868AD00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e11e8bc5-d834-3738-af0c-243fddb154ca.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     21859
IP address blocks:        166.0.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:87:48:c6:82:8e:ed:98:68:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=48cfeb3b-db74-4f88-8a3b-235158ac07cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ad:b6:8f:5f:72:fd:c8:78:2c:fb:a4:18:f3:
                    7b:a1:44:eb:34:5b:89:bb:0c:fb:e0:5e:0c:e1:4c:
                    ad:4a:1a:41:12:88:c4:6a:30:b0:97:24:eb:ff:92:
                    a7:d3:19:91:dd:f1:e4:2b:5c:33:88:6f:49:de:f1:
                    9f:ec:66:8f:17:1b:6a:9e:2c:e1:88:fb:68:06:1d:
                    60:34:a2:e5:c7:98:61:84:97:df:13:79:34:81:ab:
                    8a:5b:c0:67:2f:03:05:b4:1a:3e:40:09:bf:b1:4e:
                    90:9e:23:92:aa:c0:8f:73:8b:d9:d5:1c:f1:81:78:
                    cc:09:ae:4f:1f:3f:53:a3:38:23:e6:ff:ce:60:ad:
                    1e:67:b2:05:60:b9:0e:36:25:c3:38:85:8b:69:3b:
                    d7:e5:af:4d:c5:23:b5:ba:da:a8:ef:d7:40:9e:2e:
                    5b:e3:c2:f4:af:77:9d:f2:d1:d5:17:33:2d:0e:4d:
                    dc:7e:0a:22:a9:3f:9f:69:49:95:77:c9:f4:b7:e9:
                    ed:9a:52:bc:d2:dc:a1:4f:d2:06:81:ed:c9:ab:d8:
                    c1:b9:39:b4:a1:a1:ea:22:c0:6f:08:55:c4:58:33:
                    9d:52:ea:05:fc:55:4a:02:35:e3:62:66:eb:28:2a:
                    3e:76:79:9c:21:36:78:0b:ed:fb:1b:ff:65:1a:b7:
                    97:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2C:50:1A:71:A9:8C:DB:5D:23:D2:0B:31:3F:7A:2C:E1:F4:FF:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e11e8bc5-d834-3738-af0c-243fddb154ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:52:4a:b0:1d:a0:74:9b:f4:26:b6:21:22:7b:e2:81:b9:d1:
         b7:13:f8:87:4f:20:77:81:c9:c8:d7:98:7c:cb:e1:fc:d5:63:
         cf:6d:6f:d2:30:6b:2e:97:92:78:75:81:bd:ee:5e:1d:bf:d2:
         85:4a:4a:97:ee:3f:2b:74:8f:6b:db:0b:dc:92:60:b8:16:c5:
         d6:21:69:17:dc:72:d8:19:38:46:b8:02:1d:fc:c6:70:61:17:
         86:fd:25:39:25:92:37:3f:73:44:4f:89:1a:da:98:ff:b3:40:
         eb:5d:37:2e:fe:47:57:58:b3:9e:76:60:a4:62:39:4a:17:b4:
         5c:bd:aa:4b:2a:a2:94:f9:97:bb:c5:58:4d:e4:ae:1f:db:7d:
         1f:25:30:35:7a:93:5c:15:7b:74:c8:08:be:02:d8:fe:c4:c1:
         b5:61:d7:a0:e7:ec:08:fc:91:3a:0b:30:7c:86:7e:09:ce:3b:
         e7:97:f8:99:44:c9:c1:df:35:51:34:34:59:9a:c4:81:2f:1d:
         36:82:3c:02:42:1e:b7:56:cc:37:cc:6c:e7:02:e9:3d:65:c9:
         1a:42:b2:ce:c2:23:89:ee:8c:d4:c3:46:8d:f0:6f:53:cd:22:
         6f:99:68:17:38:7a:4b:26:31:e3:0a:00:2a:d1:7f:47:eb:94:
         c5:72:50:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:15:47 2024 by rpki-client on console-fra.rpki-client.org