Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eea54c12-23a7-3dcf-bef7-baf54d32feca.roa
File:                     eea54c12-23a7-3dcf-bef7-baf54d32feca.roa (raw, json)
Hash identifier:          XOWhzasp/VjxDRHfE1sQ0CBLP7Dqk3z0kUGLP1LIIbQ=
Subject key identifier:   C0:7F:D5:44:E2:E6:3E:B8:85:5A:95:FC:97:F9:63:37:A3:86:61:5F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584731FB9C75B3A0F7D077D81880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eea54c12-23a7-3dcf-bef7-baf54d32feca.roa
Signing time:             Fri 13 Sep 2024 01:00:32 +0000
ROA not before:           Fri 13 Sep 2024 01:00:32 +0000
ROA not after:            Thu 12 Dec 2024 02:00:32 +0000
asID:                     58061
IP address blocks:        166.1.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:31:fb:9c:75:b3:a0:f7:d0:77:d8:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 13 01:00:32 2024 GMT
            Not After : Dec 12 02:00:32 2024 GMT
        Subject: CN=8b8b87fd-c45c-491e-bcf4-be4f8730276c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4b:81:02:cb:b2:f6:40:e4:80:6f:57:f8:07:
                    53:0f:48:b8:40:42:1d:06:82:59:8e:ab:19:23:d5:
                    7b:7e:bd:23:19:82:3b:e9:e2:4a:ad:a4:8c:26:cb:
                    36:35:c0:04:4d:06:86:7f:5d:1b:43:9f:50:fc:88:
                    14:bb:f1:68:95:6b:bb:40:56:f2:a9:87:a4:fe:f4:
                    34:83:05:d0:44:9c:e9:7a:1c:c2:79:f7:e7:a7:c1:
                    59:d6:b9:6c:12:1e:43:c2:00:b1:20:5f:0e:8e:f7:
                    60:8c:58:7a:0a:62:31:5e:80:20:97:31:32:43:0c:
                    34:c9:41:d8:26:49:e1:be:c8:c5:48:d0:95:d3:5b:
                    51:c3:a8:bc:fe:91:ba:a7:de:f5:fd:b2:9f:67:2b:
                    c3:35:c9:75:8f:1e:fa:81:8d:0a:b9:b6:60:29:67:
                    b2:8b:0d:f8:06:4d:b9:33:30:66:08:0a:b0:0f:30:
                    d1:7f:74:c4:07:e1:86:42:0f:3b:e1:89:60:b4:bc:
                    c3:64:32:2b:a5:ce:7f:0c:d2:7a:84:c0:ef:8d:89:
                    be:7e:f2:da:f9:d8:fe:97:ce:ec:af:3b:45:a3:26:
                    69:b3:0d:24:cd:d4:26:9b:47:25:cf:b6:32:1f:dd:
                    f5:c8:1c:1d:5d:68:89:d7:e7:2e:22:7b:17:d3:ed:
                    ba:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7F:D5:44:E2:E6:3E:B8:85:5A:95:FC:97:F9:63:37:A3:86:61:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eea54c12-23a7-3dcf-bef7-baf54d32feca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:f8:03:37:22:83:37:52:8a:0b:55:bd:83:dd:55:9b:47:b4:
         09:85:e2:6a:fb:8a:61:de:f2:e6:ba:9d:43:1b:53:dd:2b:ae:
         a0:5c:a9:7c:c9:d5:b1:60:0b:47:e7:24:af:7a:05:44:cf:2b:
         ca:ce:e5:aa:19:35:8b:98:e1:b2:2b:12:ad:9d:25:41:78:d9:
         f8:1a:52:49:6e:c2:22:7a:51:a1:ba:40:5a:85:a6:b8:a6:21:
         29:51:76:95:3b:56:9b:0b:51:b7:19:13:8e:66:ca:15:32:40:
         69:b8:82:be:01:03:28:63:a5:34:ce:0e:f2:7e:f8:56:b7:d2:
         c0:39:50:78:9d:28:ab:18:af:ac:ed:e0:48:bc:82:91:6a:d4:
         93:49:57:79:d7:fd:13:e2:9a:ef:15:f1:8b:1a:d7:df:bb:53:
         69:16:e6:77:ae:64:95:e2:78:81:49:d5:fe:be:c2:4f:d7:87:
         ab:30:e3:76:09:c7:6c:8c:35:e1:02:f3:cd:82:56:44:66:af:
         db:2f:14:54:86:02:8f:d9:17:5f:5b:cd:f3:12:4a:97:24:48:
         5e:02:a8:31:e1:91:c7:53:c3:0e:d6:07:a2:2f:3a:25:41:6f:
         12:c8:71:25:20:16:99:32:65:d6:3a:ff:be:f1:dc:3e:2a:f6:
         72:1b:ce:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:02 2024 by rpki-client on console-ams.rpki-client.org