Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f33871ce-64ca-33ec-9576-2176a24bacd7.roa
File:                     f33871ce-64ca-33ec-9576-2176a24bacd7.roa (raw, json)
Hash identifier:          utltl5sFScR7a31bdr0oPIVge9PEaCPQibflRExxZfg=
Subject key identifier:   45:C7:49:8C:D5:78:63:42:62:E7:49:CB:8D:25:FD:0D:40:5E:04:37
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847792BAFDF4DCB5B984E5D78C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f33871ce-64ca-33ec-9576-2176a24bacd7.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     6939
IP address blocks:        166.0.190.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:af:df:4d:cb:5b:98:4e:5d:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=93a41773-3e70-44fa-83a3-a2b725ff773d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ae:57:69:62:cc:0f:52:47:e3:34:ef:25:57:
                    2c:64:58:61:79:a0:8c:b0:20:38:63:46:2e:57:54:
                    84:f3:63:4c:e3:1e:9b:03:85:f2:b9:0e:7d:6d:b2:
                    b6:0d:84:93:56:37:1b:3d:a7:c3:73:c2:d3:82:55:
                    e3:a4:d1:a1:35:a1:e9:b3:dc:79:04:da:27:82:97:
                    39:81:3f:c4:77:09:78:c8:1d:35:89:6f:d0:b8:90:
                    d0:aa:3d:5f:b2:95:03:b1:b3:22:26:9e:48:59:a9:
                    a2:84:c5:d0:f3:92:38:bc:9f:9c:ae:d9:66:cb:f7:
                    43:c4:7e:1e:24:80:f7:0a:ca:f4:3f:38:c4:6c:55:
                    d9:a8:af:0d:f7:4c:bf:4e:12:f5:69:71:7a:f0:ec:
                    24:4f:36:e8:66:3b:f2:dd:a3:82:6e:c8:0f:b9:db:
                    5b:ee:ab:8f:00:ef:1b:c6:56:b6:87:2d:66:16:bd:
                    fe:bb:b7:63:58:5c:b5:f4:56:cc:dd:f8:0e:42:06:
                    37:27:4f:cd:f9:65:0e:1c:8c:6d:4f:38:75:69:25:
                    80:08:cc:a1:14:75:95:ca:20:55:12:92:1a:34:9c:
                    c2:63:b8:f6:c9:4f:4e:b6:25:da:ef:72:c6:99:e2:
                    32:bf:e0:46:54:58:47:fb:69:89:00:25:d8:7f:ad:
                    1b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C7:49:8C:D5:78:63:42:62:E7:49:CB:8D:25:FD:0D:40:5E:04:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f33871ce-64ca-33ec-9576-2176a24bacd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:2a:2f:b7:df:06:9c:59:e7:0b:bc:a9:ef:b0:b6:fc:68:81:
         67:89:c5:fa:ec:31:51:d2:3c:3c:b7:26:ae:6d:2a:61:58:21:
         c6:5b:98:bd:5c:ae:43:20:6f:fe:12:4a:5c:ea:c6:ee:fc:81:
         f5:ce:a9:06:79:29:62:d2:85:fe:83:d2:26:4c:48:17:aa:b8:
         29:f4:b5:1e:c8:93:1f:1a:15:fe:37:25:ab:89:37:80:86:fe:
         b9:26:cc:a5:1e:53:c8:ac:4d:89:b3:93:f6:03:de:c9:69:00:
         c7:5e:8e:9d:c0:e8:ca:d1:2e:8b:cf:c2:da:7e:75:79:4d:8d:
         e3:3a:cc:31:a2:24:ac:03:a2:90:05:59:97:ad:cb:d6:a6:d2:
         d9:a2:b2:2c:b2:28:5d:ed:70:08:56:e0:c8:cd:de:c6:54:38:
         d9:b5:d5:2a:10:6c:f8:59:8e:59:c7:87:eb:60:e2:43:67:f4:
         82:f7:34:65:0f:98:cf:6c:48:b1:43:37:26:90:89:eb:50:0e:
         a9:81:26:b9:70:11:7d:b9:4a:8e:58:6a:f3:27:2e:4b:7f:8c:
         7e:5b:a3:6a:91:93:62:6f:61:d6:91:ed:8e:e5:c7:65:ac:84:
         3a:e0:53:bf:75:76:fb:25:d5:5b:ea:24:45:0b:3a:ce:e8:37:
         3d:0d:3e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:52 2024 by rpki-client on console-ams.rpki-client.org