Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f355944a-c12a-32e8-aeca-34cf6b3089fb.roa
File:                     f355944a-c12a-32e8-aeca-34cf6b3089fb.roa (raw, json)
Hash identifier:          Xqm8d7jTYhWU0X3YqBkcQCi/rcvLAmGFErXZ54FCyJc=
Subject key identifier:   3E:E7:BB:CB:B9:FF:64:78:36:8C:B8:2A:1A:B9:1A:0C:3F:99:72:3D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845968FC0D267E7B55112086200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f355944a-c12a-32e8-aeca-34cf6b3089fb.roa
Signing time:             Thu 18 Apr 2024 16:06:58 +0000
ROA not before:           Thu 18 Apr 2024 16:06:58 +0000
ROA not after:            Wed 17 Jul 2024 16:06:58 +0000
asID:                     61003
IP address blocks:        166.1.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:8f:c0:d2:67:e7:b5:51:12:08:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 18 16:06:58 2024 GMT
            Not After : Jul 17 16:06:58 2024 GMT
        Subject: CN=07e4733d-3e57-4d3a-82e6-95c033c8ed3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d0:92:41:70:8e:6b:de:42:95:38:f4:6c:61:
                    bc:58:86:14:ed:d2:24:71:0d:2a:dd:7b:10:0e:ed:
                    57:58:48:ae:a7:93:f9:29:9f:24:bc:81:2f:01:47:
                    09:e2:51:2a:33:e3:55:fb:14:29:54:d0:08:f2:94:
                    80:aa:e5:79:18:21:15:13:b8:58:12:28:e0:8c:44:
                    70:a1:91:b7:12:14:03:35:9f:bf:21:c7:84:1d:4a:
                    27:77:2e:e8:41:fb:cc:c6:34:f1:28:6d:a8:f9:0a:
                    34:fd:70:e8:8f:2f:e6:eb:be:20:3d:c8:42:09:df:
                    c8:da:7b:52:62:67:13:c3:3c:f9:65:38:ac:05:af:
                    7c:fe:61:66:2a:ec:4c:e8:ee:d4:86:a6:a4:c0:c5:
                    61:6d:e4:5d:41:31:e4:7e:ed:59:53:83:60:ad:1f:
                    5c:c1:12:8c:14:61:67:59:77:05:a6:e1:c7:5f:7b:
                    a8:83:da:d9:da:6b:51:9e:30:c4:cc:1d:77:4f:09:
                    c3:a0:71:25:cd:f7:35:4f:3e:f3:37:54:52:5a:86:
                    f6:be:f4:8f:60:00:df:cc:f1:6d:1e:a7:fd:c6:ab:
                    46:99:2b:ff:f1:11:8e:90:e2:ac:8c:06:1f:f2:61:
                    1e:78:66:98:1c:96:d3:12:d1:b5:64:7b:1a:32:f8:
                    43:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E7:BB:CB:B9:FF:64:78:36:8C:B8:2A:1A:B9:1A:0C:3F:99:72:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f355944a-c12a-32e8-aeca-34cf6b3089fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ce:b4:1a:cc:d5:4c:47:db:82:e3:b4:6b:64:ab:50:d5:9c:
         c0:6f:0d:f7:4b:b5:2d:03:b2:10:31:b7:45:aa:aa:58:3d:41:
         5b:f6:c6:48:41:00:fa:d3:35:10:5d:23:a6:6b:8e:e1:dd:f7:
         cb:c1:f3:2a:2c:20:6e:76:97:84:e8:dd:c2:c6:a4:41:a4:a4:
         7d:ef:cb:78:46:6a:06:f4:a1:9a:74:39:b0:09:86:cc:78:33:
         c5:b7:73:94:80:48:ca:ed:7a:f2:b0:8a:d8:8a:4d:81:68:2f:
         9d:af:81:67:f0:1c:47:ad:94:cc:db:73:5e:a9:c5:97:fd:71:
         a3:8d:a0:35:8b:35:cc:8b:93:47:b7:eb:9b:23:ae:84:93:b8:
         21:80:f5:97:2e:df:b6:d8:ec:8c:6f:e2:66:cd:41:e7:45:34:
         b0:a3:95:b4:46:60:cc:22:d2:4f:a3:ef:5d:61:24:e7:c7:e4:
         14:2f:89:d0:5e:66:d0:3d:f0:07:c5:84:95:dc:92:83:59:4d:
         69:8b:6d:93:cd:4e:32:54:2d:88:38:4c:0f:81:8c:c0:8c:85:
         05:8a:3e:99:00:a3:90:62:13:09:16:89:47:26:9f:a6:d8:bf:
         13:c5:90:db:59:bb:05:a5:03:d7:7b:80:de:48:59:17:49:45:
         76:32:40:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:06:36 2024 by rpki-client on console-ams.rpki-client.org