Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f40b14e7-7eec-330b-ae98-3ffcd7f41b6b.roa
File:                     f40b14e7-7eec-330b-ae98-3ffcd7f41b6b.roa (raw, json)
Hash identifier:          ogYqYnqZzgwOOEcUXaRw1ZAT+e3khZVv+v0bSKIlGwU=
Subject key identifier:   B2:B2:4D:EC:77:8B:AE:6B:C6:7F:BB:52:16:A1:78:CE:EE:B5:64:33
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858455B92EF5F831CA96F21CAFCC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f40b14e7-7eec-330b-ae98-3ffcd7f41b6b.roa
Signing time:             Thu 28 Mar 2024 13:00:36 +0000
ROA not before:           Thu 28 Mar 2024 13:00:36 +0000
ROA not after:            Wed 26 Jun 2024 13:00:36 +0000
asID:                     15731
IP address blocks:        166.1.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5b:92:ef:5f:83:1c:a9:6f:21:ca:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 28 13:00:36 2024 GMT
            Not After : Jun 26 13:00:36 2024 GMT
        Subject: CN=a813b6ae-55bf-440b-a1e6-29302884c7f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:fd:6e:8b:6d:0d:83:ba:72:ec:09:a3:16:
                    d9:9a:22:0c:88:c1:8a:91:8c:b3:4d:5c:9c:d0:79:
                    3c:72:06:5d:a8:b2:b5:93:d6:73:81:81:64:ec:ca:
                    37:6b:70:b8:ce:84:48:90:72:03:54:69:81:17:25:
                    67:d3:ef:92:52:37:04:65:5b:59:78:44:4e:7b:f0:
                    d9:ca:49:b5:90:c2:27:93:94:32:c5:f0:c8:58:a3:
                    ca:9e:a1:ec:8a:d8:b2:2d:a4:54:23:03:bb:f0:bf:
                    33:77:ea:e2:8c:2b:f7:f4:90:02:d0:82:cc:0e:9f:
                    c0:35:8f:ef:03:92:73:4f:38:87:a3:41:e5:89:a2:
                    bc:e9:0b:9e:10:91:1a:b2:05:90:c1:50:47:d5:14:
                    eb:fc:1c:ee:7f:1d:bc:8e:7e:81:a5:b5:2d:1a:30:
                    66:e4:31:c3:26:6f:11:49:c8:eb:69:0f:f2:dc:98:
                    2b:09:ef:97:aa:05:8f:31:60:37:fd:41:49:59:bf:
                    de:93:e4:51:0d:6d:66:0f:16:83:e0:d0:ef:1d:93:
                    35:b4:43:02:8a:24:73:05:96:5d:ea:86:e3:f8:4f:
                    b3:76:7e:cc:85:b3:09:a7:d8:28:5d:76:6d:37:85:
                    f4:39:2a:f1:d6:e1:1c:82:5d:9a:a2:e6:5a:a1:67:
                    14:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B2:4D:EC:77:8B:AE:6B:C6:7F:BB:52:16:A1:78:CE:EE:B5:64:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f40b14e7-7eec-330b-ae98-3ffcd7f41b6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:fe:87:35:65:cf:1f:2d:72:2a:7f:87:99:64:64:b2:a2:13:
         ec:2e:99:0f:7e:ef:ab:95:e4:8c:37:de:aa:25:6c:1b:f2:1e:
         55:08:ae:28:54:e8:d6:e6:ae:6d:28:95:77:49:0d:1a:aa:5f:
         d4:84:d2:15:9e:ce:33:09:29:05:1e:2d:ef:ae:5e:54:1a:f9:
         c4:c0:81:07:10:5f:b9:2f:0e:8d:ff:ca:53:b0:ca:40:b1:02:
         eb:17:54:ab:d7:0a:08:5a:b3:d6:72:05:a5:82:c1:a7:a0:9d:
         bc:b2:a8:33:49:1e:9d:e2:db:ed:2f:c3:82:40:d1:a2:f8:20:
         98:42:de:24:8a:e6:69:da:b4:bf:3d:12:48:2b:62:aa:19:98:
         a2:69:e9:e0:0d:2e:32:d7:fd:1c:35:08:ed:03:5a:58:57:fc:
         03:f8:5b:44:86:fb:cb:30:2b:24:89:6e:eb:6f:08:f2:d5:57:
         84:1f:67:36:6f:97:7d:6d:85:2c:98:0d:9e:82:c3:b2:33:c4:
         07:c5:9e:c6:2d:9b:a8:3e:de:3d:ec:33:ce:4b:d0:10:96:22:
         21:fe:22:0c:58:d6:fb:8c:b7:77:44:04:cb:ad:2d:4d:be:5d:
         18:b2:d1:72:45:b0:c3:c9:69:9f:af:21:2d:2a:0b:92:8b:20:
         b6:97:18:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 21:45:49 2024 by rpki-client on console-fra.rpki-client.org