Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f91468d5-a66d-3fa4-8b8a-3a925d580a87.roa
File:                     f91468d5-a66d-3fa4-8b8a-3a925d580a87.roa (raw, json)
Hash identifier:          Gp7tE6S7nreo9+CLDHrKjgaBw3/Xdiny1smF7e8814c=
Subject key identifier:   EF:1A:9A:95:5B:5E:C2:85:DB:26:62:A8:70:A2:3B:CA:81:F4:E1:37
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847600B94EB0232D1EF09C61800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f91468d5-a66d-3fa4-8b8a-3a925d580a87.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     62240
IP address blocks:        166.1.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:94:eb:02:32:d1:ef:09:c6:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=c4a32788-ae52-47ab-97b0-c458ff691ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4b:66:3d:6c:59:f7:75:d8:59:dd:c9:c7:db:
                    a7:d9:c8:1b:be:ed:f4:67:a2:35:3d:da:19:2b:da:
                    21:d4:56:3a:1c:93:9d:f0:03:3c:4a:2f:8b:9e:ab:
                    11:83:2a:61:3a:46:de:1f:cf:44:d2:e8:69:02:89:
                    a7:87:11:35:00:8e:b2:96:66:71:9e:33:41:f1:c7:
                    e0:8d:57:52:45:08:6f:cb:88:c5:74:70:6f:11:10:
                    96:b8:cc:81:35:17:3b:43:be:8c:7d:f1:00:c3:01:
                    38:49:63:86:7c:53:f1:f3:6c:8c:f4:9e:31:ad:e5:
                    56:e9:82:7f:00:50:0f:af:b5:ce:6a:d0:c1:96:63:
                    bf:63:95:57:5a:79:6f:6d:08:16:d0:29:f8:52:03:
                    b9:c1:a0:27:63:6e:84:e7:d6:c8:a0:72:31:25:b5:
                    87:0b:2b:6d:ff:8e:4b:e2:47:a7:db:33:00:b5:b3:
                    48:d6:13:f0:9c:cc:d7:5b:87:4d:15:ae:61:29:b1:
                    93:1d:7f:ee:5d:16:ef:c0:c1:26:61:a0:14:69:5e:
                    8f:7d:3b:e2:d2:04:4b:07:17:bc:e9:73:a0:8d:3e:
                    99:50:9a:43:83:98:3a:95:f4:c7:58:bd:d8:f7:58:
                    18:fb:09:db:c8:98:bd:61:77:8a:0c:e7:b7:cd:39:
                    16:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1A:9A:95:5B:5E:C2:85:DB:26:62:A8:70:A2:3B:CA:81:F4:E1:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f91468d5-a66d-3fa4-8b8a-3a925d580a87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:45:b4:54:16:6b:73:5f:59:7f:1a:47:ab:38:99:55:47:07:
         df:ee:aa:3b:d4:f8:0f:ad:fd:4d:ff:9f:f5:c3:df:02:f7:5e:
         78:74:89:99:a1:c4:ba:fd:4a:95:e3:61:d4:49:d7:8c:f1:a7:
         af:21:36:60:b2:ae:72:f0:03:6d:ea:be:5e:b8:10:44:bc:8c:
         f5:9f:6d:90:25:5c:78:0c:d6:05:cd:86:8c:2f:24:4a:66:51:
         96:b8:87:b1:63:1f:3a:ab:c5:9c:3e:94:80:96:af:04:ce:9d:
         14:f1:59:86:19:3e:ff:e7:f8:ec:c7:36:60:c8:07:a9:ff:50:
         d7:e6:2e:d5:50:e1:78:dd:96:d8:09:82:09:df:e1:69:25:82:
         8e:5d:b3:b6:74:6b:a1:09:f0:f8:57:24:8e:91:48:f2:60:b7:
         fe:f2:76:28:0f:12:cc:08:55:1f:fd:ab:9c:fd:5a:27:2e:38:
         8e:a3:e4:13:5e:06:8f:99:d9:25:b0:e0:a0:95:d4:83:7b:ca:
         9b:4b:1c:1d:21:8b:f7:64:89:2c:94:9b:66:8c:e9:15:d7:72:
         33:57:f7:1d:3f:fb:7c:e2:b2:4a:32:eb:b1:8c:7d:96:2a:ee:
         6f:7e:2c:97:d4:67:47:b3:fc:49:e7:fd:14:9a:6f:a5:7a:d3:
         02:9e:54:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:26 2024 by rpki-client on console-ams.rpki-client.org