Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f99da8d7-0f58-32ed-a4ba-57191e4d1241.roa
File:                     f99da8d7-0f58-32ed-a4ba-57191e4d1241.roa (raw, json)
Hash identifier:          0FpZPgZijlkfTphGn31UxX1aF9xyfvsmDBoXR+BHNrc=
Subject key identifier:   FD:E3:DA:63:CB:BC:27:03:E7:A2:90:16:33:D4:6A:E4:9E:E4:E4:81
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847CA3F752C33EC19CAE708B080
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f99da8d7-0f58-32ed-a4ba-57191e4d1241.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     149440
IP address blocks:        166.88.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:75:2c:33:ec:19:ca:e7:08:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=b281360e-ca1d-4572-b323-77e8a87fd074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bb:f8:0f:03:7e:0f:08:aa:20:f1:62:5f:10:
                    83:f6:bf:41:c5:b2:d5:bf:25:43:97:56:87:dd:5c:
                    2b:74:3c:a5:2c:b6:84:64:9d:34:28:49:f3:dc:d1:
                    df:eb:6a:5f:fc:92:be:29:dc:16:0b:1a:b8:d7:8b:
                    a3:23:31:49:35:0c:b2:8b:e2:d1:de:b5:51:83:5f:
                    f4:f0:4f:b2:6d:8f:75:39:df:61:92:1a:c8:81:df:
                    2b:7c:10:2c:60:07:79:54:e7:4b:cb:27:18:74:50:
                    13:9c:66:30:b4:e0:1c:aa:12:88:75:5c:fc:6f:fe:
                    cc:ed:a6:0a:ef:f4:7d:de:7a:23:ab:ff:e6:26:6c:
                    3a:44:23:d5:83:8e:69:75:96:05:bf:79:84:d9:98:
                    d9:77:86:3f:01:87:31:c4:ab:e9:38:9c:eb:47:ee:
                    92:50:51:ee:fa:bb:f1:8f:c9:98:df:86:89:1c:b3:
                    1a:f3:66:95:c1:f2:1e:34:fd:0d:3f:4e:ef:d8:78:
                    a7:fd:09:17:70:88:18:45:00:23:40:e4:9a:97:4c:
                    41:de:03:5f:95:a7:03:8d:b2:53:6b:5d:2d:22:e7:
                    0b:67:29:a3:d1:53:44:7b:61:94:64:2c:30:e9:55:
                    b7:91:fc:ea:05:a1:0c:b2:fc:c1:73:dc:f7:81:66:
                    17:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E3:DA:63:CB:BC:27:03:E7:A2:90:16:33:D4:6A:E4:9E:E4:E4:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f99da8d7-0f58-32ed-a4ba-57191e4d1241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:86:1e:0d:2c:55:4c:d9:84:11:df:e8:b3:e1:10:7c:c4:c0:
         c3:41:d4:b0:7f:3b:a0:fd:88:30:11:22:b1:27:f4:b4:fc:06:
         b7:08:cc:e8:74:74:98:be:a3:a0:cb:35:17:39:4a:f9:b7:62:
         eb:16:67:e8:1c:70:f5:64:a1:c8:33:77:59:65:e8:0e:85:00:
         a0:bb:0a:82:1d:5b:ce:ed:65:c1:db:91:f5:5b:4b:5c:d1:98:
         83:94:f2:38:1b:d3:57:33:92:62:78:2b:df:16:3f:a8:1e:3e:
         09:41:26:c6:cc:15:ec:5d:3c:36:b0:61:15:13:c4:ec:cb:df:
         c9:34:b5:ef:c4:c6:53:85:09:f9:42:3c:7d:49:75:ed:b3:96:
         31:0d:b2:45:a1:7e:1a:00:11:6d:28:9a:1f:99:85:db:44:3b:
         2b:2a:b9:3e:4f:91:f2:a7:0b:68:58:1a:07:c4:2e:e1:7e:a1:
         48:c5:b2:2a:24:88:96:e9:3a:8e:9b:44:10:1f:53:98:9a:07:
         35:8f:68:c6:c9:2f:15:25:77:f8:8e:58:5a:71:2f:84:52:32:
         49:ee:25:d1:f5:04:08:d4:e8:9f:49:45:72:43:f5:e4:49:1f:
         64:ab:29:42:96:7a:9d:8e:8d:1c:38:0c:9a:49:96:d0:01:7d:
         3d:9a:a7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:39 2024 by rpki-client on console-ams.rpki-client.org