Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/300f284b-a862-3224-8792-73a9f82be269.roa
File:                     300f284b-a862-3224-8792-73a9f82be269.roa (raw, json)
Hash identifier:          +ozeak8NAH/69+024cL0rpt73GKncuXXloixNXuISCI=
Subject key identifier:   36:3F:0E:C3:CA:2B:DE:EA:60:3C:0A:DD:99:2D:A0:F0:78:71:B4:1B
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F15512DD0CF71A9E228DC9A0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/300f284b-a862-3224-8792-73a9f82be269.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     22773
IP address blocks:        166.102.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:12:dd:0c:f7:1a:9e:22:8d:c9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=d6cdcea8-9912-43dd-9978-a65a7571b07f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f8:57:66:8e:ee:9d:4a:e8:37:ff:ed:ef:58:
                    d0:c1:8f:c4:c1:32:44:55:bd:37:0d:3a:71:dc:b2:
                    ae:f5:de:84:d4:31:ce:14:f5:53:ec:fc:1e:06:2e:
                    0c:b4:0e:dc:83:a0:c5:59:6b:c0:de:39:3d:64:22:
                    13:76:24:58:99:de:38:97:b8:3b:15:aa:a9:19:28:
                    e5:82:bf:11:cd:cc:db:99:82:c6:18:d4:23:14:f3:
                    2a:4b:83:7b:cc:87:85:5d:f6:3f:a6:f3:fe:3c:ff:
                    3c:2d:8a:ad:1e:1f:d5:15:e8:93:82:7e:dc:1c:38:
                    1b:38:cd:f7:19:b2:54:9a:ba:6c:34:76:80:9f:a2:
                    c3:76:dd:1a:05:73:f5:2a:94:b1:a9:8d:89:4d:43:
                    ac:7f:21:83:a6:07:e2:38:4a:e6:bb:81:89:cd:a9:
                    f5:df:a1:ef:4f:36:6e:86:89:8d:1c:3c:e1:3c:b8:
                    33:8d:67:c7:ef:8e:73:13:e0:43:4b:1c:84:05:fb:
                    ab:bc:b1:a0:4e:40:a4:28:6e:3b:f9:ca:4d:16:d1:
                    ff:c3:0f:50:54:b9:69:d5:73:9c:ee:fc:af:0f:9c:
                    d4:d9:36:5a:d8:2e:53:67:e2:32:e3:34:13:c7:3a:
                    83:87:50:7c:cd:2e:81:9f:bf:de:bb:38:e7:95:16:
                    63:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3F:0E:C3:CA:2B:DE:EA:60:3C:0A:DD:99:2D:A0:F0:78:71:B4:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/300f284b-a862-3224-8792-73a9f82be269.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.102.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:6c:41:f0:38:6a:b1:1c:3f:ec:9a:f7:61:64:c9:b5:78:4c:
         59:17:4a:83:93:66:a0:24:92:5e:00:8c:50:7f:f1:6d:c0:22:
         15:7e:26:ae:f4:9c:03:26:9e:a3:fe:82:9e:4a:29:cf:88:7b:
         74:38:40:58:a5:16:bf:f0:2a:8d:db:88:55:24:9f:27:4c:be:
         25:2e:2e:9b:54:0d:86:3f:8a:ab:3b:c9:b6:47:45:e1:51:9d:
         ed:88:ee:80:b5:bb:66:5e:f0:02:ca:d8:f6:cd:07:c8:fd:91:
         89:1b:97:48:6d:b7:1d:a9:7d:38:81:ed:ea:0f:09:3f:2c:d0:
         85:71:01:c7:7d:ff:fb:53:4a:fb:3d:00:a1:7d:02:3c:e8:e6:
         95:7d:88:f0:15:75:db:ba:d1:06:a7:d6:c4:36:c4:94:d5:02:
         ee:b7:ab:7d:42:62:78:70:6b:5a:84:8b:a0:99:6e:89:a2:12:
         f9:a6:bb:79:60:c6:fd:83:49:eb:c9:bb:2e:ae:0e:e6:70:2f:
         4d:ba:50:3c:d7:16:6d:68:d3:c9:9c:8e:50:c0:d0:7b:e1:95:
         c7:98:e1:83:eb:f4:ad:24:0d:ce:ec:6a:a0:20:4e:9a:a9:d7:
         30:32:a8:4f:a5:97:5a:10:a7:96:aa:be:81:87:97:a8:3d:a7:
         a2:a2:b0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:55 2024 by rpki-client on console-fra.rpki-client.org