Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/1db9833a-4cc0-3a98-a639-d4eeaf3afaaf.roa
File:                     1db9833a-4cc0-3a98-a639-d4eeaf3afaaf.roa (raw, json)
Hash identifier:          McVwxbeZIHW5tyZla4L7+fxoPX8XJutI5qygD0Oj5h4=
Subject key identifier:   C8:91:10:7B:9E:1A:93:0F:84:A6:53:C3:74:36:31:35:34:3D:08:7C
Certificate issuer:       /CN=ab352a2a-d782-4f1d-9d54-cbfc159f7431
Certificate serial:       010D0C9F43285845C084E0453AEE6B8DFE6C7300
Authority key identifier: 4A:0B:67:CD:BA:95:6E:F5:8D:3A:1C:9E:BD:11:F4:33:01:36:4A:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/1db9833a-4cc0-3a98-a639-d4eeaf3afaaf.roa
Signing time:             Fri 03 May 2024 16:49:00 +0000
ROA not before:           Fri 03 May 2024 16:49:00 +0000
ROA not after:            Thu 01 Aug 2024 16:49:00 +0000
asID:                     33635
IP address blocks:        66.36.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/ab352a2a-d782-4f1d-9d54-cbfc159f7431.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/ab352a2a-d782-4f1d-9d54-cbfc159f7431.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:84:e0:45:3a:ee:6b:8d:fe:6c:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab352a2a-d782-4f1d-9d54-cbfc159f7431
        Validity
            Not Before: May  3 16:49:00 2024 GMT
            Not After : Aug  1 16:49:00 2024 GMT
        Subject: CN=72e416fb-294e-4b97-af73-4ad8c312858d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2b:73:c1:1c:ac:7b:91:f9:c6:79:98:8b:66:
                    c7:a0:26:19:1c:2f:d1:69:e5:f7:a0:2a:fa:80:20:
                    20:00:62:5e:aa:71:6a:be:b9:d7:18:99:b3:67:d1:
                    f7:4a:39:9c:d3:af:07:1e:f4:1e:51:55:92:44:8e:
                    89:73:bc:8e:70:df:31:40:33:3d:80:16:93:07:4d:
                    e7:be:64:0c:b0:3e:79:76:be:f9:64:fa:63:a0:5a:
                    e0:72:88:18:4a:15:42:ae:20:54:14:10:10:dc:47:
                    1c:3b:21:a3:93:95:3b:3d:c6:96:1e:14:95:fc:9e:
                    3c:63:9c:be:3f:df:2d:95:15:f0:ac:e4:34:44:b0:
                    2f:26:1b:95:a3:59:09:d3:42:59:04:bd:1b:37:67:
                    f6:20:4d:ce:a7:f8:e8:b6:2e:eb:d5:64:43:fd:b8:
                    18:09:8d:79:47:ca:af:fe:ef:a2:16:92:0f:51:fa:
                    f3:3b:b5:ed:d6:82:5b:f9:b3:d5:f5:b4:25:32:29:
                    e9:72:f4:e0:79:e2:b4:d8:a4:a3:1b:66:09:d8:9c:
                    b6:14:65:bf:05:ff:e6:b3:92:b5:94:a1:af:a5:7a:
                    00:a5:c5:65:ea:65:74:af:50:c8:74:9f:87:4b:d3:
                    31:76:81:69:cc:d5:30:25:e0:ab:0a:fd:24:6a:7e:
                    1c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:91:10:7B:9E:1A:93:0F:84:A6:53:C3:74:36:31:35:34:3D:08:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/1db9833a-4cc0-3a98-a639-d4eeaf3afaaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/ab352a2a-d782-4f1d-9d54-cbfc159f7431.crl

            X509v3 Authority Key Identifier:
                keyid:4A:0B:67:CD:BA:95:6E:F5:8D:3A:1C:9E:BD:11:F4:33:01:36:4A:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.36.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:ee:05:c0:02:73:ae:7f:8c:99:27:3e:6b:4c:04:93:6b:8c:
         0d:aa:74:30:22:f8:67:a7:9b:b2:42:ec:1c:02:8c:da:6c:17:
         37:41:51:58:1a:de:70:9b:08:65:05:65:76:f9:6d:11:a2:6d:
         b1:fd:3b:71:09:2d:80:0b:25:43:9b:a2:45:c1:8b:6f:08:8b:
         09:32:4d:07:4c:4a:78:7d:e9:cf:2e:07:2c:5f:28:05:4c:e4:
         fb:72:a4:28:d4:4c:28:01:65:92:49:15:09:d9:42:06:2f:55:
         60:11:1d:36:9d:c0:39:2c:29:a8:d4:bf:6a:6c:34:72:76:d9:
         07:89:5c:83:87:98:20:b1:06:c5:5f:44:56:3c:50:ff:de:e5:
         87:e1:3d:74:d9:03:27:8e:bd:4b:6b:da:6e:c2:10:90:98:d2:
         c7:72:9d:ef:1d:ec:f4:9b:4a:3d:0f:2c:a7:6d:4c:b6:69:05:
         b1:c7:01:89:e1:46:e0:9e:4b:86:69:e1:e3:e8:a2:44:73:1d:
         b7:da:65:6b:3d:1c:28:0c:5a:6d:5c:84:aa:f2:3d:3b:bd:42:
         78:c6:e2:7c:eb:3d:97:98:e8:0f:14:b8:82:28:3b:aa:dc:05:
         30:df:df:e5:46:f5:f8:c3:46:2f:43:00:39:a4:79:d2:95:2e:
         6a:db:4f:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXAhOBFOu5rjf5scwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWIzNTJhMmEtZDc4Mi00ZjFkLTlkNTQtY2JmYzE1OWY3
NDMxMB4XDTI0MDUwMzE2NDkwMFoXDTI0MDgwMTE2NDkwMFowLzEtMCsGA1UEAxMk
NzJlNDE2ZmItMjk0ZS00Yjk3LWFmNzMtNGFkOGMzMTI4NThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjitzwRyse5H5xnmYi2bHoCYZHC/RaeX3oCr6
gCAgAGJeqnFqvrnXGJmzZ9H3Sjmc068HHvQeUVWSRI6Jc7yOcN8xQDM9gBaTB03n
vmQMsD55dr75ZPpjoFrgcogYShVCriBUFBAQ3EccOyGjk5U7PcaWHhSV/J48Y5y+
P98tlRXwrOQ0RLAvJhuVo1kJ00JZBL0bN2f2IE3Op/joti7r1WRD/bgYCY15R8qv
/u+iFpIPUfrzO7Xt1oJb+bPV9bQlMinpcvTgeeK02KSjG2YJ2Jy2FGW/Bf/ms5K1
lKGvpXoApcVl6mV0r1DIdJ+HS9MxdoFpzNUwJeCrCv0kan4c4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMiREHueGpMPhKZTw3Q2MTU0PQh8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYjM1
MmEyYS1kNzgyLTRmMWQtOWQ1NC1jYmZjMTU5Zjc0MzEvMWRiOTgzM2EtNGNjMC0z
YTk4LWE2MzktZDRlZWFmM2FmYWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWIzNTJhMmEtZDc4Mi00ZjFkLTlk
NTQtY2JmYzE1OWY3NDMxL2FiMzUyYTJhLWQ3ODItNGYxZC05ZDU0LWNiZmMxNTlm
NzQzMS5jcmwwHwYDVR0jBBgwFoAUSgtnzbqVbvWNOhyevRH0MwE2StAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYjM1MmEyYS1kNzgyLTRmMWQtOWQ1NC1jYmZj
MTU5Zjc0MzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiR5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIDuBcACc65/jJknPmtMBJNrjA2qdDAi+Genm7JC7BwCjNpsFzdBUVga
3nCbCGUFZXb5bRGibbH9O3EJLYALJUObokXBi28IiwkyTQdMSnh96c8uByxfKAVM
5PtypCjUTCgBZZJJFQnZQgYvVWARHTadwDksKajUv2psNHJ22QeJXIOHmCCxBsVf
RFY8UP/e5YfhPXTZAyeOvUtr2m7CEJCY0sdyne8d7PSbSj0PLKdtTLZpBbHHAYnh
RuCeS4Zp4ePookRzHbfaZWs9HCgMWm1chKryPTu9QnjG4nzrPZeY6A8UuIIoO6rc
BTDf3+VG9fjDRi9DADmkedKVLmrbTxI=
-----END CERTIFICATE-----
Generated at Sat May 18 01:32:39 2024 by rpki-client on console-fra.rpki-client.org