Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/11bfbcb1-5026-3185-9039-19869dce2ac9.roa
File:                     11bfbcb1-5026-3185-9039-19869dce2ac9.roa (raw, json)
Hash identifier:          yywSvX9s2RJj9jf1wORT6SahdPiB4+X7CMxbu0c2jI0=
Subject key identifier:   AC:E5:A8:47:3F:DE:7B:03:83:2C:C1:5D:10:41:B5:F2:45:57:39:16
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845D503C36F1F25815B383193C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/11bfbcb1-5026-3185-9039-19869dce2ac9.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     22781
IP address blocks:        108.165.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:c3:6f:1f:25:81:5b:38:31:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=64eaca1a-da91-40b7-a9de-002a8440f543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ca:b0:13:b0:6d:12:d4:06:08:68:a9:f7:fc:
                    fe:99:1f:d6:9a:19:7f:18:02:50:c9:c7:ae:be:08:
                    73:1b:c9:11:81:e6:52:48:61:bd:b3:90:7f:8d:18:
                    62:62:76:84:60:36:ab:75:93:29:2e:5a:d6:34:3d:
                    9d:66:51:38:fb:54:14:aa:d9:3c:0b:79:05:85:79:
                    f2:e0:b3:cc:ca:66:2e:13:b4:c8:ef:41:55:21:87:
                    b9:f9:54:ce:4b:23:3a:67:8a:82:1f:ba:be:08:08:
                    d8:ba:59:9e:17:8f:7c:83:5a:8f:fb:77:a1:38:a9:
                    78:f0:82:76:d0:a0:20:53:00:44:3a:d2:23:c2:18:
                    40:81:5e:e6:dc:5b:95:46:06:80:9e:a0:93:79:e9:
                    3e:90:eb:e7:ab:a7:54:8c:9d:16:4e:f4:72:4b:20:
                    76:ef:11:1c:d1:ba:96:0b:49:ae:44:2a:3a:b1:3c:
                    a4:10:28:bd:c7:cb:f7:e1:80:fa:6f:41:f4:6e:64:
                    aa:b0:43:36:c3:50:1b:45:55:7f:f7:89:72:fb:4c:
                    26:39:cb:0e:a4:db:98:37:1b:f5:d1:ac:fe:39:e0:
                    07:95:14:67:77:69:99:d7:45:04:17:d9:db:e4:e4:
                    5f:cc:03:81:51:16:69:da:46:50:e1:83:8c:d4:89:
                    0c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E5:A8:47:3F:DE:7B:03:83:2C:C1:5D:10:41:B5:F2:45:57:39:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/11bfbcb1-5026-3185-9039-19869dce2ac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:05:ff:3a:17:16:4b:f8:fa:bf:eb:59:d3:52:94:ce:c6:af:
         31:92:8f:74:15:b6:79:b0:67:6b:eb:f4:fd:43:05:b1:b8:ae:
         3f:88:8c:31:8f:3c:b0:c6:3d:a3:b9:03:dc:f2:52:af:60:2b:
         4f:ec:9f:24:8d:c8:cd:de:70:dd:00:2b:2e:74:89:fa:ba:93:
         e5:27:c7:dd:2a:e0:54:83:cc:44:84:c2:85:24:2d:d9:a6:8f:
         7b:48:fe:9a:70:14:fb:57:36:f9:a8:29:44:29:ac:30:0d:54:
         ab:77:f4:08:13:20:33:71:51:d5:7a:4b:28:38:73:a2:f2:5a:
         1a:a9:cb:86:5d:e8:91:0e:7f:0c:80:9e:d4:5d:39:21:9d:24:
         52:fb:41:6a:32:a6:58:13:50:50:ef:b8:68:88:61:d0:72:a4:
         a1:20:68:cb:1c:92:ce:2a:00:1e:1b:48:22:49:f3:fa:04:0d:
         6a:14:39:9b:c0:3d:0a:10:be:1e:45:1a:60:fc:7e:48:a8:3c:
         4e:c9:bd:10:e2:38:35:5a:9c:07:cd:ae:72:07:fd:0d:f1:59:
         ae:28:ed:52:36:cf:a5:30:c1:d3:20:a2:eb:b1:a0:0f:54:7a:
         09:54:34:39:7e:1b:02:d1:ae:b2:b1:a5:d7:86:5b:16:39:52:
         59:7a:5a:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXVA8NvHyWBWzgxk8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDUxMTAxMDAyN1oXDTI0MDgwOTAxMDAyN1owLzEtMCsGA1UEAxMk
NjRlYWNhMWEtZGE5MS00MGI3LWE5ZGUtMDAyYTg0NDBmNTQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8qwE7BtEtQGCGip9/z+mR/Wmhl/GAJQyceu
vghzG8kRgeZSSGG9s5B/jRhiYnaEYDardZMpLlrWND2dZlE4+1QUqtk8C3kFhXny
4LPMymYuE7TI70FVIYe5+VTOSyM6Z4qCH7q+CAjYulmeF498g1qP+3ehOKl48IJ2
0KAgUwBEOtIjwhhAgV7m3FuVRgaAnqCTeek+kOvnq6dUjJ0WTvRySyB27xEc0bqW
C0muRCo6sTykECi9x8v34YD6b0H0bmSqsEM2w1AbRVV/94ly+0wmOcsOpNuYNxv1
0az+OeAHlRRnd2mZ10UEF9nb5ORfzAOBURZp2kZQ4YOM1IkMzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKzlqEc/3nsDgyzBXRBBtfJFVzkWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMTFiZmJjYjEtNTAyNi0z
MTg1LTkwMzktMTk4NjlkY2UyYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKU9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEoF/zoXFkv4+r/rWdNSlM7GrzGSj3QVtnmwZ2vr9P1DBbG4rj+IjDGP
PLDGPaO5A9zyUq9gK0/snySNyM3ecN0AKy50ifq6k+Unx90q4FSDzESEwoUkLdmm
j3tI/ppwFPtXNvmoKUQprDANVKt39AgTIDNxUdV6Syg4c6LyWhqpy4Zd6JEOfwyA
ntRdOSGdJFL7QWoyplgTUFDvuGiIYdBypKEgaMscks4qAB4bSCJJ8/oEDWoUOZvA
PQoQvh5FGmD8fkioPE7JvRDiODVanAfNrnIH/Q3xWa4o7VI2z6UwwdMgouuxoA9U
eglUNDl+GwLRrrKxpdeGWxY5Ull6WuY=
-----END CERTIFICATE-----
Generated at Fri May 17 18:15:00 2024 by rpki-client on console-fra.rpki-client.org