Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa7e77df-ff95-3383-af71-8d55d3aa7eec.roa
File:                     aa7e77df-ff95-3383-af71-8d55d3aa7eec.roa (raw, json)
Hash identifier:          fkyJWhozT47bQR0BErZRKTfz0MSwZepXEJH3wDc4bcA=
Subject key identifier:   26:D1:46:93:81:A1:6C:10:3E:69:3B:0A:99:07:18:3D:0D:33:D6:9D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844D7151E29339A391D2AB68780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa7e77df-ff95-3383-af71-8d55d3aa7eec.roa
Signing time:             Sat 10 Feb 2024 02:00:26 +0000
ROA not before:           Sat 10 Feb 2024 02:00:26 +0000
ROA not after:            Fri 10 May 2024 01:00:26 +0000
asID:                     9009
IP address blocks:        166.0.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d7:15:1e:29:33:9a:39:1d:2a:b6:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 10 02:00:26 2024 GMT
            Not After : May 10 01:00:26 2024 GMT
        Subject: CN=44dbc9dd-0591-4ae4-9927-c3d648d50d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ba:e1:8b:ae:2d:27:37:47:2f:ed:75:06:7a:
                    e2:32:10:17:71:88:0c:20:91:5c:64:30:93:46:09:
                    ec:d2:47:03:13:c7:79:58:d6:45:82:35:f0:ea:6e:
                    b2:8e:c4:be:0f:ad:18:23:42:ea:75:24:f4:0f:e7:
                    6b:7d:7a:6e:79:eb:57:9f:84:37:20:59:99:e2:65:
                    9d:a5:35:44:0d:6d:29:74:fc:0b:3d:cb:c6:c9:5d:
                    58:86:c5:b5:03:be:c7:1b:4c:6f:4b:90:2e:d9:96:
                    31:b8:e6:cf:09:8d:c7:e2:ef:27:15:47:3e:94:01:
                    9d:ae:0f:24:f3:e3:3a:5d:8b:35:ad:61:1a:ee:90:
                    3e:91:e6:d6:2c:35:fe:66:40:47:ac:be:4d:55:8d:
                    60:dc:8b:ce:3f:56:f8:b3:e2:54:a4:d0:a3:1c:6e:
                    6b:85:d5:b8:a6:31:16:ca:56:95:d7:da:85:bb:0b:
                    26:14:0a:25:d4:51:32:7d:c6:c2:1b:b8:dd:c4:7d:
                    f1:03:c4:15:e8:f6:91:7d:39:4c:d7:97:b0:dd:e1:
                    80:b9:ee:64:dc:3e:fc:45:af:f8:90:2f:0e:07:8f:
                    96:cc:86:08:56:b8:72:8d:55:0f:09:f0:cf:54:e1:
                    17:b6:a3:33:e5:b0:3c:c1:c3:5b:18:dc:d5:65:66:
                    9b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D1:46:93:81:A1:6C:10:3E:69:3B:0A:99:07:18:3D:0D:33:D6:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa7e77df-ff95-3383-af71-8d55d3aa7eec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ef:88:8a:43:bd:61:0e:1f:de:b2:57:f4:b8:53:91:8b:d5:
         00:a9:4b:38:d0:09:76:12:e2:c5:fe:bb:56:b9:f6:76:ce:ef:
         6f:20:3f:1a:c0:a7:05:99:ed:f9:5c:67:21:0d:f8:01:6c:ca:
         9d:76:49:b6:34:65:12:b8:90:ab:e0:fd:ed:53:de:9c:73:c9:
         1d:4e:d1:8b:21:95:7a:4a:15:e7:ed:32:ba:c0:11:7a:38:c8:
         7f:55:41:6b:35:1f:ef:e3:80:cd:57:48:72:c3:59:2e:36:f7:
         51:31:42:11:31:ae:ec:ad:0b:12:37:ee:85:9e:77:49:05:b7:
         5f:71:b3:06:d5:45:14:bc:de:e7:ab:04:13:69:9d:3a:f1:40:
         4b:e3:0d:84:1a:f6:78:4d:12:56:01:69:76:d2:b1:d8:31:98:
         f9:03:2f:a5:a0:98:cb:1b:64:bd:f1:0f:04:fd:36:de:32:59:
         54:3b:cc:61:24:06:78:df:82:22:b7:ab:14:3a:02:b3:eb:fe:
         31:18:94:b3:57:42:73:6f:d8:c9:6b:d1:98:10:ff:c5:da:e0:
         69:36:81:d4:8c:5a:8a:1b:32:ff:33:c5:d4:23:f2:e2:4f:12:
         79:fd:df:e2:ec:7a:eb:35:14:ef:0c:2f:a6:c9:b5:80:4f:20:
         31:4f:d4:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETXFR4pM5o5HSq2h4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDIxMDAyMDAyNloXDTI0MDUxMDAxMDAyNlowLzEtMCsGA1UEAxMk
NDRkYmM5ZGQtMDU5MS00YWU0LTk5MjctYzNkNjQ4ZDUwZDEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLrhi64tJzdHL+11BnriMhAXcYgMIJFcZDCT
Rgns0kcDE8d5WNZFgjXw6m6yjsS+D60YI0LqdST0D+drfXpueetXn4Q3IFmZ4mWd
pTVEDW0pdPwLPcvGyV1YhsW1A77HG0xvS5Au2ZYxuObPCY3H4u8nFUc+lAGdrg8k
8+M6XYs1rWEa7pA+kebWLDX+ZkBHrL5NVY1g3IvOP1b4s+JUpNCjHG5rhdW4pjEW
ylaV19qFuwsmFAol1FEyfcbCG7jdxH3xA8QV6PaRfTlM15ew3eGAue5k3D78Ra/4
kC8OB4+WzIYIVrhyjVUPCfDPVOEXtqMz5bA8wcNbGNzVZWabcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCbRRpOBoWwQPmk7CpkHGD0NM9adMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYWE3ZTc3ZGYtZmY5NS0z
MzgzLWFmNzEtOGQ1NWQzYWE3ZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgBhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAHviIpDvWEOH96yV/S4U5GL1QCpSzjQCXYS4sX+u1a59nbO728gPxrA
pwWZ7flcZyEN+AFsyp12SbY0ZRK4kKvg/e1T3pxzyR1O0YshlXpKFeftMrrAEXo4
yH9VQWs1H+/jgM1XSHLDWS4291ExQhExruytCxI37oWed0kFt19xswbVRRS83uer
BBNpnTrxQEvjDYQa9nhNElYBaXbSsdgxmPkDL6WgmMsbZL3xDwT9Nt4yWVQ7zGEk
BnjfgiK3qxQ6ArPr/jEYlLNXQnNv2Mlr0ZgQ/8Xa4Gk2gdSMWoobMv8zxdQj8uJP
Enn93+Lseus1FO8ML6bJtYBPIDFP1PQ=
-----END CERTIFICATE-----
Generated at Sat Apr 27 15:29:04 2024 by rpki-client on console-ams.rpki-client.org