Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/2bc97889-4b58-3152-a8e2-7cb630adc243.roa
File:                     2bc97889-4b58-3152-a8e2-7cb630adc243.roa (raw, json)
Hash identifier:          bJ8Ce9k7PuIa80Od6o9tA4+Iu9/TmkoT/rvDSbXEVmw=
Subject key identifier:   AF:F2:6F:11:93:3C:1C:B1:DB:F1:58:E8:C0:41:E6:FA:D2:09:E2:F1
Certificate issuer:       /CN=c63341d1-6cda-433e-9220-8eb860d0f1d5
Certificate serial:       010D0C9F43285846FFBAD5BA440A502D3E225B80
Authority key identifier: 30:8E:63:48:1C:3A:A3:59:5B:A4:2F:67:BC:4B:84:13:B1:61:B0:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/2bc97889-4b58-3152-a8e2-7cb630adc243.roa
Signing time:             Mon 26 Aug 2024 01:00:32 +0000
ROA not before:           Mon 26 Aug 2024 01:00:32 +0000
ROA not after:            Sun 24 Nov 2024 02:00:32 +0000
asID:                     400946
IP address blocks:        66.45.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/c63341d1-6cda-433e-9220-8eb860d0f1d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/c63341d1-6cda-433e-9220-8eb860d0f1d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ff:ba:d5:ba:44:0a:50:2d:3e:22:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c63341d1-6cda-433e-9220-8eb860d0f1d5
        Validity
            Not Before: Aug 26 01:00:32 2024 GMT
            Not After : Nov 24 02:00:32 2024 GMT
        Subject: CN=dee0030b-5527-4ebc-a1a6-a2b0dd443d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4f:33:5e:2b:0a:6e:ac:45:81:54:97:e8:fb:
                    ab:24:b1:de:8f:3a:66:9f:a6:a6:e7:80:e5:8d:b6:
                    cf:30:c9:15:70:ff:82:7b:a8:21:73:83:14:6f:15:
                    fc:c1:da:08:4e:a4:78:e7:65:ea:02:2c:3c:3a:96:
                    7f:e9:24:cc:98:a0:27:7d:2a:35:64:26:cc:23:2e:
                    f9:2a:75:8b:27:a9:ce:7e:0d:c2:d7:45:18:5b:6a:
                    73:6e:bf:52:24:a6:ae:ba:5d:f5:f4:f2:29:0c:df:
                    33:51:69:11:08:a7:06:de:81:6c:cd:89:22:7c:2e:
                    bb:e3:f9:be:59:20:01:85:91:8f:f9:4c:71:7f:86:
                    22:e1:b1:4a:87:86:c9:40:8f:41:1c:f5:90:6f:1e:
                    6a:37:a3:2a:40:df:8a:d8:cf:21:46:8e:68:7d:34:
                    46:7a:2a:dc:cd:b9:3e:a2:e3:99:39:9e:ce:58:fc:
                    15:b7:c5:32:4a:58:63:a9:76:ad:93:30:8d:e0:7e:
                    20:94:c6:e7:73:89:1f:5b:19:fe:36:44:3d:fc:8f:
                    15:06:e7:33:95:a8:4c:a4:38:ae:db:5a:5b:dd:81:
                    6e:98:0a:ba:ef:a1:0f:7f:dd:a2:9a:cc:78:28:f0:
                    2f:94:32:ba:43:56:bb:43:32:b8:c1:5a:b1:fd:dc:
                    55:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F2:6F:11:93:3C:1C:B1:DB:F1:58:E8:C0:41:E6:FA:D2:09:E2:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/2bc97889-4b58-3152-a8e2-7cb630adc243.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/c63341d1-6cda-433e-9220-8eb860d0f1d5.crl

            X509v3 Authority Key Identifier:
                keyid:30:8E:63:48:1C:3A:A3:59:5B:A4:2F:67:BC:4B:84:13:B1:61:B0:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b5:00:71:97:08:cf:9e:bd:f0:33:e2:06:2b:9d:e7:6a:5e:
         64:75:94:ca:80:20:c3:4b:67:51:8e:f6:83:b0:d6:85:d0:a9:
         9c:2d:d5:47:2b:23:00:2c:73:f4:d8:dd:98:50:2e:0b:15:24:
         fa:a3:a5:7d:5a:73:b7:9b:3f:f1:c4:31:82:95:7d:f3:c3:d5:
         34:ed:5d:87:70:52:8b:e5:d6:1b:46:c8:2b:79:3f:37:36:44:
         61:3e:6f:a5:8d:01:c2:88:db:53:28:66:5f:d6:92:39:32:2c:
         1c:8b:57:f2:b9:b1:b9:34:ce:0c:ff:b9:86:d4:69:f7:5f:ea:
         28:f8:3a:5d:0f:a6:53:4d:f4:9b:af:ff:5c:3e:3a:7c:1d:c8:
         67:9c:3f:ec:7a:2f:fe:73:66:24:bd:4d:62:dc:d3:e3:6a:64:
         6f:08:0e:cb:00:d4:ed:e0:12:28:76:86:f0:f9:88:9b:81:1b:
         8a:bf:a5:1f:0d:40:00:c7:4c:6d:9a:b5:96:fb:72:24:2c:df:
         88:7c:12:ad:69:d9:8d:24:31:21:15:3e:6e:4b:72:e3:40:00:
         6a:06:83:ec:40:a0:cf:5b:7d:d5:31:29:f4:f3:d7:69:38:c2:
         7d:13:6d:87:7c:97:18:32:17:c4:11:98:90:59:f1:f9:06:8d:
         c0:e4:fd:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEb/utW6RApQLT4iW4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzYzMzQxZDEtNmNkYS00MzNlLTkyMjAtOGViODYwZDBm
MWQ1MB4XDTI0MDgyNjAxMDAzMloXDTI0MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk
ZGVlMDAzMGItNTUyNy00ZWJjLWExYTYtYTJiMGRkNDQzZDZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr08zXisKbqxFgVSX6PurJLHejzpmn6am54Dl
jbbPMMkVcP+Ce6ghc4MUbxX8wdoITqR452XqAiw8OpZ/6STMmKAnfSo1ZCbMIy75
KnWLJ6nOfg3C10UYW2pzbr9SJKauul319PIpDN8zUWkRCKcG3oFszYkifC674/m+
WSABhZGP+Uxxf4Yi4bFKh4bJQI9BHPWQbx5qN6MqQN+K2M8hRo5ofTRGeirczbk+
ouOZOZ7OWPwVt8UySlhjqXatkzCN4H4glMbnc4kfWxn+NkQ9/I8VBuczlahMpDiu
21pb3YFumAq676EPf92imsx4KPAvlDK6Q1a7QzK4wVqx/dxVXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK/ybxGTPByx2/FY6MBB5vrSCeLxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jNjMz
NDFkMS02Y2RhLTQzM2UtOTIyMC04ZWI4NjBkMGYxZDUvMmJjOTc4ODktNGI1OC0z
MTUyLWE4ZTItN2NiNjMwYWRjMjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYzYzMzQxZDEtNmNkYS00MzNlLTky
MjAtOGViODYwZDBmMWQ1L2M2MzM0MWQxLTZjZGEtNDMzZS05MjIwLThlYjg2MGQw
ZjFkNS5jcmwwHwYDVR0jBBgwFoAUMI5jSBw6o1lbpC9nvEuEE7FhsHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jNjMzNDFkMS02Y2RhLTQzM2UtOTIyMC04ZWI4
NjBkMGYxZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQi1KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEC1AHGXCM+evfAz4gYrnedqXmR1lMqAIMNLZ1GO9oOw1oXQqZwt1Ucr
IwAsc/TY3ZhQLgsVJPqjpX1ac7ebP/HEMYKVffPD1TTtXYdwUovl1htGyCt5Pzc2
RGE+b6WNAcKI21MoZl/WkjkyLByLV/K5sbk0zgz/uYbUafdf6ij4Ol0PplNN9Juv
/1w+OnwdyGecP+x6L/5zZiS9TWLc0+NqZG8IDssA1O3gEih2hvD5iJuBG4q/pR8N
QADHTG2atZb7ciQs34h8Eq1p2Y0kMSEVPm5LcuNAAGoGg+xAoM9bfdUxKfTz12k4
wn0TbYd8lxgyF8QRmJBZ8fkGjcDk/TI=
-----END CERTIFICATE-----
Generated at Sat Sep 28 19:45:51 2024 by rpki-client on console-fra.rpki-client.org