Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/3fd0a2c3-768d-3936-bc85-bdb81e27269c.roa
File:                     3fd0a2c3-768d-3936-bc85-bdb81e27269c.roa (raw, json)
Hash identifier:          wJoLhCHPS4MnRyJ7VyN+F0FPDBkBy41Uk9HafujTIT0=
Subject key identifier:   19:57:F0:2B:9B:B5:31:F0:51:9A:3B:A4:BF:BE:11:C5:D1:7A:C5:67
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F43285845F51E936015E6835C3A62CD00
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/3fd0a2c3-768d-3936-bc85-bdb81e27269c.roa
Signing time:             Wed 22 May 2024 13:00:33 +0000
ROA not before:           Wed 22 May 2024 13:00:33 +0000
ROA not after:            Tue 20 Aug 2024 13:00:33 +0000
asID:                     4651
IP address blocks:        66.114.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f5:1e:93:60:15:e6:83:5c:3a:62:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: May 22 13:00:33 2024 GMT
            Not After : Aug 20 13:00:33 2024 GMT
        Subject: CN=e7ab06a5-d621-46c9-8269-6f824977f995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:01:04:51:cd:ab:fe:b7:12:73:bf:15:4d:46:
                    58:c5:1c:5e:18:7a:b7:ac:cf:83:62:f2:95:cc:7b:
                    48:fb:50:62:2c:33:1a:cb:5f:8b:62:56:68:ef:0d:
                    c4:8e:20:b3:76:b3:be:08:7b:e3:58:ab:c8:2c:74:
                    51:08:e8:16:35:09:51:30:d0:f5:0a:a4:f1:3d:91:
                    63:46:c5:4e:6e:b4:bf:00:51:39:bd:5e:24:c7:72:
                    aa:11:5c:cb:2d:56:df:38:b6:d9:09:b9:1f:3a:ea:
                    e3:d2:e6:63:8b:39:7a:7a:74:51:00:02:1c:55:39:
                    dd:c9:8f:71:85:4d:cb:4c:ee:5f:5e:2c:bf:54:1a:
                    96:c2:38:19:95:47:a1:33:7a:fd:91:0f:d7:60:15:
                    32:64:46:cc:c1:cf:59:7b:68:74:46:99:af:36:04:
                    c4:a9:32:62:30:dc:58:61:cb:40:c5:98:e5:13:42:
                    72:62:36:b7:1b:ce:ee:16:04:7f:48:3d:05:11:79:
                    24:00:dd:ef:e9:58:05:66:ac:ba:22:82:3d:9b:cc:
                    ee:58:00:f4:37:dc:07:7c:7e:ea:a7:a9:fc:46:f6:
                    3d:34:c5:5d:63:5c:09:95:6c:5a:30:c9:66:72:c0:
                    64:46:31:30:0b:8f:ed:be:0c:06:37:e9:8a:31:c7:
                    81:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:57:F0:2B:9B:B5:31:F0:51:9A:3B:A4:BF:BE:11:C5:D1:7A:C5:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/3fd0a2c3-768d-3936-bc85-bdb81e27269c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.114.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:9d:34:89:84:34:22:01:5f:d3:c6:30:ac:14:60:ca:f2:c1:
         15:5f:a9:e9:b6:48:53:8b:50:c4:8d:f6:f8:87:d0:56:79:ae:
         4c:c2:1a:d5:35:0a:44:ab:1b:99:f7:61:7b:27:5c:2c:a0:cd:
         45:4e:e4:b4:f5:40:d1:45:9c:d5:6c:e2:5f:77:a7:7b:8f:1a:
         e3:96:1b:d1:0f:78:b1:99:63:dd:9d:98:ba:71:93:cd:be:ad:
         80:a6:54:35:c0:40:22:5a:74:38:fb:90:e7:4d:07:d6:c1:ac:
         f7:48:43:1e:86:28:1d:51:b2:20:6a:75:34:ff:9c:ca:5f:22:
         8d:56:43:e0:95:ff:a9:2e:82:dd:bb:a9:ab:05:c4:7b:9e:c8:
         95:e0:e7:e8:ab:7c:55:3a:44:33:ff:1d:1f:c1:4c:ae:69:99:
         9f:a3:8c:81:b0:0d:31:b0:90:42:13:03:8f:c7:d2:b7:90:26:
         ce:5d:94:10:94:58:85:50:ab:ca:80:d5:7c:5c:62:73:cb:53:
         b8:c2:14:07:89:62:d5:e8:56:ed:2b:0a:4d:4d:9a:37:be:b1:
         89:9d:8e:e3:71:6f:25:9a:d9:e3:5e:84:a5:44:e3:2e:1c:d8:
         cb:d8:a5:91:42:0a:f1:4b:d7:e6:f8:16:db:a1:d1:bc:a3:9e:
         41:d2:a4:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEX1HpNgFeaDXDpizQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3
MGE4MB4XDTI0MDUyMjEzMDAzM1oXDTI0MDgyMDEzMDAzM1owLzEtMCsGA1UEAxMk
ZTdhYjA2YTUtZDYyMS00NmM5LTgyNjktNmY4MjQ5NzdmOTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQEEUc2r/rcSc78VTUZYxRxeGHq3rM+DYvKV
zHtI+1BiLDMay1+LYlZo7w3EjiCzdrO+CHvjWKvILHRRCOgWNQlRMND1CqTxPZFj
RsVObrS/AFE5vV4kx3KqEVzLLVbfOLbZCbkfOurj0uZjizl6enRRAAIcVTndyY9x
hU3LTO5fXiy/VBqWwjgZlUehM3r9kQ/XYBUyZEbMwc9Ze2h0RpmvNgTEqTJiMNxY
YctAxZjlE0JyYja3G87uFgR/SD0FEXkkAN3v6VgFZqy6IoI9m8zuWAD0N9wHfH7q
p6n8RvY9NMVdY1wJlWxaMMlmcsBkRjEwC4/tvgwGN+mKMceBhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBlX8CubtTHwUZo7pL++EcXResVnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk
YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvM2ZkMGEyYzMtNzY4ZC0z
OTM2LWJjODUtYmRiODFlMjcyNjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi
YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0
NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz
YTM5NDcwYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnI4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFGdNImENCIBX9PGMKwUYMrywRVfqem2SFOLUMSN9viH0FZ5rkzCGtU1
CkSrG5n3YXsnXCygzUVO5LT1QNFFnNVs4l93p3uPGuOWG9EPeLGZY92dmLpxk82+
rYCmVDXAQCJadDj7kOdNB9bBrPdIQx6GKB1RsiBqdTT/nMpfIo1WQ+CV/6kugt27
qasFxHueyJXg5+irfFU6RDP/HR/BTK5pmZ+jjIGwDTGwkEITA4/H0reQJs5dlBCU
WIVQq8qA1XxcYnPLU7jCFAeJYtXoVu0rCk1Nmje+sYmdjuNxbyWa2eNehKVE4y4c
2MvYpZFCCvFL1+b4Ftuh0byjnkHSpCA=
-----END CERTIFICATE-----
Generated at Sun May 26 17:06:07 2024 by rpki-client on console-fra.rpki-client.org