Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/81be268f-06f6-3b90-a180-ec3d89a3ecb0.roa
File:                     81be268f-06f6-3b90-a180-ec3d89a3ecb0.roa (raw, json)
Hash identifier:          GwqcUXepMlUhMcBOvPGUx5ZFyIFRudItxLRCnKj07yg=
Subject key identifier:   CE:A7:E0:0E:8C:78:79:BA:33:14:45:C7:4F:56:CB:2F:13:C1:EF:48
Certificate issuer:       /CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Certificate serial:       010D0C9F4328584582A892E67746E4930644EB80
Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/81be268f-06f6-3b90-a180-ec3d89a3ecb0.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     396982
IP address blocks:        66.170.109.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:92:e6:77:46:e4:93:06:44:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=906c7a86-16d9-49fc-95b7-4e709c9e5c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a9:2b:00:38:0e:32:36:86:14:cc:50:a5:79:
                    84:b5:db:aa:5f:0d:4f:14:92:c7:1c:63:52:03:90:
                    be:fa:65:a7:32:c8:19:1d:50:54:4d:d0:b1:29:e7:
                    49:ea:0d:f4:03:6c:02:22:af:52:a5:6c:b8:ab:8b:
                    35:00:d0:28:58:0a:1d:0b:61:a1:5c:b0:9a:66:b3:
                    e4:46:f8:8c:1d:46:08:08:04:34:c4:3a:49:8d:da:
                    97:60:06:c0:e1:2d:21:6a:0c:14:47:c5:e5:4d:e8:
                    5c:f4:41:2a:d8:43:01:8b:29:b9:d5:19:9b:76:a6:
                    e1:7a:76:53:85:4a:3f:27:59:49:e9:f2:98:bc:07:
                    02:aa:ad:ec:36:37:1c:a1:d2:2f:5e:31:79:d2:38:
                    e2:41:c4:e2:67:ba:60:53:56:fe:a9:67:2b:81:23:
                    cf:9a:29:89:41:81:09:b7:bb:d8:32:20:14:1f:c6:
                    ef:f5:32:07:b1:62:3f:48:e4:f2:85:5a:42:ce:a9:
                    b0:62:c5:6a:67:7d:46:92:41:26:c8:0c:2a:ae:2a:
                    bc:69:7b:02:34:e3:f0:b1:49:7a:dd:46:6e:c1:4f:
                    a3:23:7f:ca:32:78:79:71:0e:15:aa:30:46:70:a9:
                    cd:21:d9:55:15:3e:16:15:09:e2:02:8a:2b:0f:11:
                    e9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A7:E0:0E:8C:78:79:BA:33:14:45:C7:4F:56:CB:2F:13:C1:EF:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/81be268f-06f6-3b90-a180-ec3d89a3ecb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.170.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:7a:f4:e3:10:9e:7d:de:3c:60:2b:a7:07:48:d7:69:ff:ff:
         36:f1:36:7d:e4:0e:52:2b:c8:93:4a:8d:44:b7:d9:4e:0a:42:
         06:5f:c2:3e:5a:e9:8d:92:d8:44:8d:77:1e:0b:42:05:54:5f:
         d8:0e:39:3f:ab:e4:1f:c0:2e:53:f4:d6:9e:25:28:7b:47:d0:
         cb:d6:78:13:85:e5:f5:20:b6:73:01:69:3c:c7:81:c1:98:a3:
         17:13:2c:d4:eb:4c:d5:14:b8:95:38:85:69:43:85:7c:88:97:
         a4:3a:a8:45:50:b1:3d:7e:82:d1:8d:13:9c:60:d7:6f:1e:24:
         5e:0e:3a:6f:f3:b6:ff:3c:0c:fd:72:15:1d:65:18:7a:6d:af:
         a5:29:bf:c6:b2:bc:2f:13:f8:f4:31:ed:16:9d:d1:07:37:df:
         70:1a:39:b2:f0:dc:42:22:78:81:a1:5b:a1:4d:48:6d:0e:0e:
         9c:3c:07:9a:49:45:99:91:fa:bb:01:04:8c:e6:62:29:3e:36:
         7c:c3:77:a1:c8:79:c8:1e:3d:d4:fc:9a:ea:22:f7:4e:b1:55:
         3b:80:a5:f6:2d:00:72:73:57:d1:09:2a:31:36:00:8d:da:a0:
         6f:26:93:a7:88:e2:5f:77:80:c9:15:da:fc:af:bb:46:f9:01:
         67:0a:4b:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWCqJLmd0bkkwZE64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDIzOTEwYmUtNzdlOS00MzgxLTg3ZWItY2IxMmNmYzli
Njc2MB4XDTI0MDQxMTEzMDAzNloXDTI0MDcxMDEzMDAzNlowLzEtMCsGA1UEAxMk
OTA2YzdhODYtMTZkOS00OWZjLTk1YjctNGU3MDljOWU1YzRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqkrADgOMjaGFMxQpXmEtduqXw1PFJLHHGNS
A5C++mWnMsgZHVBUTdCxKedJ6g30A2wCIq9SpWy4q4s1ANAoWAodC2GhXLCaZrPk
RviMHUYICAQ0xDpJjdqXYAbA4S0hagwUR8XlTehc9EEq2EMBiym51RmbdqbhenZT
hUo/J1lJ6fKYvAcCqq3sNjccodIvXjF50jjiQcTiZ7pgU1b+qWcrgSPPmimJQYEJ
t7vYMiAUH8bv9TIHsWI/SOTyhVpCzqmwYsVqZ31GkkEmyAwqriq8aXsCNOPwsUl6
3UZuwU+jI3/KMnh5cQ4VqjBGcKnNIdlVFT4WFQniAoorDxHp5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM6n4A6MeHm6MxRFx09Wyy8Twe9IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5
MTBiZS03N2U5LTQzODEtODdlYi1jYjEyY2ZjOWI2NzYvODFiZTI2OGYtMDZmNi0z
YjkwLWExODAtZWMzZDg5YTNlY2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDIzOTEwYmUtNzdlOS00MzgxLTg3
ZWItY2IxMmNmYzliNjc2L2QyMzkxMGJlLTc3ZTktNDM4MS04N2ViLWNiMTJjZmM5
YjY3Ni5jcmwwHwYDVR0jBBgwFoAU8u8UTSWnxBh7mYJba+AKrUJIapgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5MTBiZS03N2U5LTQzODEtODdlYi1jYjEy
Y2ZjOWI2NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqptMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIB69OMQnn3ePGArpwdI12n//zbxNn3kDlIryJNKjUS32U4KQgZfwj5a
6Y2S2ESNdx4LQgVUX9gOOT+r5B/ALlP01p4lKHtH0MvWeBOF5fUgtnMBaTzHgcGY
oxcTLNTrTNUUuJU4hWlDhXyIl6Q6qEVQsT1+gtGNE5xg128eJF4OOm/ztv88DP1y
FR1lGHptr6Upv8ayvC8T+PQx7Rad0Qc333AaObLw3EIieIGhW6FNSG0ODpw8B5pJ
RZmR+rsBBIzmYik+NnzDd6HIecgePdT8muoi906xVTuApfYtAHJzV9EJKjE2AI3a
oG8mk6eI4l93gMkV2vyvu0b5AWcKSzs=
-----END CERTIFICATE-----
Generated at Sun May 5 21:21:08 2024 by rpki-client on console-ams.rpki-client.org