Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0f7f5b89-e375-3af7-9f14-b2bfdcfcf363.roa
File:                     0f7f5b89-e375-3af7-9f14-b2bfdcfcf363.roa (raw, json)
Hash identifier:          7rhSkbJWBZ51amx6DcZbVZGpse7jVQcGGdi7yzLSkvU=
Subject key identifier:   FB:B4:F8:51:16:C8:F4:B7:94:A7:CD:F5:F1:92:D1:B6:A1:70:4E:D6
Certificate issuer:       /CN=0a2d75f1-8f4b-49d3-9661-209643086151
Certificate serial:       010D0C9F4328584578E30451ED954D8399E9E2A2
Authority key identifier: 0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0f7f5b89-e375-3af7-9f14-b2bfdcfcf363.roa
Signing time:             Mon 08 Apr 2024 01:00:25 +0000
ROA not before:           Mon 08 Apr 2024 01:00:25 +0000
ROA not after:            Sun 07 Jul 2024 01:00:25 +0000
asID:                     39974
IP address blocks:        66.187.199.0/24 maxlen: 24
                          66.118.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:78:e3:04:51:ed:95:4d:83:99:e9:e2:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a2d75f1-8f4b-49d3-9661-209643086151
        Validity
            Not Before: Apr  8 01:00:25 2024 GMT
            Not After : Jul  7 01:00:25 2024 GMT
        Subject: CN=3ca4ea5d-009d-41cd-a270-ef12afa64a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0e:17:9e:0e:57:93:a0:35:81:cd:d1:36:a5:
                    7a:25:16:31:47:f0:87:2b:59:3d:2c:37:17:cb:31:
                    02:27:28:77:14:d6:ef:2f:d7:5d:55:b8:9f:66:c7:
                    74:90:57:ae:fc:a6:f9:03:1a:ba:8c:73:db:0c:ef:
                    d4:db:9a:7c:04:cc:5e:70:9e:20:28:f0:7d:e0:e9:
                    75:4f:fb:3f:48:b2:a2:26:83:ed:e6:90:78:77:88:
                    3e:af:08:58:ad:94:14:85:be:82:08:42:b4:cc:0f:
                    b0:0e:32:78:fb:c7:a1:a4:75:62:50:2b:5f:ab:a8:
                    3c:b4:9e:80:79:8a:67:6b:00:5a:b2:78:db:8a:fc:
                    b0:06:05:b4:36:b1:82:5f:5c:2d:92:96:34:ad:75:
                    71:cb:9e:a9:bc:16:e1:68:59:5c:9e:79:c9:30:00:
                    9b:fe:79:1b:73:17:41:6b:1a:d7:ec:f9:ae:19:c7:
                    3f:ee:7e:ca:e8:83:85:d1:3a:29:0d:83:22:6b:43:
                    5a:8d:74:95:57:2a:81:65:f0:6d:e6:18:03:6d:f0:
                    5d:9b:6b:f6:de:1e:b2:37:9c:32:53:a4:d1:15:de:
                    4e:61:8b:16:e5:00:af:bf:9a:78:2c:7b:97:c3:1f:
                    4a:bd:79:4a:2d:62:f9:0f:55:d0:eb:76:5d:52:89:
                    21:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B4:F8:51:16:C8:F4:B7:94:A7:CD:F5:F1:92:D1:B6:A1:70:4E:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0f7f5b89-e375-3af7-9f14-b2bfdcfcf363.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl

            X509v3 Authority Key Identifier:
                keyid:0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.50.0/24
                  66.187.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:5b:4e:c4:3d:0f:81:4a:d5:91:a9:dd:0b:02:74:26:d7:60:
         db:35:49:53:41:e7:cc:67:7f:be:42:1c:c8:55:b0:cd:ed:17:
         4d:7b:e5:6b:39:d0:6e:c5:3e:f3:73:9a:62:9a:34:e6:7f:d6:
         3c:bf:3a:1e:b5:43:1c:00:45:74:97:b7:b5:01:fb:05:67:1f:
         45:3a:83:b8:64:0f:b2:94:43:4c:52:fe:a0:5f:0c:ff:7c:89:
         cd:e3:93:46:19:f8:1e:9e:df:bf:98:2e:4f:c5:11:94:e5:bb:
         95:da:e2:8f:2b:7a:35:0b:b8:e1:d1:fd:5d:0e:c9:23:18:89:
         e8:fd:5d:3a:89:78:54:8f:99:81:9d:51:36:08:31:6d:af:44:
         ba:f2:19:b0:34:02:19:0d:af:8e:3f:a8:67:16:cd:37:9d:c1:
         6d:9b:06:86:a3:01:c4:a7:6d:96:40:dd:7e:a2:da:d4:bc:dc:
         d7:f1:51:c2:d4:3c:07:8e:23:99:23:81:0e:01:77:4a:d7:1a:
         0c:a1:69:a6:31:e9:fa:23:4e:03:6a:e2:e8:07:3f:4a:e3:bd:
         ba:cd:93:eb:6c:d8:e3:1e:3f:08:31:b9:ae:46:ca:9f:9b:0f:
         a5:32:e9:d2:e4:8c:da:18:4a:90:84:ce:d8:29:c1:fa:6f:eb:
         ba:c0:b2:fc
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEV44wRR7ZVNg5np4qIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGEyZDc1ZjEtOGY0Yi00OWQzLTk2NjEtMjA5NjQzMDg2
MTUxMB4XDTI0MDQwODAxMDAyNVoXDTI0MDcwNzAxMDAyNVowLzEtMCsGA1UEAxMk
M2NhNGVhNWQtMDA5ZC00MWNkLWEyNzAtZWYxMmFmYTY0YTJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3w4Xng5Xk6A1gc3RNqV6JRYxR/CHK1k9LDcX
yzECJyh3FNbvL9ddVbifZsd0kFeu/Kb5Axq6jHPbDO/U25p8BMxecJ4gKPB94Ol1
T/s/SLKiJoPt5pB4d4g+rwhYrZQUhb6CCEK0zA+wDjJ4+8ehpHViUCtfq6g8tJ6A
eYpnawBasnjbivywBgW0NrGCX1wtkpY0rXVxy56pvBbhaFlcnnnJMACb/nkbcxdB
axrX7PmuGcc/7n7K6IOF0TopDYMia0NajXSVVyqBZfBt5hgDbfBdm2v23h6yN5wy
U6TRFd5OYYsW5QCvv5p4LHuXwx9KvXlKLWL5D1XQ63ZdUokh+wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFPu0+FEWyPS3lKfN9fGS0bahcE7WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTJk
NzVmMS04ZjRiLTQ5ZDMtOTY2MS0yMDk2NDMwODYxNTEvMGY3ZjViODktZTM3NS0z
YWY3LTlmMTQtYjJiZmRjZmNmMzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGEyZDc1ZjEtOGY0Yi00OWQzLTk2
NjEtMjA5NjQzMDg2MTUxLzBhMmQ3NWYxLThmNGItNDlkMy05NjYxLTIwOTY0MzA4
NjE1MS5jcmwwHwYDVR0jBBgwFoAUDbM8/J5AXR7QSu6z+vGosBd4TH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTJkNzVmMS04ZjRiLTQ5ZDMtOTY2MS0yMDk2
NDMwODYxNTEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQnYyAwQA
QrvHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHNbTsQ9D4FK1ZGp3QsCdCbXYNs1SVNB58xnf75CHMhVsM3t
F0175Ws50G7FPvNzmmKaNOZ/1jy/Oh61QxwARXSXt7UB+wVnH0U6g7hkD7KUQ0xS
/qBfDP98ic3jk0YZ+B6e37+YLk/FEZTlu5Xa4o8rejULuOHR/V0OySMYiej9XTqJ
eFSPmYGdUTYIMW2vRLryGbA0AhkNr44/qGcWzTedwW2bBoajAcSnbZZA3X6i2tS8
3NfxUcLUPAeOI5kjgQ4Bd0rXGgyhaaYx6fojTgNq4ugHP0rjvbrNk+ts2OMePwgx
ua5Gyp+bD6Uy6dLkjNoYSpCEztgpwfpv67rAsvw=
-----END CERTIFICATE-----
Generated at Sat May 11 02:40:50 2024 by rpki-client on console-fra.rpki-client.org