Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f857cf6-8380-3f90-9214-9dbb8e4e6dde.roa
File:                     3f857cf6-8380-3f90-9214-9dbb8e4e6dde.roa (raw, json)
Hash identifier:          CLD7Wdokiz6b84oAb+5sLvP2mmInLTj5yzXFhi1dW20=
Subject key identifier:   A6:E4:C2:E6:85:A1:DB:0E:5D:6F:4F:A0:87:97:5A:BB:BC:59:A6:CA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9DDC3FD662AAC73315CC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f857cf6-8380-3f90-9214-9dbb8e4e6dde.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33660
IP address blocks:        174.162.166.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:dc:3f:d6:62:aa:c7:33:15:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=aae4d349-9aac-4e7c-aa74-dc218c950f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:43:da:fb:05:17:8e:57:d8:00:cc:29:87:78:
                    95:77:63:9f:15:98:d1:64:fa:64:84:72:66:c3:04:
                    09:61:f2:85:aa:d2:9b:f7:10:6e:13:56:70:7f:74:
                    41:b0:fd:30:43:d5:98:94:b9:ee:a8:52:46:78:52:
                    79:06:8d:0b:5e:25:5f:14:8f:40:71:5c:f9:1d:0b:
                    f5:02:1d:2c:8c:11:f2:e7:75:04:6f:e7:eb:3e:d1:
                    84:1a:23:b7:2c:ad:27:8a:ca:ad:ae:62:76:f7:60:
                    e1:f9:08:14:cb:2c:ca:7c:c6:2a:af:4a:f5:fb:bd:
                    2a:37:58:02:26:8b:7a:e6:8e:69:8e:8a:f2:e9:d4:
                    14:17:65:f5:11:b0:2e:e6:10:da:bb:10:09:ef:67:
                    85:ed:57:f8:17:7d:8e:db:a5:40:cc:be:07:a3:d9:
                    d8:fe:2f:7c:5e:6c:63:6e:7e:d3:85:63:9e:69:06:
                    11:04:c2:33:be:0c:f7:ab:2c:b5:e4:dd:19:11:f0:
                    41:56:0c:f8:77:56:cb:93:d1:60:a3:0b:a8:42:05:
                    38:fd:ed:fa:8a:85:9a:3b:ba:a4:0d:bf:c8:1b:2b:
                    e2:33:ac:da:bc:ec:5c:c9:7e:bd:1e:44:64:52:1e:
                    a1:6f:34:85:8f:62:5c:1f:aa:60:50:6a:32:ee:7d:
                    1f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E4:C2:E6:85:A1:DB:0E:5D:6F:4F:A0:87:97:5A:BB:BC:59:A6:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f857cf6-8380-3f90-9214-9dbb8e4e6dde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.162.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:0c:89:b8:e9:af:00:f9:67:aa:ca:35:2f:f5:f4:60:f1:47:
         53:6b:c4:31:28:5f:9f:c5:16:b6:a2:a2:4c:d5:34:b2:0a:c1:
         d3:c6:5d:1b:45:69:52:d7:84:0d:15:58:3a:52:b5:0b:b9:84:
         18:13:b5:7c:37:e8:da:c9:e4:f1:68:79:20:0b:ab:8d:6d:94:
         85:b2:95:3a:b8:88:87:90:60:06:d5:02:2c:8e:c9:b4:60:a2:
         12:39:3e:27:c1:6c:94:2d:51:80:b0:4f:ae:e8:f9:2f:bc:02:
         78:68:86:76:36:62:4a:cb:dd:72:63:97:bb:a4:bd:8d:02:fc:
         41:25:80:f1:4d:e3:57:62:2b:a0:4c:72:d3:7e:90:70:b3:a8:
         e0:ed:e9:48:22:55:ba:c5:89:0f:36:c4:32:bd:2a:89:e1:75:
         2d:c0:52:32:44:c0:ae:d0:0a:b0:49:8f:65:83:77:da:a5:93:
         e7:06:e1:5f:18:79:da:76:63:99:8f:6c:33:2c:63:2c:3e:c3:
         17:b5:f6:19:d1:3d:86:14:4a:2f:4f:1c:33:8e:ac:f6:aa:ad:
         ad:8d:49:4d:6f:ba:c3:fa:63:6f:73:a2:e2:2e:10:c8:10:14:
         88:6d:98:ee:16:ec:90:51:b0:ef:43:6b:b1:d5:1a:e6:79:0e:
         d5:78:a8:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsndw/1mKqxzMVzIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
YWFlNGQzNDktOWFhYy00ZTdjLWFhNzQtZGMyMThjOTUwZjJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkPa+wUXjlfYAMwph3iVd2OfFZjRZPpkhHJm
wwQJYfKFqtKb9xBuE1Zwf3RBsP0wQ9WYlLnuqFJGeFJ5Bo0LXiVfFI9AcVz5HQv1
Ah0sjBHy53UEb+frPtGEGiO3LK0nisqtrmJ292Dh+QgUyyzKfMYqr0r1+70qN1gC
Jot65o5pjory6dQUF2X1EbAu5hDauxAJ72eF7Vf4F32O26VAzL4Ho9nY/i98Xmxj
bn7ThWOeaQYRBMIzvgz3qyy15N0ZEfBBVgz4d1bLk9FgowuoQgU4/e36ioWaO7qk
Db/IGyviM6zavOxcyX69HkRkUh6hbzSFj2JcH6pgUGoy7n0fxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKbkwuaFodsOXW9PoIeXWru8WabKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Y4NTdjZjYtODM4MC0z
ZjkwLTkyMTQtOWRiYjhlNGU2ZGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqKmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAkMibjprwD5Z6rKNS/19GDxR1NrxDEoX5/FFraiokzVNLIKwdPGXRtF
aVLXhA0VWDpStQu5hBgTtXw36NrJ5PFoeSALq41tlIWylTq4iIeQYAbVAiyOybRg
ohI5PifBbJQtUYCwT67o+S+8AnhohnY2YkrL3XJjl7ukvY0C/EElgPFN41diK6BM
ctN+kHCzqODt6UgiVbrFiQ82xDK9KonhdS3AUjJEwK7QCrBJj2WDd9qlk+cG4V8Y
edp2Y5mPbDMsYyw+wxe19hnRPYYUSi9PHDOOrPaqra2NSU1vusP6Y29zouIuEMgQ
FIhtmO4W7JBRsO9Da7HVGuZ5DtV4qOA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:34:12 2024 by rpki-client on console-fra.rpki-client.org