Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/9a4b6489-f063-398d-a440-ddfd34fb38fc.roa
File:                     9a4b6489-f063-398d-a440-ddfd34fb38fc.roa (raw, json)
Hash identifier:          /hGQphq8ZScpjv9F9HtwkYi4GI95tWrEkoseRrDp6ug=
Subject key identifier:   82:C7:B4:20:7C:8D:DE:E3:51:FC:D6:4C:5B:6D:51:7B:D8:B0:E8:E1
Certificate issuer:       /CN=590468a2-be81-410c-b887-a35157322fb1
Certificate serial:       010D0C9F432858457ECA34C5960173D4EB1B9E40
Authority key identifier: CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/9a4b6489-f063-398d-a440-ddfd34fb38fc.roa
Signing time:             Wed 10 Apr 2024 03:45:21 +0000
ROA not before:           Wed 10 Apr 2024 03:45:21 +0000
ROA not after:            Tue 09 Jul 2024 03:45:21 +0000
asID:                     13487
IP address blocks:        66.103.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7e:ca:34:c5:96:01:73:d4:eb:1b:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590468a2-be81-410c-b887-a35157322fb1
        Validity
            Not Before: Apr 10 03:45:21 2024 GMT
            Not After : Jul  9 03:45:21 2024 GMT
        Subject: CN=3f328e75-d1f9-4eef-860c-3ab09ecebfb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:10:7d:96:7a:ee:87:28:04:5c:bf:ef:6e:a9:
                    e8:2a:9b:ac:66:b0:a5:fb:3e:41:5e:fa:68:59:8d:
                    4b:4d:4d:d2:62:67:e9:c3:d4:4f:83:d5:f3:3a:76:
                    4e:21:30:bf:a9:07:ad:1d:67:77:b3:73:f1:35:de:
                    92:fb:22:26:a7:fb:5b:57:7c:c7:db:26:b8:69:3b:
                    24:8b:09:28:e5:bc:24:e3:97:05:ed:03:87:24:cc:
                    45:01:4f:4e:e1:ba:df:04:21:dc:8d:4b:35:7c:ee:
                    94:b8:ef:e1:6e:6d:8b:5f:eb:2c:99:70:7b:7a:b4:
                    92:8d:05:be:e8:bf:d4:48:a0:68:9a:3d:93:aa:e8:
                    ff:97:cf:80:5d:f4:b9:38:d7:2f:b9:bd:9d:6d:be:
                    05:9d:d3:72:0d:75:6e:7d:cb:e3:ec:16:8d:8e:5d:
                    06:fd:45:98:2d:30:07:13:a3:7f:42:f0:47:a4:5b:
                    36:62:07:0f:59:d5:56:eb:de:f5:7e:e0:dd:5c:1d:
                    17:05:ba:5e:18:55:27:d4:db:53:40:82:cb:51:88:
                    f9:61:3c:c3:27:20:e7:4b:a9:8d:40:8c:99:98:cd:
                    18:d7:75:15:ad:41:dc:41:f7:c3:c5:7c:d3:1f:f7:
                    d9:4c:0e:9e:23:4b:8b:75:2b:93:50:40:31:80:53:
                    31:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C7:B4:20:7C:8D:DE:E3:51:FC:D6:4C:5B:6D:51:7B:D8:B0:E8:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/9a4b6489-f063-398d-a440-ddfd34fb38fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl

            X509v3 Authority Key Identifier:
                keyid:CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.103.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:5d:31:e9:73:79:f1:b8:a3:7c:2d:bc:7c:65:d6:61:6f:87:
         0e:44:28:f7:8e:6b:a0:3b:e8:46:17:ae:07:cb:2b:38:bb:54:
         20:5b:79:50:05:f7:02:36:bf:36:c7:64:3c:b7:37:f9:07:94:
         9b:02:e4:a2:fc:25:78:6c:bb:eb:e6:dc:e4:47:98:6e:a6:14:
         36:9a:49:9a:a2:16:ac:cc:05:06:17:45:a4:92:4c:06:af:0a:
         cc:16:e1:3e:1a:35:e9:ee:1d:3a:7d:bb:f1:07:61:4c:9b:8a:
         d1:49:86:f6:76:0c:0e:8a:98:78:87:f7:34:cd:2f:0f:8f:be:
         f8:a1:98:0b:f0:af:c6:5e:ac:48:9b:49:a2:12:1e:3a:d0:0b:
         c8:04:0d:6d:3c:9e:b8:5c:21:1b:f3:5a:3d:19:0d:ef:ee:a8:
         d7:45:f4:62:b9:0f:7c:16:2c:0d:0f:db:24:fc:7f:67:a1:ea:
         9b:55:52:b2:90:a9:ec:03:5f:53:13:2e:01:97:5a:ea:f9:72:
         d4:fa:01:26:8d:56:13:48:ed:a5:6b:68:97:10:31:eb:46:e2:
         45:33:f0:58:58:75:79:7d:23:84:46:79:f1:6b:1f:70:79:4e:
         ae:42:7f:55:ff:95:1f:2d:6b:ed:c0:5f:13:b8:df:20:a0:a4:
         5b:14:68:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV+yjTFlgFz1OsbnkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTkwNDY4YTItYmU4MS00MTBjLWI4ODctYTM1MTU3MzIy
ZmIxMB4XDTI0MDQxMDAzNDUyMVoXDTI0MDcwOTAzNDUyMVowLzEtMCsGA1UEAxMk
M2YzMjhlNzUtZDFmOS00ZWVmLTg2MGMtM2FiMDllY2ViZmI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhB9lnruhygEXL/vbqnoKpusZrCl+z5BXvpo
WY1LTU3SYmfpw9RPg9XzOnZOITC/qQetHWd3s3PxNd6S+yImp/tbV3zH2ya4aTsk
iwko5bwk45cF7QOHJMxFAU9O4brfBCHcjUs1fO6UuO/hbm2LX+ssmXB7erSSjQW+
6L/USKBomj2Tquj/l8+AXfS5ONcvub2dbb4FndNyDXVufcvj7BaNjl0G/UWYLTAH
E6N/QvBHpFs2YgcPWdVW6971fuDdXB0XBbpeGFUn1NtTQILLUYj5YTzDJyDnS6mN
QIyZmM0Y13UVrUHcQffDxXzTH/fZTA6eI0uLdSuTUEAxgFMxrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFILHtCB8jd7jUfzWTFttUXvYsOjhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTA0
NjhhMi1iZTgxLTQxMGMtYjg4Ny1hMzUxNTczMjJmYjEvOWE0YjY0ODktZjA2My0z
OThkLWE0NDAtZGRmZDM0ZmIzOGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTkwNDY4YTItYmU4MS00MTBjLWI4
ODctYTM1MTU3MzIyZmIxLzU5MDQ2OGEyLWJlODEtNDEwYy1iODg3LWEzNTE1NzMy
MmZiMS5jcmwwHwYDVR0jBBgwFoAUz9+cv10n/WlBCOCkwLzC2qnoDokwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTA0NjhhMi1iZTgxLTQxMGMtYjg4Ny1hMzUx
NTczMjJmYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmebMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEZdMelzefG4o3wtvHxl1mFvhw5EKPeOa6A76EYXrgfLKzi7VCBbeVAF
9wI2vzbHZDy3N/kHlJsC5KL8JXhsu+vm3ORHmG6mFDaaSZqiFqzMBQYXRaSSTAav
CswW4T4aNenuHTp9u/EHYUybitFJhvZ2DA6KmHiH9zTNLw+PvvihmAvwr8ZerEib
SaISHjrQC8gEDW08nrhcIRvzWj0ZDe/uqNdF9GK5D3wWLA0P2yT8f2eh6ptVUrKQ
qewDX1MTLgGXWur5ctT6ASaNVhNI7aVraJcQMetG4kUz8FhYdXl9I4RGefFrH3B5
Tq5Cf1X/lR8ta+3AXxO43yCgpFsUaHM=
-----END CERTIFICATE-----
Generated at Thu May 9 00:44:53 2024 by rpki-client on console-fra.rpki-client.org