Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/26f2fabd-5538-3687-85db-5b7218c57c68.roa
File:                     26f2fabd-5538-3687-85db-5b7218c57c68.roa (raw, json)
Hash identifier:          DQ8+qB9jJeqxLzTThJwJfkEhpk9uRd8UCFMgr/OTLI0=
Subject key identifier:   C4:A2:F2:99:6E:2A:81:4A:EC:A4:12:18:02:2D:83:F8:0F:87:85:B3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847B12629FB506022EE13DC4D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/26f2fabd-5538-3687-85db-5b7218c57c68.roa
Signing time:             Mon 28 Oct 2024 14:14:55 +0000
ROA not before:           Mon 28 Oct 2024 14:14:55 +0000
ROA not after:            Sun 26 Jan 2025 15:14:55 +0000
asID:                     7018
IP address blocks:        166.0.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:26:29:fb:50:60:22:ee:13:dc:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 28 14:14:55 2024 GMT
            Not After : Jan 26 15:14:55 2025 GMT
        Subject: CN=b5ed571e-b5bc-467b-8666-9ccf5d31004c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cd:84:1e:a6:ef:47:a3:75:43:64:85:37:d0:
                    9e:c3:14:a2:87:8e:17:23:0b:1f:03:e8:21:54:6b:
                    2c:e2:1b:9e:4d:66:18:26:d8:4a:3a:43:84:ed:93:
                    78:bd:4d:34:eb:67:1e:6d:74:e3:18:b9:b4:3d:fd:
                    34:54:ff:bb:ae:7b:fc:cd:22:45:ec:62:20:80:57:
                    bd:14:d1:ea:09:1d:bd:0f:c1:4e:a3:66:1c:d8:a2:
                    ce:0b:8f:98:ce:5c:b8:cf:de:40:6c:6f:e5:d4:ff:
                    5e:77:23:8c:e9:a1:57:1c:73:95:45:43:be:77:cb:
                    c4:21:3b:f9:35:92:24:3d:73:60:92:f6:c1:d1:68:
                    43:d8:c4:02:b6:4a:66:71:21:b7:12:aa:33:2d:07:
                    3b:21:fb:d7:61:32:21:09:f4:0a:bf:c4:dc:28:95:
                    92:58:56:5c:1b:39:55:bd:f9:ae:5c:72:ff:8a:fa:
                    7b:46:1b:01:a3:87:96:87:42:52:82:ed:60:b9:46:
                    ce:a3:cd:06:82:e9:a4:d0:13:38:f7:97:72:15:cf:
                    12:d3:a8:fe:2f:c7:6f:18:43:a5:75:b5:10:97:dd:
                    4d:77:31:bc:04:ec:bb:a4:2b:bd:fa:3c:7f:1f:73:
                    f1:9c:72:d2:65:f5:83:e2:25:4f:84:19:32:cb:95:
                    f9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A2:F2:99:6E:2A:81:4A:EC:A4:12:18:02:2D:83:F8:0F:87:85:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/26f2fabd-5538-3687-85db-5b7218c57c68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:c0:4a:a2:25:5a:e0:f0:81:87:8d:c1:b3:ea:86:e8:0f:32:
         39:9d:b9:50:3c:80:1f:c3:e1:1a:b1:ce:2e:ff:dc:8e:6b:7a:
         21:a0:1f:18:c0:e7:49:d3:c7:91:c5:af:ea:9c:e4:88:58:a1:
         2c:38:83:60:87:66:45:2a:d9:f3:d3:f8:8d:ce:6b:18:89:86:
         93:f3:96:d7:d1:33:75:ce:5f:b2:5d:6a:0b:46:30:08:f2:ec:
         8a:d5:39:9d:7b:dd:41:22:93:62:59:5f:3a:56:65:03:ba:5d:
         bf:0d:47:6d:e1:9a:76:b7:03:ec:be:9d:b2:9b:83:c6:1a:95:
         59:1b:ff:9c:42:07:ca:30:9b:f0:a7:46:fc:b2:92:f9:30:40:
         cc:62:2c:5c:26:5f:f7:d2:6c:08:11:73:63:b1:1b:71:a6:36:
         98:7f:1d:e4:82:d8:92:d1:22:5b:86:5b:9f:a4:82:f2:ba:de:
         a9:8f:14:c8:3d:c1:9b:28:cd:fb:ac:c6:8c:a9:ab:1b:8e:06:
         2c:c2:81:2c:80:50:26:92:b1:50:da:51:1c:e7:a1:45:58:17:
         bd:4e:c1:f9:b7:31:1a:41:1a:b6:27:47:7f:9d:5b:c1:0a:3f:
         0c:bb:04:18:6e:4a:65:f1:c1:9d:0d:b1:3e:26:5b:60:d4:a3:
         06:58:f4:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexJin7UGAi7hPcTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTAyODE0MTQ1NVoXDTI1MDEyNjE1MTQ1NVowLzEtMCsGA1UEAxMk
YjVlZDU3MWUtYjViYy00NjdiLTg2NjYtOWNjZjVkMzEwMDRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA182EHqbvR6N1Q2SFN9CewxSih44XIwsfA+gh
VGss4hueTWYYJthKOkOE7ZN4vU0062cebXTjGLm0Pf00VP+7rnv8zSJF7GIggFe9
FNHqCR29D8FOo2Yc2KLOC4+Yzly4z95AbG/l1P9edyOM6aFXHHOVRUO+d8vEITv5
NZIkPXNgkvbB0WhD2MQCtkpmcSG3EqozLQc7IfvXYTIhCfQKv8TcKJWSWFZcGzlV
vfmuXHL/ivp7RhsBo4eWh0JSgu1guUbOo80Ggumk0BM495dyFc8S06j+L8dvGEOl
dbUQl91NdzG8BOy7pCu9+jx/H3PxnHLSZfWD4iVPhBkyy5X55QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMSi8pluKoFK7KQSGAItg/gPh4WzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjZmMmZhYmQtNTUzOC0z
Njg3LTg1ZGItNWI3MjE4YzU3YzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpgD4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF7ASqIlWuDwgYeNwbPqhugPMjmduVA8gB/D4Rqxzi7/3I5reiGgHxjA
50nTx5HFr+qc5IhYoSw4g2CHZkUq2fPT+I3OaxiJhpPzltfRM3XOX7JdagtGMAjy
7IrVOZ173UEik2JZXzpWZQO6Xb8NR23hmna3A+y+nbKbg8YalVkb/5xCB8owm/Cn
RvyykvkwQMxiLFwmX/fSbAgRc2OxG3GmNph/HeSC2JLRIluGW5+kgvK63qmPFMg9
wZsozfusxoypqxuOBizCgSyAUCaSsVDaURznoUVYF71Owfm3MRpBGrYnR3+dW8EK
Pwy7BBhuSmXxwZ0NsT4mW2DUowZY9Bg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:34:44 2024 by rpki-client on console-fra.rpki-client.org