Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2a3ab047-857f-39ce-a94a-4962535bd41c.roa
File:                     2a3ab047-857f-39ce-a94a-4962535bd41c.roa (raw, json)
Hash identifier:          nQjKWsEN7P+6wcmZvEDlY3y4nkzHLE0Sc0iwikljzjE=
Subject key identifier:   06:84:72:6E:6D:EF:19:8D:24:CE:C0:ED:07:3D:FF:82:13:1F:01:65
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847600B9CA85F9F5893EF3842E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2a3ab047-857f-39ce-a94a-4962535bd41c.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     62240
IP address blocks:        166.1.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:9c:a8:5f:9f:58:93:ef:38:42:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=ac951b22-7fb2-4ed9-a85a-1deb789afc7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b8:4f:26:f4:99:bb:ff:12:9d:95:ff:96:95:
                    0b:55:8b:6d:82:79:a9:f2:7b:c2:76:bf:e3:a2:d9:
                    ee:26:a7:01:29:d9:f6:35:52:1d:30:99:70:a0:aa:
                    66:19:31:70:7f:56:0b:45:80:68:4c:1a:0d:19:43:
                    f2:d6:4f:71:dc:df:96:84:c8:32:77:f8:b7:95:94:
                    82:64:06:08:f7:33:42:f3:83:b7:09:49:87:86:96:
                    90:f7:69:a1:d1:84:2d:22:2d:c2:76:8f:b3:d2:d7:
                    df:f8:d4:b8:e7:92:91:cd:89:76:73:2f:62:9e:db:
                    50:b6:85:e9:61:60:d3:d9:6e:85:77:ba:2c:0d:92:
                    2a:b0:74:43:d1:81:f4:86:c0:07:67:0c:40:c8:18:
                    ab:87:cb:57:ac:5d:a3:03:59:b4:70:9a:42:12:04:
                    0f:72:8d:d4:bc:31:7e:30:3b:2c:27:39:ca:86:54:
                    0b:1e:ce:ba:92:d0:f7:fb:f2:02:72:3e:6c:6b:8f:
                    f0:64:e5:82:67:4c:bc:c9:3f:7e:83:94:2a:02:00:
                    cc:79:59:40:fb:30:fa:5e:a1:24:81:48:f2:b5:d8:
                    c6:43:fb:db:28:89:27:ac:43:14:78:dd:3a:6d:6b:
                    40:c8:aa:13:65:55:68:96:f9:7b:51:01:1d:b4:25:
                    d4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:84:72:6E:6D:EF:19:8D:24:CE:C0:ED:07:3D:FF:82:13:1F:01:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2a3ab047-857f-39ce-a94a-4962535bd41c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:61:4d:cc:91:10:ee:66:14:17:5c:82:42:d2:db:e7:b1:72:
         a8:64:4d:98:39:28:06:ff:a7:d4:db:3a:1b:8e:cb:07:d7:ad:
         8f:10:59:89:b1:7b:57:b3:bc:cc:f7:35:86:5a:11:1a:87:d5:
         ce:09:4d:2c:e6:01:0a:52:25:b9:6e:6d:ef:98:74:98:84:35:
         94:fc:13:7a:72:ae:71:b1:9b:6d:1d:69:ab:af:32:10:d9:a3:
         79:ce:d9:4f:bc:c2:2a:33:a6:e9:ad:39:68:5d:e6:9c:45:15:
         f5:f7:03:9d:a6:04:3d:2c:05:cf:fe:60:ab:00:14:9d:0e:a0:
         3b:4a:e7:fe:9a:72:38:39:cf:1a:cc:06:06:85:e1:62:92:ad:
         52:7f:4c:18:e7:7e:98:81:95:eb:36:6c:f3:cf:0f:e1:63:a4:
         fb:1c:54:e1:db:99:d0:4b:9e:ca:0b:1e:a8:3e:d2:96:50:9b:
         8f:cf:f8:72:45:81:5e:3d:3d:5e:c1:dd:69:2a:43:f5:4f:a3:
         30:b8:15:7c:54:bd:d6:9b:9a:ec:d2:10:34:f7:6c:37:cd:08:
         78:12:b2:e0:28:88:21:84:57:15:25:33:0a:d8:e5:77:d7:ed:
         7e:53:07:cc:8b:72:34:27:fc:c2:71:dd:47:b2:f7:6f:9c:26:
         0f:7a:e1:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC5yoX59Yk+84QuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk
YWM5NTFiMjItN2ZiMi00ZWQ5LWE4NWEtMWRlYjc4OWFmYzdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rhPJvSZu/8SnZX/lpULVYttgnmp8nvCdr/j
otnuJqcBKdn2NVIdMJlwoKpmGTFwf1YLRYBoTBoNGUPy1k9x3N+WhMgyd/i3lZSC
ZAYI9zNC84O3CUmHhpaQ92mh0YQtIi3Cdo+z0tff+NS455KRzYl2cy9inttQtoXp
YWDT2W6Fd7osDZIqsHRD0YH0hsAHZwxAyBirh8tXrF2jA1m0cJpCEgQPco3UvDF+
MDssJznKhlQLHs66ktD3+/ICcj5sa4/wZOWCZ0y8yT9+g5QqAgDMeVlA+zD6XqEk
gUjytdjGQ/vbKIknrEMUeN06bWtAyKoTZVVolvl7UQEdtCXUEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAaEcm5t7xmNJM7A7Qc9/4ITHwFlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmEzYWIwNDctODU3Zi0z
OWNlLWE5NGEtNDk2MjUzNWJkNDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJRhTcyREO5mFBdcgkLS2+excqhkTZg5KAb/p9TbOhuOywfXrY8QWYmx
e1ezvMz3NYZaERqH1c4JTSzmAQpSJblube+YdJiENZT8E3pyrnGxm20daauvMhDZ
o3nO2U+8wiozpumtOWhd5pxFFfX3A52mBD0sBc/+YKsAFJ0OoDtK5/6acjg5zxrM
BgaF4WKSrVJ/TBjnfpiBles2bPPPD+FjpPscVOHbmdBLnsoLHqg+0pZQm4/P+HJF
gV49PV7B3WkqQ/VPozC4FXxUvdabmuzSEDT3bDfNCHgSsuAoiCGEVxUlMwrY5XfX
7X5TB8yLcjQn/MJx3Uey92+cJg964Tc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:59:58 2024 by rpki-client on console-ams.rpki-client.org