Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32163d65-0622-3982-baaa-a2eeadfd61bf.roa
File:                     32163d65-0622-3982-baaa-a2eeadfd61bf.roa (raw, json)
Hash identifier:          L5cw99F5hByTbq70rVscDtDCNOmfemKkvMmFF1TCELk=
Subject key identifier:   11:6A:F0:52:D0:B3:DA:CE:9F:18:72:D2:3F:BE:C7:2C:1B:1F:15:C7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858454655D7C327B40622ADA443C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32163d65-0622-3982-baaa-a2eeadfd61bf.roa
Signing time:             Wed 20 Mar 2024 22:25:37 +0000
ROA not before:           Wed 20 Mar 2024 22:25:37 +0000
ROA not after:            Tue 18 Jun 2024 22:25:37 +0000
asID:                     58061
IP address blocks:        166.0.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:55:d7:c3:27:b4:06:22:ad:a4:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 20 22:25:37 2024 GMT
            Not After : Jun 18 22:25:37 2024 GMT
        Subject: CN=24125c0b-323c-4432-86d0-c80d0c1635d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:73:c1:83:f1:e5:f5:36:05:91:21:8a:ad:cf:
                    fa:ef:20:74:a3:e7:2d:92:77:b6:9a:84:7d:6a:5d:
                    a2:39:1e:92:1b:6f:c2:ed:38:8a:4a:50:f4:df:6d:
                    37:e2:ca:1a:34:a2:45:bb:b8:14:49:db:ec:b6:c8:
                    80:4a:46:06:2c:2c:cb:f4:ba:d3:80:e5:f6:3a:20:
                    28:94:2f:45:12:01:03:d6:3f:9e:e9:39:a9:6c:a8:
                    fc:67:47:a8:40:84:54:6e:51:85:97:fb:99:f5:24:
                    d2:f7:c5:91:65:52:c3:c3:e0:70:bf:24:a5:e5:c6:
                    31:15:2c:f1:f6:b5:0a:be:d1:ce:20:9e:30:c8:59:
                    48:7d:15:e9:8f:55:bc:81:e0:0a:00:59:34:7b:a6:
                    8b:7f:18:c3:5f:9c:19:2c:be:ae:d7:af:9a:2a:6c:
                    3e:23:1f:44:f4:39:e4:af:76:27:92:bc:80:45:43:
                    82:df:e3:7f:3d:69:1d:cf:2e:97:22:4a:a5:b0:18:
                    de:d5:6f:5e:19:56:7c:e0:0a:20:2d:c0:5c:29:ea:
                    ac:4e:6e:7c:41:be:50:c7:b8:18:c3:77:47:bd:88:
                    97:4d:9d:fd:7a:8f:c6:45:91:29:33:a2:fc:be:30:
                    ac:1f:55:e8:cf:6d:f5:f3:86:7e:86:87:84:ae:4e:
                    b3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6A:F0:52:D0:B3:DA:CE:9F:18:72:D2:3F:BE:C7:2C:1B:1F:15:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32163d65-0622-3982-baaa-a2eeadfd61bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:a3:27:0c:12:13:24:1e:80:45:59:56:7e:95:d7:bd:1a:6e:
         49:47:5d:93:5d:33:5d:6c:1b:b0:ab:f7:31:ed:17:75:2f:cc:
         eb:72:d7:10:cb:1c:89:de:88:33:a8:72:d8:cd:df:19:35:15:
         89:73:a7:89:d9:7e:7e:14:02:3e:0f:b5:88:24:13:f0:44:42:
         77:39:94:0d:36:57:bb:b7:68:dc:18:61:c2:f4:bc:25:3c:af:
         77:78:0c:68:e1:59:83:b8:73:90:ec:a3:91:bf:6d:16:38:b1:
         79:d6:a2:db:00:d7:0a:7b:39:9c:06:82:9e:40:65:34:af:41:
         43:cd:7e:f2:c2:91:42:68:39:7f:36:31:65:11:88:a2:5d:35:
         7e:60:85:64:3b:62:ef:6a:78:27:f6:0d:73:a1:2d:d8:7c:85:
         77:e5:fa:9d:b9:33:7e:58:e8:0b:95:44:7f:7f:b9:9d:ac:bf:
         7e:42:83:fc:58:97:92:e0:f4:ce:8a:4a:45:55:d9:b7:9c:d1:
         92:ca:d2:72:a3:bd:0d:27:c2:86:e0:16:e3:26:12:84:ec:cf:
         b4:54:e0:6b:22:c0:f2:28:d8:b8:aa:59:ba:c9:29:32:c0:3c:
         66:00:a2:cd:5d:00:07:0f:b1:66:0b:84:96:70:76:36:8b:4c:
         76:1e:5d:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGVdfDJ7QGIq2kQ8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDMyMDIyMjUzN1oXDTI0MDYxODIyMjUzN1owLzEtMCsGA1UEAxMk
MjQxMjVjMGItMzIzYy00NDMyLTg2ZDAtYzgwZDBjMTYzNWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nPBg/Hl9TYFkSGKrc/67yB0o+ctkne2moR9
al2iOR6SG2/C7TiKSlD032034soaNKJFu7gUSdvstsiASkYGLCzL9LrTgOX2OiAo
lC9FEgED1j+e6TmpbKj8Z0eoQIRUblGFl/uZ9STS98WRZVLDw+BwvySl5cYxFSzx
9rUKvtHOIJ4wyFlIfRXpj1W8geAKAFk0e6aLfxjDX5wZLL6u16+aKmw+Ix9E9Dnk
r3YnkryARUOC3+N/PWkdzy6XIkqlsBje1W9eGVZ84AogLcBcKeqsTm58Qb5Qx7gY
w3dHvYiXTZ39eo/GRZEpM6L8vjCsH1Xoz23184Z+hoeErk6z8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBFq8FLQs9rOnxhy0j++xywbHxXHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzIxNjNkNjUtMDYyMi0z
OTgyLWJhYWEtYTJlZWFkZmQ2MWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgB5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEyjJwwSEyQegEVZVn6V170abklHXZNdM11sG7Cr9zHtF3UvzOty1xDL
HIneiDOoctjN3xk1FYlzp4nZfn4UAj4PtYgkE/BEQnc5lA02V7u3aNwYYcL0vCU8
r3d4DGjhWYO4c5Dso5G/bRY4sXnWotsA1wp7OZwGgp5AZTSvQUPNfvLCkUJoOX82
MWURiKJdNX5ghWQ7Yu9qeCf2DXOhLdh8hXfl+p25M35Y6AuVRH9/uZ2sv35Cg/xY
l5Lg9M6KSkVV2bec0ZLK0nKjvQ0nwobgFuMmEoTsz7RU4GsiwPIo2LiqWbrJKTLA
PGYAos1dAAcPsWYLhJZwdjaLTHYeXaM=
-----END CERTIFICATE-----
Generated at Sat May 4 02:55:45 2024 by rpki-client on console-fra.rpki-client.org