Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/330db5c5-a785-373c-8369-2c108e3ae9ab.roa
File:                     330db5c5-a785-373c-8369-2c108e3ae9ab.roa (raw, json)
Hash identifier:          bxtJOCRBq86qCOYO/VOl7kVHSlhvsQjRZiWE+oR7hSs=
Subject key identifier:   92:7B:80:3D:7B:5A:F5:38:50:BF:55:8C:8F:7C:D1:83:F3:6C:71:C3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847ED24E0F9A467F833968CC800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/330db5c5-a785-373c-8369-2c108e3ae9ab.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     32402
IP address blocks:        166.1.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:e0:f9:a4:67:f8:33:96:8c:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=caf98e81-9385-4de6-8c77-dee8cdd304b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a5:52:39:88:91:da:cf:a1:d3:bd:38:da:d1:
                    7b:97:89:e0:87:63:7a:33:bb:0d:6d:d8:3a:74:59:
                    9a:72:33:7f:b6:ab:cf:dd:98:da:36:3b:7a:d5:24:
                    a7:50:b4:f2:2c:21:9d:34:58:b5:f4:98:f8:28:5f:
                    9a:01:cc:c0:38:58:ce:b6:49:e4:da:c4:26:28:f1:
                    6f:27:54:e4:8e:e2:3c:2b:ed:26:21:ea:cd:8f:9e:
                    55:ed:b8:4e:59:09:34:54:72:29:6c:38:8d:93:82:
                    f3:34:9a:a7:75:ed:d0:6a:e0:3d:ba:b3:d7:ac:1a:
                    3e:07:5a:ec:14:aa:63:d2:cf:c2:6b:73:74:5e:61:
                    23:58:81:19:59:f1:36:90:de:4e:6d:bc:79:1b:70:
                    5c:bb:fd:58:29:c2:fd:1d:fc:1b:e7:99:d9:ae:83:
                    17:02:59:a4:11:37:34:81:0d:4e:c8:83:2f:a6:41:
                    11:9b:13:16:8f:2b:c2:11:0f:a6:9f:a4:9a:7b:96:
                    90:ac:b9:ea:d4:50:08:30:25:08:98:a1:a7:94:6b:
                    4f:6f:b6:90:30:36:58:dc:70:c5:5f:45:24:5d:27:
                    4e:7d:d4:2c:f6:95:ca:81:78:9f:89:c4:da:43:66:
                    f7:46:51:f9:bb:d8:43:1d:f5:1f:04:f2:06:6b:13:
                    fa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7B:80:3D:7B:5A:F5:38:50:BF:55:8C:8F:7C:D1:83:F3:6C:71:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/330db5c5-a785-373c-8369-2c108e3ae9ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c8:a3:08:fb:7f:02:56:39:1b:97:12:e7:7a:95:e6:03:78:
         dd:2b:f0:9c:64:88:8c:5f:a2:4f:0f:cc:65:3e:1f:84:e7:cd:
         a8:31:4f:5c:21:88:5b:d2:f9:d2:7c:3a:7a:a4:f1:4f:35:14:
         49:48:86:d9:1f:d8:dc:d6:f5:b0:3f:f9:72:71:0d:cd:41:ea:
         36:1a:ef:97:45:c6:4a:6a:c1:a6:9b:4d:34:24:0b:74:5c:3c:
         96:50:72:83:6f:34:f3:19:4d:af:7b:48:1e:11:1e:65:e1:86:
         0d:43:6f:e1:6c:5d:91:5d:a5:56:cb:9c:22:05:e9:33:c8:bf:
         20:bc:c9:32:db:4f:db:6e:a0:b5:f5:1f:2d:f9:c9:73:f5:15:
         42:61:58:f6:f1:20:34:ea:11:1e:e4:2d:aa:64:6f:60:2e:92:
         cc:72:7a:05:2b:51:f3:36:93:bd:65:c0:0f:b7:51:86:d7:c7:
         4c:0d:9b:12:0b:f9:df:81:c8:37:9b:2b:cd:ec:c2:fa:e4:5e:
         be:8a:f9:6d:83:5f:f1:a8:ed:95:ae:10:5c:d1:6f:bd:9c:2e:
         34:0f:78:27:9f:35:a2:68:61:de:ca:9a:28:41:2f:42:30:44:
         7e:0a:a7:9c:97:54:ef:30:70:66:45:ea:cb:e6:72:f9:3e:ad:
         b7:cd:bc:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJOD5pGf4M5aMyAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk
Y2FmOThlODEtOTM4NS00ZGU2LThjNzctZGVlOGNkZDMwNGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6VSOYiR2s+h07042tF7l4ngh2N6M7sNbdg6
dFmacjN/tqvP3ZjaNjt61SSnULTyLCGdNFi19Jj4KF+aAczAOFjOtknk2sQmKPFv
J1TkjuI8K+0mIerNj55V7bhOWQk0VHIpbDiNk4LzNJqnde3QauA9urPXrBo+B1rs
FKpj0s/Ca3N0XmEjWIEZWfE2kN5Obbx5G3Bcu/1YKcL9Hfwb55nZroMXAlmkETc0
gQ1OyIMvpkERmxMWjyvCEQ+mn6Sae5aQrLnq1FAIMCUImKGnlGtPb7aQMDZY3HDF
X0UkXSdOfdQs9pXKgXificTaQ2b3RlH5u9hDHfUfBPIGaxP6SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJJ7gD17WvU4UL9VjI980YPzbHHDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzMwZGI1YzUtYTc4NS0z
NzNjLTgzNjktMmMxMDhlM2FlOWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgFJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACDIowj7fwJWORuXEud6leYDeN0r8JxkiIxfok8PzGU+H4TnzagxT1wh
iFvS+dJ8Onqk8U81FElIhtkf2NzW9bA/+XJxDc1B6jYa75dFxkpqwaabTTQkC3Rc
PJZQcoNvNPMZTa97SB4RHmXhhg1Db+FsXZFdpVbLnCIF6TPIvyC8yTLbT9tuoLX1
Hy35yXP1FUJhWPbxIDTqER7kLapkb2AuksxyegUrUfM2k71lwA+3UYbXx0wNmxIL
+d+ByDebK83swvrkXr6K+W2DX/Go7ZWuEFzRb72cLjQPeCefNaJoYd7KmihBL0Iw
RH4Kp5yXVO8wcGZF6svmcvk+rbfNvCM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:39 2024 by rpki-client on console-ams.rpki-client.org