Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/388d7777-4e45-3585-ad5a-6c81c8fcb32f.roa
File:                     388d7777-4e45-3585-ad5a-6c81c8fcb32f.roa (raw, json)
Hash identifier:          L9Lv+zDyOgtAEohqRlYETKTbYyxCwmGAqRlOrfhbMpI=
Subject key identifier:   01:DF:59:BA:66:7C:10:FA:D1:3F:F5:AE:07:D0:BD:1C:6E:3B:92:1B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847E62B6F68209F7AFBA3F7CB80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/388d7777-4e45-3585-ad5a-6c81c8fcb32f.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     58061
IP address blocks:        166.1.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:6f:68:20:9f:7a:fb:a3:f7:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=cd5915b4-1eb9-4cb7-983c-21f1c21a2ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e8:78:cd:55:4a:f8:28:fc:48:4e:ab:7c:54:
                    4b:10:d3:c4:e3:c9:1a:4f:61:f3:b5:d0:c2:54:df:
                    75:ff:5c:88:0e:07:46:6d:99:62:d6:f6:76:7a:c7:
                    1e:e4:8d:cd:dc:d8:66:1b:dc:ba:be:43:0d:9d:0d:
                    c7:2f:a0:ce:56:3e:8b:c0:e4:cd:90:de:fe:93:03:
                    97:96:4b:87:d8:a5:2c:1c:3c:8d:27:63:e1:f7:56:
                    cf:84:5d:79:5c:19:40:a7:fc:90:c8:68:c3:c4:e6:
                    be:67:19:3d:06:8f:51:15:31:f4:d7:aa:8f:5d:3a:
                    ca:9a:79:25:e4:2d:f6:0d:b5:ea:03:8c:82:96:10:
                    7d:52:84:a3:b0:3a:8c:be:03:32:bc:dd:c3:2e:a4:
                    b3:1a:42:26:57:46:53:eb:f5:83:81:12:b1:fd:c6:
                    30:9a:62:97:21:7a:24:ff:90:5a:12:4d:35:54:16:
                    fd:52:72:4b:cc:37:de:47:23:fc:f2:b7:76:b2:8c:
                    74:e7:e4:c3:f5:bf:3d:91:9d:86:37:e6:ae:98:bc:
                    87:c0:d9:cd:31:2a:75:aa:ac:51:d1:cf:fe:ca:c2:
                    5d:d4:36:99:60:9d:ba:8f:38:51:5f:2d:79:38:f7:
                    9f:4c:53:29:49:65:88:26:35:13:e2:ba:d2:b1:6e:
                    7b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DF:59:BA:66:7C:10:FA:D1:3F:F5:AE:07:D0:BD:1C:6E:3B:92:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/388d7777-4e45-3585-ad5a-6c81c8fcb32f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:86:03:6a:c2:0f:43:03:0a:2c:35:a2:28:cf:77:1f:73:ef:
         b7:a1:17:8e:e1:a8:07:cc:77:a8:53:24:67:e2:33:53:c1:37:
         97:78:65:bf:d5:6f:e4:11:35:f6:36:f1:10:b9:dc:5e:dd:3d:
         81:d5:66:16:29:ab:24:ee:8e:60:f5:6c:66:4a:6c:b9:3b:58:
         56:2a:ae:93:1b:ae:29:18:c0:7c:f9:97:50:f8:e1:81:78:65:
         c6:26:8e:16:66:29:4b:b2:13:68:5a:3a:16:57:4e:e2:ee:e5:
         cb:0d:8f:10:0a:eb:a6:27:61:68:77:52:0d:a4:f8:e5:9f:40:
         a3:ee:b9:b3:e3:e4:8e:85:fe:0e:ed:dd:13:a9:1e:3f:ef:47:
         3b:ad:03:a7:c8:96:17:6c:7e:66:73:54:cd:4a:15:ec:a8:bb:
         cb:af:3c:69:95:b1:4b:40:b9:95:eb:ab:66:d2:e9:94:a1:b2:
         c5:52:26:0a:50:64:ac:63:8c:bc:dc:dd:8e:16:53:d5:79:5a:
         2a:05:39:1a:2d:5d:f1:03:4a:76:fe:76:c8:90:c8:de:5f:96:
         10:bc:02:61:ea:39:6e:d5:71:fb:7f:83:4a:74:73:60:ab:47:
         92:ba:eb:76:45:08:dd:d4:5f:35:08:db:83:cb:49:51:94:b3:
         b2:a7:d2:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK29oIJ96+6P3y4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
Y2Q1OTE1YjQtMWViOS00Y2I3LTk4M2MtMjFmMWMyMWEyYmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOh4zVVK+Cj8SE6rfFRLENPE48kaT2HztdDC
VN91/1yIDgdGbZli1vZ2esce5I3N3NhmG9y6vkMNnQ3HL6DOVj6LwOTNkN7+kwOX
lkuH2KUsHDyNJ2Ph91bPhF15XBlAp/yQyGjDxOa+Zxk9Bo9RFTH016qPXTrKmnkl
5C32DbXqA4yClhB9UoSjsDqMvgMyvN3DLqSzGkImV0ZT6/WDgRKx/cYwmmKXIXok
/5BaEk01VBb9UnJLzDfeRyP88rd2sox05+TD9b89kZ2GN+aumLyHwNnNMSp1qqxR
0c/+ysJd1DaZYJ26jzhRXy15OPefTFMpSWWIJjUT4rrSsW57XQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAHfWbpmfBD60T/1rgfQvRxuO5IbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzg4ZDc3NzctNGU0NS0z
NTg1LWFkNWEtNmM4MWM4ZmNiMzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgH3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABKGA2rCD0MDCiw1oijPdx9z77ehF47hqAfMd6hTJGfiM1PBN5d4Zb/V
b+QRNfY28RC53F7dPYHVZhYpqyTujmD1bGZKbLk7WFYqrpMbrikYwHz5l1D44YF4
ZcYmjhZmKUuyE2haOhZXTuLu5csNjxAK66YnYWh3Ug2k+OWfQKPuubPj5I6F/g7t
3ROpHj/vRzutA6fIlhdsfmZzVM1KFeyou8uvPGmVsUtAuZXrq2bS6ZShssVSJgpQ
ZKxjjLzc3Y4WU9V5WioFORotXfEDSnb+dsiQyN5flhC8AmHqOW7Vcft/g0p0c2Cr
R5K663ZFCN3UXzUI24PLSVGUs7Kn0oM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:39 2024 by rpki-client on console-ams.rpki-client.org