Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/46125399-6281-3432-82cb-4275997282c6.roa
File:                     46125399-6281-3432-82cb-4275997282c6.roa (raw, json)
Hash identifier:          quhtbloQMODBo1heFs+chY/owjspDXUwcIuJe9lA6K0=
Subject key identifier:   3B:CD:49:D1:83:C9:18:00:2E:DA:C4:6D:2E:F6:3C:10:31:D4:9F:D3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845A15E06CD5ED74374095AD780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/46125399-6281-3432-82cb-4275997282c6.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     62240
IP address blocks:        166.1.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:06:cd:5e:d7:43:74:09:5a:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=8ceed2c3-c05e-417f-93cf-d82c1415e607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a9:c3:b6:d6:0e:ab:f3:00:3e:02:74:f2:b1:
                    fb:71:9b:06:45:85:d4:10:32:a3:ad:de:30:5f:c2:
                    3e:e2:c1:8d:a5:f1:b6:ce:f9:a5:bd:67:54:70:3d:
                    45:dd:d0:5f:33:66:01:e5:f1:c6:95:e2:1f:85:02:
                    6a:01:61:8f:be:bb:c6:16:9e:b3:0c:f0:0f:ab:1a:
                    af:7d:ea:1c:e4:44:0d:b5:ca:44:2e:05:0d:c9:17:
                    27:20:4c:db:6a:ad:99:39:8a:c2:db:55:5c:74:2b:
                    00:9d:9f:66:5b:08:28:b5:7e:ed:5a:04:a8:c6:79:
                    12:e7:dd:47:ea:19:ea:0e:be:bb:f2:9f:c7:6d:1a:
                    f2:f3:0b:d6:df:15:0e:85:2a:59:b7:54:ba:12:75:
                    c1:70:a5:20:6b:79:0e:9b:89:99:7d:0e:ed:34:98:
                    2c:ef:37:2a:bb:bd:5a:dc:e2:42:10:54:17:12:19:
                    d4:93:21:fb:8d:36:7e:3c:73:36:f3:5c:69:a4:18:
                    e1:ce:65:24:7d:13:ae:85:f1:36:f9:02:b2:24:d0:
                    39:a7:89:af:d2:99:5e:45:c5:0c:b3:ff:d9:8c:3d:
                    c5:9d:2a:de:d2:79:f8:8a:93:9f:e6:76:10:63:eb:
                    f8:d0:d6:c5:90:ed:b6:c1:48:8c:80:ac:f0:8a:6c:
                    36:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CD:49:D1:83:C9:18:00:2E:DA:C4:6D:2E:F6:3C:10:31:D4:9F:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/46125399-6281-3432-82cb-4275997282c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:9d:9c:84:93:ef:51:16:17:7c:7f:13:3e:d5:7c:ce:67:43:
         9c:ce:ae:0b:69:39:f4:cf:01:c6:42:8a:1e:16:bb:25:13:e3:
         24:5a:fd:23:85:cb:6b:ed:34:3b:11:3a:63:6c:f9:81:ee:20:
         ba:e9:50:a5:b8:9b:9e:e9:85:ef:e3:87:65:fd:ab:eb:b4:1a:
         8f:c0:99:fc:3b:3d:19:a0:8f:04:c4:5e:2d:55:8e:14:d5:e2:
         77:d8:40:00:f4:06:d6:aa:8a:bb:4c:87:3e:45:8a:ec:b0:f0:
         03:7c:9b:c9:24:a2:49:e0:4c:12:74:54:0b:4b:68:2b:50:e6:
         b6:fb:d3:68:88:20:a6:64:c0:a2:64:9e:cc:42:84:22:5a:51:
         83:76:12:f2:18:ec:ad:92:12:d4:1a:fd:78:6d:8c:21:b6:ed:
         8b:ae:66:19:3c:9e:ff:f1:82:17:48:f6:93:b7:4f:8b:7a:6d:
         cf:38:e0:d3:be:5d:29:19:a4:87:1f:ab:d1:a1:24:c0:73:bb:
         8c:da:83:94:b8:4d:e1:54:4b:af:6c:31:1a:ab:ef:01:f4:dc:
         1e:44:44:79:ad:ed:b1:05:97:a0:43:9b:5d:b1:2c:d6:ea:5b:
         6b:ce:db:57:2a:e8:0b:14:92:af:d1:a6:22:f1:12:de:03:c2:
         c6:8d:6b:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXgbNXtdDdAla14AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk
OGNlZWQyYzMtYzA1ZS00MTdmLTkzY2YtZDgyYzE0MTVlNjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqnDttYOq/MAPgJ08rH7cZsGRYXUEDKjrd4w
X8I+4sGNpfG2zvmlvWdUcD1F3dBfM2YB5fHGleIfhQJqAWGPvrvGFp6zDPAPqxqv
feoc5EQNtcpELgUNyRcnIEzbaq2ZOYrC21VcdCsAnZ9mWwgotX7tWgSoxnkS591H
6hnqDr678p/HbRry8wvW3xUOhSpZt1S6EnXBcKUga3kOm4mZfQ7tNJgs7zcqu71a
3OJCEFQXEhnUkyH7jTZ+PHM281xppBjhzmUkfROuhfE2+QKyJNA5p4mv0pleRcUM
s//ZjD3FnSre0nn4ipOf5nYQY+v40NbFkO22wUiMgKzwimw2DwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDvNSdGDyRgALtrEbS72PBAx1J/TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDYxMjUzOTktNjI4MS0z
NDMyLTgyY2ItNDI3NTk5NzI4MmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgFCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFWdnIST71EWF3x/Ez7VfM5nQ5zOrgtpOfTPAcZCih4WuyUT4yRa/SOF
y2vtNDsROmNs+YHuILrpUKW4m57phe/jh2X9q+u0Go/Amfw7PRmgjwTEXi1VjhTV
4nfYQAD0BtaqirtMhz5Fiuyw8AN8m8kkokngTBJ0VAtLaCtQ5rb702iIIKZkwKJk
nsxChCJaUYN2EvIY7K2SEtQa/XhtjCG27YuuZhk8nv/xghdI9pO3T4t6bc844NO+
XSkZpIcfq9GhJMBzu4zag5S4TeFUS69sMRqr7wH03B5ERHmt7bEFl6BDm12xLNbq
W2vO21cq6AsUkq/RpiLxEt4DwsaNaxQ=
-----END CERTIFICATE-----
Generated at Fri May 3 22:27:21 2024 by rpki-client on console-ams.rpki-client.org