Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/500d4788-947f-3b79-8b75-109a2c9c33f3.roa
File:                     500d4788-947f-3b79-8b75-109a2c9c33f3.roa (raw, json)
Hash identifier:          L0E2LV4vnmeiQa8doV3289lCb54u//fnFdVuukBK3ms=
Subject key identifier:   F3:F7:5D:D7:88:4E:B1:ED:8A:5D:41:9E:B6:C4:DA:EE:B1:54:9C:52
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858455658A745DF0C5D4272537C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/500d4788-947f-3b79-8b75-109a2c9c33f3.roa
Signing time:             Tue 26 Mar 2024 16:04:13 +0000
ROA not before:           Tue 26 Mar 2024 16:04:13 +0000
ROA not after:            Mon 24 Jun 2024 16:04:13 +0000
asID:                     58061
IP address blocks:        166.1.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:58:a7:45:df:0c:5d:42:72:53:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 26 16:04:13 2024 GMT
            Not After : Jun 24 16:04:13 2024 GMT
        Subject: CN=81205dca-2702-4f91-a4fc-10f7e43fd125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fd:30:74:10:e5:d2:3b:9b:18:7a:13:13:f4:
                    aa:56:5a:e3:84:73:60:bf:6f:fd:bf:fc:33:f0:db:
                    33:8e:ad:9f:db:ce:c4:fa:3d:0c:1c:84:50:93:27:
                    72:74:b4:57:9d:30:5d:3b:01:80:ec:81:9b:0a:72:
                    6e:b5:17:03:a9:e6:10:5f:b3:6b:60:b7:12:a4:a4:
                    23:44:8a:53:7c:03:40:a4:aa:4c:18:6d:a6:77:bf:
                    8f:82:8a:eb:01:b2:e3:09:6a:20:97:e5:8f:1c:d6:
                    b5:17:5f:a2:9e:b9:67:8f:e3:8e:5b:a1:a0:95:38:
                    a7:96:97:af:ce:55:9c:e8:d6:b6:cd:bb:9c:d5:fb:
                    e1:85:55:a7:77:6a:c4:02:4a:70:82:32:8d:18:ba:
                    0b:49:d8:7e:a5:eb:4e:7a:5e:72:69:0b:5f:1b:17:
                    50:7f:e1:3c:e5:e4:63:35:a7:a3:3b:65:89:c4:ed:
                    95:02:40:e6:92:69:e5:a3:07:f8:38:c0:1c:b1:3a:
                    86:c4:ca:1d:20:62:b7:00:73:b2:1a:a3:bc:ec:1a:
                    9e:67:78:01:e5:90:f6:9e:05:f5:7f:88:36:cc:b0:
                    76:1c:90:a3:4e:b8:dd:17:28:c5:e6:67:70:ae:b4:
                    4c:a3:bf:17:75:c2:45:40:da:ee:c7:16:7c:2e:37:
                    71:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F7:5D:D7:88:4E:B1:ED:8A:5D:41:9E:B6:C4:DA:EE:B1:54:9C:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/500d4788-947f-3b79-8b75-109a2c9c33f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:e2:83:29:52:eb:ee:b3:2f:dd:09:9d:7e:1a:16:b4:fb:e0:
         a4:7f:89:13:35:e0:90:bc:6d:ea:5e:6b:89:1f:46:00:91:d2:
         2b:b1:f7:69:e3:67:97:9a:7f:4b:ca:0e:3b:4a:68:e3:bd:48:
         88:99:27:54:8d:30:a5:76:65:e8:7e:f4:39:bc:34:63:53:df:
         f6:89:4a:9d:bf:0a:3c:8d:2e:31:c0:52:1d:62:ba:67:60:10:
         59:ad:2a:3f:b8:ca:ce:5d:02:52:69:17:d0:b5:56:a7:f2:62:
         50:13:55:83:ad:1f:93:59:da:da:78:38:d0:7f:df:2b:a0:51:
         5e:ba:90:26:1c:2d:65:98:58:31:04:52:53:9a:17:52:79:10:
         e2:fb:7e:97:48:8f:9a:81:86:11:fc:a2:f6:a3:8c:db:b2:f4:
         65:ff:6a:27:ce:b7:7e:24:3d:f8:5c:15:3f:d7:cf:f5:b6:14:
         5a:8b:85:2e:9a:66:38:37:6a:bf:4d:f1:d1:15:e2:1c:1c:ff:
         f6:30:2f:06:04:12:59:6e:03:dd:61:18:9a:6f:79:62:02:8c:
         8d:34:ab:c8:81:c3:8a:9e:13:45:3d:46:29:81:e7:6b:0c:15:
         4d:e2:69:96:16:3a:6e:c2:a0:1a:7c:fa:7a:0e:2e:c7:0b:69:
         c8:54:77:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVWWKdF3wxdQnJTfIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDMyNjE2MDQxM1oXDTI0MDYyNDE2MDQxM1owLzEtMCsGA1UEAxMk
ODEyMDVkY2EtMjcwMi00ZjkxLWE0ZmMtMTBmN2U0M2ZkMTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv0wdBDl0jubGHoTE/SqVlrjhHNgv2/9v/wz
8Nszjq2f287E+j0MHIRQkydydLRXnTBdOwGA7IGbCnJutRcDqeYQX7NrYLcSpKQj
RIpTfANApKpMGG2md7+PgorrAbLjCWogl+WPHNa1F1+inrlnj+OOW6GglTinlpev
zlWc6Na2zbuc1fvhhVWnd2rEAkpwgjKNGLoLSdh+petOel5yaQtfGxdQf+E85eRj
NaejO2WJxO2VAkDmkmnlowf4OMAcsTqGxModIGK3AHOyGqO87BqeZ3gB5ZD2ngX1
f4g2zLB2HJCjTrjdFyjF5mdwrrRMo78XdcJFQNruxxZ8LjdxgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPP3XdeITrHtil1BnrbE2u6xVJxSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTAwZDQ3ODgtOTQ3Zi0z
Yjc5LThiNzUtMTA5YTJjOWMzM2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgEtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA7igylS6+6zL90JnX4aFrT74KR/iRM14JC8bepea4kfRgCR0iux92nj
Z5eaf0vKDjtKaOO9SIiZJ1SNMKV2Zeh+9Dm8NGNT3/aJSp2/CjyNLjHAUh1iumdg
EFmtKj+4ys5dAlJpF9C1VqfyYlATVYOtH5NZ2tp4ONB/3yugUV66kCYcLWWYWDEE
UlOaF1J5EOL7fpdIj5qBhhH8ovajjNuy9GX/aifOt34kPfhcFT/Xz/W2FFqLhS6a
Zjg3ar9N8dEV4hwc//YwLwYEElluA91hGJpveWICjI00q8iBw4qeE0U9RimB52sM
FU3iaZYWOm7CoBp8+noOLscLachUd7Y=
-----END CERTIFICATE-----
Generated at Fri May 3 21:45:37 2024 by rpki-client on console-fra.rpki-client.org