Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5552e290-207a-3310-a99e-6f156773a695.roa
File:                     5552e290-207a-3310-a99e-6f156773a695.roa (raw, json)
Hash identifier:          AKSwOUTYp+jrJDB+uaW1NCQfSSBFy7K9GbRmd/Ut/6o=
Subject key identifier:   7F:8A:82:23:73:8D:78:B5:46:66:0A:53:52:B7:A8:7F:D3:0D:FF:51
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847EFEF8232C4D88F48524EA780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5552e290-207a-3310-a99e-6f156773a695.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     61317
IP address blocks:        166.0.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:82:32:c4:d8:8f:48:52:4e:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=816a6c90-fd75-4faf-bc8a-57e383f43819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cc:9f:01:ec:aa:85:d2:8e:da:6c:f6:57:17:
                    24:97:19:6e:48:0f:a4:cc:ff:23:b5:6d:bf:67:13:
                    21:30:c0:4c:e6:90:10:19:9d:bc:14:26:0b:d2:b4:
                    e2:d6:f1:91:8f:6b:7a:09:ba:3e:c4:b7:0c:d6:26:
                    1e:54:8e:6f:d4:8b:ba:c8:e0:1a:22:0f:d9:5b:59:
                    a7:f9:ea:ff:ac:2d:1f:1b:3b:f4:28:c5:14:33:28:
                    82:24:3a:7c:ba:8f:66:3b:93:c5:3a:09:e2:59:3c:
                    ee:37:c5:3d:39:87:bd:1e:dc:8f:45:8b:9b:e2:64:
                    37:e9:b0:d5:76:f4:6e:e4:29:33:3b:19:a7:e3:a6:
                    63:5a:f1:c5:e9:bd:b8:74:cd:1b:c4:7a:d0:fb:d1:
                    9f:f1:3c:9b:d6:f0:fb:e8:ea:fa:f1:3c:1d:e0:e0:
                    9e:76:9a:b6:58:e8:06:1f:9a:97:e9:8b:e0:15:9a:
                    7f:ab:44:a1:70:d3:7a:98:a4:0a:96:fb:99:88:da:
                    22:59:b5:cc:58:4d:b3:e4:16:78:d0:f8:84:c5:18:
                    66:51:f6:67:a4:d4:47:c2:5e:fa:05:3b:35:2c:de:
                    03:aa:f0:7b:07:43:cb:d4:5c:ec:0d:e2:e0:ee:f4:
                    b2:c0:ff:a6:08:50:2e:56:65:79:30:74:8b:56:66:
                    24:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8A:82:23:73:8D:78:B5:46:66:0A:53:52:B7:A8:7F:D3:0D:FF:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5552e290-207a-3310-a99e-6f156773a695.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:e3:7a:26:e1:1b:d6:d3:3f:33:43:8d:9e:a8:b1:09:90:2e:
         a9:b7:bb:01:c6:12:b9:17:e6:ad:62:17:a9:bc:a2:0a:3f:1c:
         e2:a9:02:0a:85:02:9c:75:28:3e:12:14:2c:fb:e3:70:7a:7e:
         49:bd:93:06:83:45:08:9e:37:11:f8:31:e1:fe:56:ee:f9:9b:
         be:af:18:96:01:e1:02:3a:54:36:dc:8c:af:70:f7:16:b8:7c:
         87:ea:12:70:eb:cb:22:d1:78:d7:b7:16:0f:8d:98:bd:c0:ea:
         64:9e:10:61:9d:fb:7d:b4:12:f0:b5:b0:e2:c9:85:33:33:0d:
         70:3f:53:3a:e9:bc:90:95:4c:9f:18:35:f2:69:c2:10:ab:91:
         32:98:15:fe:cc:64:ec:67:22:f1:56:a2:b0:ac:e6:d9:7a:03:
         97:e3:87:4a:92:54:f6:88:89:0b:6a:5a:7c:13:dc:bb:f5:68:
         b0:ac:87:7e:2f:60:9f:ac:8f:a5:99:23:0c:b7:93:7d:e3:0e:
         13:4f:f4:ca:37:e8:ed:f0:94:82:7e:05:d8:bb:9c:4d:07:f9:
         2a:6d:b5:43:f6:bf:88:94:1e:78:91:5b:e5:d6:91:f6:05:60:
         0b:cf:a4:d8:97:0b:d6:07:e1:41:41:c0:62:5d:be:46:09:18:
         8c:5a:af:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfv74IyxNiPSFJOp4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTEyMDAyMDAzOVoXDTI1MDIxODAyMDAzOVowLzEtMCsGA1UEAxMk
ODE2YTZjOTAtZmQ3NS00ZmFmLWJjOGEtNTdlMzgzZjQzODE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMyfAeyqhdKO2mz2VxcklxluSA+kzP8jtW2/
ZxMhMMBM5pAQGZ28FCYL0rTi1vGRj2t6Cbo+xLcM1iYeVI5v1Iu6yOAaIg/ZW1mn
+er/rC0fGzv0KMUUMyiCJDp8uo9mO5PFOgniWTzuN8U9OYe9HtyPRYub4mQ36bDV
dvRu5CkzOxmn46ZjWvHF6b24dM0bxHrQ+9Gf8Tyb1vD76Or68Twd4OCedpq2WOgG
H5qX6YvgFZp/q0ShcNN6mKQKlvuZiNoiWbXMWE2z5BZ40PiExRhmUfZnpNRHwl76
BTs1LN4DqvB7B0PL1FzsDeLg7vSywP+mCFAuVmV5MHSLVmYkuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH+KgiNzjXi1RmYKU1K3qH/TDf9RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTU1MmUyOTAtMjA3YS0z
MzEwLWE5OWUtNmYxNTY3NzNhNjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFTjeibhG9bTPzNDjZ6osQmQLqm3uwHGErkX5q1iF6m8ogo/HOKpAgqF
Apx1KD4SFCz743B6fkm9kwaDRQieNxH4MeH+Vu75m76vGJYB4QI6VDbcjK9w9xa4
fIfqEnDryyLReNe3Fg+NmL3A6mSeEGGd+320EvC1sOLJhTMzDXA/UzrpvJCVTJ8Y
NfJpwhCrkTKYFf7MZOxnIvFWorCs5tl6A5fjh0qSVPaIiQtqWnwT3Lv1aLCsh34v
YJ+sj6WZIwy3k33jDhNP9Mo36O3wlIJ+Bdi7nE0H+SpttUP2v4iUHniRW+XWkfYF
YAvPpNiXC9YH4UFBwGJdvkYJGIxar6c=
-----END CERTIFICATE-----
Generated at Fri Feb 7 18:09:50 2025 by rpki-client