Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/65d6953f-19c2-3af5-ad67-40225463073e.roa
File:                     65d6953f-19c2-3af5-ad67-40225463073e.roa (raw, json)
Hash identifier:          1orICpvsW01pwWxouCPrGqZDhJ9deYrIF57zkdz44Yg=
Subject key identifier:   6E:1E:89:63:06:08:28:EC:E4:4A:7F:52:8D:50:8C:A9:FE:87:EB:5B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584731FB9D1B9A04A65FA5713300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/65d6953f-19c2-3af5-ad67-40225463073e.roa
Signing time:             Fri 13 Sep 2024 01:00:32 +0000
ROA not before:           Fri 13 Sep 2024 01:00:32 +0000
ROA not after:            Thu 12 Dec 2024 02:00:32 +0000
asID:                     58061
IP address blocks:        166.1.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:31:fb:9d:1b:9a:04:a6:5f:a5:71:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 13 01:00:32 2024 GMT
            Not After : Dec 12 02:00:32 2024 GMT
        Subject: CN=3d7a1722-4230-4970-a0a3-cab581193eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:30:4e:09:72:36:e6:d0:9b:35:0d:9b:c0:f4:
                    45:60:af:f1:6b:00:34:2f:a3:ca:64:42:e6:94:74:
                    6a:ae:51:73:8a:1c:8a:ec:50:c3:f7:14:fa:7a:fb:
                    8d:43:49:62:b2:84:6d:2a:87:ee:0c:4e:43:63:63:
                    b6:61:60:59:3d:bf:df:28:8d:e1:37:ba:a5:ba:28:
                    ce:3b:78:34:7e:dd:5c:d8:58:50:3e:1c:30:cf:65:
                    9a:d1:08:80:19:0a:a5:6e:fb:94:57:aa:a6:37:47:
                    17:6d:b5:14:85:78:cd:aa:c8:97:ac:fb:9b:e8:7c:
                    0d:4e:3d:89:04:a6:e2:29:f5:61:28:44:a2:34:a3:
                    a5:07:5c:6a:d7:fc:35:f6:b0:87:a5:18:5f:a3:88:
                    c7:1a:db:ea:96:90:92:13:63:a7:c6:15:20:33:33:
                    3e:ad:96:db:36:59:21:02:4d:a8:01:bd:1d:51:1a:
                    57:b6:c5:00:e3:48:75:58:26:ee:dc:cb:bd:4c:27:
                    16:c1:d3:eb:d0:58:1c:f9:4b:15:c0:9d:30:b8:bc:
                    d5:19:50:fb:fa:57:fc:61:7b:85:c6:ea:a4:4e:f3:
                    f5:71:42:7b:d9:d8:d1:97:f1:65:7f:7e:3a:66:1e:
                    ca:36:1e:61:b7:84:61:31:1c:e8:96:0c:43:59:4e:
                    d8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1E:89:63:06:08:28:EC:E4:4A:7F:52:8D:50:8C:A9:FE:87:EB:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/65d6953f-19c2-3af5-ad67-40225463073e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:c5:d9:4c:bb:cc:4f:52:af:f6:6a:82:9c:51:1e:ca:f6:0d:
         07:10:9b:df:a6:33:1d:38:dc:41:61:f7:99:41:f8:18:df:bc:
         d1:17:0f:f8:df:f8:85:07:57:62:9f:53:ba:95:1d:89:fd:51:
         26:df:8c:e4:b7:eb:81:09:93:04:c5:3c:75:a1:41:2f:3d:3f:
         2f:b1:78:fa:21:1f:8f:b6:0f:c0:c9:7b:00:87:71:2e:fe:fd:
         36:43:42:19:93:44:ef:4f:de:b9:38:d7:a5:d9:5e:84:9b:a3:
         34:3d:51:45:db:77:dc:40:95:3e:ba:85:8b:59:d1:3e:6d:5c:
         2c:f6:2d:63:13:17:39:a4:32:a8:b6:80:ea:82:e2:a3:9f:e0:
         f7:ec:3b:7a:25:ec:ba:b1:16:2a:f1:d0:fd:b8:e0:39:cb:d6:
         54:64:d4:14:72:53:0f:e2:b7:fa:6b:e1:d3:fe:c1:4d:a7:18:
         fd:fd:7a:c4:0b:26:93:5a:d9:59:7d:c9:de:73:dd:93:50:57:
         0c:2a:fe:1a:39:b1:c9:29:55:7e:66:61:53:e6:6f:36:27:ff:
         eb:14:dd:7a:69:43:36:1a:fd:ff:b0:3f:af:bc:17:e9:41:cc:
         de:1a:de:c0:45:88:12:a0:43:ea:1c:d4:07:17:2b:5a:d4:21:
         59:d4:56:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcx+50bmgSmX6VxMwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDkxMzAxMDAzMloXDTI0MTIxMjAyMDAzMlowLzEtMCsGA1UEAxMk
M2Q3YTE3MjItNDIzMC00OTcwLWEwYTMtY2FiNTgxMTkzZWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljBOCXI25tCbNQ2bwPRFYK/xawA0L6PKZELm
lHRqrlFzihyK7FDD9xT6evuNQ0lisoRtKofuDE5DY2O2YWBZPb/fKI3hN7qluijO
O3g0ft1c2FhQPhwwz2Wa0QiAGQqlbvuUV6qmN0cXbbUUhXjNqsiXrPub6HwNTj2J
BKbiKfVhKESiNKOlB1xq1/w19rCHpRhfo4jHGtvqlpCSE2OnxhUgMzM+rZbbNlkh
Ak2oAb0dURpXtsUA40h1WCbu3Mu9TCcWwdPr0Fgc+UsVwJ0wuLzVGVD7+lf8YXuF
xuqkTvP1cUJ72djRl/Flf346Zh7KNh5ht4RhMRzolgxDWU7YhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG4eiWMGCCjs5Ep/Uo1QjKn+h+tbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjVkNjk1M2YtMTljMi0z
YWY1LWFkNjctNDAyMjU0NjMwNzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgFUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIfF2Uy7zE9Sr/ZqgpxRHsr2DQcQm9+mMx043EFh95lB+BjfvNEXD/jf
+IUHV2KfU7qVHYn9USbfjOS364EJkwTFPHWhQS89Py+xePohH4+2D8DJewCHcS7+
/TZDQhmTRO9P3rk416XZXoSbozQ9UUXbd9xAlT66hYtZ0T5tXCz2LWMTFzmkMqi2
gOqC4qOf4PfsO3ol7LqxFirx0P244DnL1lRk1BRyUw/it/pr4dP+wU2nGP39esQL
JpNa2Vl9yd5z3ZNQVwwq/ho5sckpVX5mYVPmbzYn/+sU3XppQzYa/f+wP6+8F+lB
zN4a3sBFiBKgQ+oc1AcXK1rUIVnUViA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:42 2024 by rpki-client on console-ams.rpki-client.org