Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6b860283-eb1d-319f-8313-14a444b667b8.roa
File:                     6b860283-eb1d-319f-8313-14a444b667b8.roa (raw, json)
Hash identifier:          i0vOqBYJEqL+/qdWWJENVXvXL+vm0OwfWpd12QBTAV8=
Subject key identifier:   BA:32:EB:7D:1C:22:BC:C0:BB:CE:5C:2D:D4:33:4B:66:14:68:21:46
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584797E13F15BB86ABD5E28DB700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6b860283-eb1d-319f-8313-14a444b667b8.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     23005
IP address blocks:        166.0.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:3f:15:bb:86:ab:d5:e2:8d:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=84d2eec2-9ac7-41e0-a9a4-00bde632757e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b8:9c:7b:d2:51:e6:11:26:ba:4c:62:e7:36:
                    8d:4c:32:c0:11:ae:b9:02:93:6c:66:5c:b5:f1:50:
                    8d:74:40:3f:df:d2:c9:b5:5d:2f:42:bd:86:5d:52:
                    32:de:8d:45:7b:5d:89:4b:13:e5:93:96:f3:46:bd:
                    a9:77:60:97:59:e4:24:47:ab:37:dc:f4:93:d0:b2:
                    79:96:49:a5:f6:d7:8a:c6:df:0f:17:c8:90:85:89:
                    7e:b0:c9:6d:02:3a:d3:7e:2d:36:fc:8f:56:a0:f1:
                    34:8c:e0:8b:cd:95:aa:68:4c:a1:94:bb:9b:ff:f3:
                    f4:af:82:97:ca:db:bb:34:58:63:0e:69:2e:aa:19:
                    8b:9c:9f:ad:8d:7d:cb:d0:41:3d:40:f0:ab:c6:7f:
                    75:ce:21:f9:d9:34:08:be:27:a1:af:34:6f:2d:84:
                    29:d0:0d:54:9d:70:05:d9:5b:c9:28:a5:aa:f6:95:
                    0c:96:24:88:29:a0:d0:10:50:ac:c2:4d:26:18:06:
                    1d:04:46:d9:66:f5:75:96:4e:93:1e:38:fe:49:2b:
                    48:a9:86:0a:b1:1b:c5:c9:c5:c0:45:ee:b4:59:d1:
                    c1:9a:1a:99:39:a0:f2:83:57:58:4a:0f:73:38:54:
                    99:83:be:13:c3:04:9c:9a:e0:a2:c4:a5:96:ca:a5:
                    20:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:32:EB:7D:1C:22:BC:C0:BB:CE:5C:2D:D4:33:4B:66:14:68:21:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6b860283-eb1d-319f-8313-14a444b667b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:90:03:4a:1d:08:53:0d:8d:44:4e:22:66:34:2c:67:5d:24:
         57:91:1f:56:b7:c5:71:62:0d:fa:39:58:d6:9a:a4:d0:e3:8f:
         d8:99:03:af:88:25:63:ab:b8:fb:8e:89:10:09:af:50:99:10:
         c1:24:50:aa:5e:43:04:bc:c2:aa:43:80:42:7c:cc:fc:79:85:
         2d:78:02:86:6a:ac:58:08:c3:35:fc:76:7a:1b:33:b5:c5:2e:
         a3:ac:e9:b3:82:d8:52:be:a5:4e:e3:e9:90:80:9a:7f:86:cc:
         bb:b2:05:a5:cd:1b:bb:6c:31:49:08:0f:6f:09:5f:7b:c4:43:
         31:a0:36:2d:28:98:e5:ed:3f:6e:1b:f5:61:3c:08:fd:f2:03:
         34:bf:82:32:ac:e6:a8:91:b3:e7:34:a3:3a:ef:a4:92:d7:f9:
         98:f1:a0:a4:b5:fb:e2:a1:8c:18:7e:c6:ad:54:e2:04:7f:80:
         86:aa:f2:64:1f:1f:15:8f:af:02:86:34:2c:4f:89:d3:de:22:
         22:02:7c:1e:f5:39:ca:30:39:04:19:a2:cf:fc:a2:19:76:07:
         4d:8d:4f:80:76:57:dd:0f:be:8c:72:ba:6e:5e:27:ff:92:4d:
         62:8b:06:76:f7:6d:26:ac:ae:fe:d1:c7:cf:e1:10:9b:aa:d7:
         8d:da:8f:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeX4T8Vu4ar1eKNtwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTAxOTEzMDA0MloXDTI1MDExNzE0MDA0MlowLzEtMCsGA1UEAxMk
ODRkMmVlYzItOWFjNy00MWUwLWE5YTQtMDBiZGU2MzI3NTdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7ice9JR5hEmukxi5zaNTDLAEa65ApNsZly1
8VCNdEA/39LJtV0vQr2GXVIy3o1Fe12JSxPlk5bzRr2pd2CXWeQkR6s33PST0LJ5
lkml9teKxt8PF8iQhYl+sMltAjrTfi02/I9WoPE0jOCLzZWqaEyhlLub//P0r4KX
ytu7NFhjDmkuqhmLnJ+tjX3L0EE9QPCrxn91ziH52TQIviehrzRvLYQp0A1UnXAF
2VvJKKWq9pUMliSIKaDQEFCswk0mGAYdBEbZZvV1lk6THjj+SStIqYYKsRvFycXA
Re60WdHBmhqZOaDyg1dYSg9zOFSZg74TwwScmuCixKWWyqUgywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLoy630cIrzAu85cLdQzS2YUaCFGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNmI4NjAyODMtZWIxZC0z
MTlmLTgzMTMtMTRhNDQ0YjY2N2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK2QA0odCFMNjUROImY0LGddJFeRH1a3xXFiDfo5WNaapNDjj9iZA6+I
JWOruPuOiRAJr1CZEMEkUKpeQwS8wqpDgEJ8zPx5hS14AoZqrFgIwzX8dnobM7XF
LqOs6bOC2FK+pU7j6ZCAmn+GzLuyBaXNG7tsMUkID28JX3vEQzGgNi0omOXtP24b
9WE8CP3yAzS/gjKs5qiRs+c0ozrvpJLX+ZjxoKS1++KhjBh+xq1U4gR/gIaq8mQf
HxWPrwKGNCxPidPeIiICfB71OcowOQQZos/8ohl2B02NT4B2V90Pvoxyum5eJ/+S
TWKLBnb3bSasrv7Rx8/hEJuq143aj+s=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:42 2024 by rpki-client on console-ams.rpki-client.org