Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/749cd89d-69a9-3584-bc90-9ad04ebb061c.roa
File:                     749cd89d-69a9-3584-bc90-9ad04ebb061c.roa (raw, json)
Hash identifier:          8RdTc7q0cUE3bMOmlbqVTM5sd90Ua/bzD3IIT0daqz8=
Subject key identifier:   94:EB:36:7B:20:35:9F:AE:17:23:85:DD:6C:69:68:9A:EF:28:C7:36
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584731FB9D9FD94CED0DE41D4800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/749cd89d-69a9-3584-bc90-9ad04ebb061c.roa
Signing time:             Fri 13 Sep 2024 01:00:32 +0000
ROA not before:           Fri 13 Sep 2024 01:00:32 +0000
ROA not after:            Thu 12 Dec 2024 02:00:32 +0000
asID:                     58061
IP address blocks:        166.1.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:31:fb:9d:9f:d9:4c:ed:0d:e4:1d:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 13 01:00:32 2024 GMT
            Not After : Dec 12 02:00:32 2024 GMT
        Subject: CN=1fc05e68-2fd3-40ca-86fb-a3faef4d01fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:95:10:5e:17:29:f6:07:bc:83:ee:67:e2:10:
                    18:32:b8:3d:e6:c7:83:f5:fb:d0:cf:8f:bb:da:d8:
                    94:ec:c5:c5:f7:ca:6f:fa:87:67:bb:9f:d9:b6:59:
                    c9:54:d0:64:31:21:18:49:82:35:60:66:4d:f8:cd:
                    db:a6:02:ba:09:00:63:d9:a9:cb:24:e2:a5:b9:a7:
                    c2:4d:c2:1d:ae:02:5b:43:bc:f4:81:5d:8d:6d:ef:
                    62:fb:40:c0:84:17:ea:9f:7c:6d:8f:e8:98:22:04:
                    13:a7:2f:3e:49:52:55:90:9b:e8:39:c0:7e:57:37:
                    8b:a6:61:34:5e:55:de:d6:2f:b9:3a:5e:d5:62:25:
                    d6:fc:f5:d9:cb:03:5f:25:2d:b3:21:79:42:af:5b:
                    6e:ad:35:47:c1:0a:44:01:be:d0:21:40:49:cf:b5:
                    cd:a9:a2:89:c0:b2:12:a2:2e:fd:b5:58:b3:f9:90:
                    ac:a9:5d:8f:42:58:85:91:23:03:b8:52:ed:ba:3f:
                    44:e5:98:2a:6f:0e:a3:c1:3c:7a:e0:3e:71:d6:13:
                    d5:65:f2:af:44:c4:6b:de:59:5d:01:67:d4:6e:c4:
                    34:94:6a:78:96:4b:27:89:ba:ff:15:4e:65:a8:d0:
                    c3:f3:ad:15:c5:b4:2e:7e:00:d4:51:0d:25:82:07:
                    e2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:EB:36:7B:20:35:9F:AE:17:23:85:DD:6C:69:68:9A:EF:28:C7:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/749cd89d-69a9-3584-bc90-9ad04ebb061c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:3f:06:64:4c:e4:59:d4:38:34:51:6f:23:2c:cd:99:ff:c6:
         3b:0c:62:67:6d:3d:b8:6b:7f:87:a5:22:b3:ae:9e:4a:8b:74:
         ca:cb:62:bd:48:4b:71:68:01:60:aa:5d:19:ae:c8:e9:ca:36:
         7c:e2:8b:b0:8e:ba:f8:50:26:77:bb:3b:61:db:c9:c9:1b:02:
         48:7b:1f:55:e3:98:89:18:d6:49:62:3b:9a:df:5b:f3:f4:82:
         15:29:f2:9c:64:96:e4:ee:22:f2:0e:4e:e0:31:dc:23:49:b5:
         6a:8c:f8:9e:86:b6:11:31:a9:5b:9a:a6:1b:87:d2:71:62:f3:
         b2:cf:71:69:0c:92:96:46:3e:18:e2:56:eb:b4:48:be:6d:05:
         60:b1:c1:7f:4c:6e:31:46:39:81:43:90:dc:31:e1:cc:71:26:
         7c:d2:82:69:97:3a:94:ae:53:e8:88:b6:74:6b:24:89:ba:5b:
         fb:98:70:b3:ef:47:8d:90:f3:40:3b:fc:11:e2:cd:e6:a9:a1:
         4a:39:eb:cb:3d:84:26:70:41:88:72:4f:79:2c:78:40:4c:80:
         37:b4:c4:2b:a5:7c:84:78:45:24:78:42:ad:f5:7b:2a:3c:cf:
         2e:c2:07:d8:3c:be:a0:77:99:fb:3f:91:2c:84:02:40:2a:5e:
         58:3e:4b:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcx+52f2UztDeQdSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDkxMzAxMDAzMloXDTI0MTIxMjAyMDAzMlowLzEtMCsGA1UEAxMk
MWZjMDVlNjgtMmZkMy00MGNhLTg2ZmItYTNmYWVmNGQwMWZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpUQXhcp9ge8g+5n4hAYMrg95seD9fvQz4+7
2tiU7MXF98pv+odnu5/ZtlnJVNBkMSEYSYI1YGZN+M3bpgK6CQBj2anLJOKluafC
TcIdrgJbQ7z0gV2Nbe9i+0DAhBfqn3xtj+iYIgQTpy8+SVJVkJvoOcB+VzeLpmE0
XlXe1i+5Ol7VYiXW/PXZywNfJS2zIXlCr1turTVHwQpEAb7QIUBJz7XNqaKJwLIS
oi79tViz+ZCsqV2PQliFkSMDuFLtuj9E5Zgqbw6jwTx64D5x1hPVZfKvRMRr3lld
AWfUbsQ0lGp4lksnibr/FU5lqNDD860VxbQufgDUUQ0lggfiFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJTrNnsgNZ+uFyOF3WxpaJrvKMc2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNzQ5Y2Q4OWQtNjlhOS0z
NTg0LWJjOTAtOWFkMDRlYmIwNjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgE+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHo/BmRM5FnUODRRbyMszZn/xjsMYmdtPbhrf4elIrOunkqLdMrLYr1I
S3FoAWCqXRmuyOnKNnzii7COuvhQJne7O2HbyckbAkh7H1XjmIkY1kliO5rfW/P0
ghUp8pxkluTuIvIOTuAx3CNJtWqM+J6GthExqVuaphuH0nFi87LPcWkMkpZGPhji
Vuu0SL5tBWCxwX9MbjFGOYFDkNwx4cxxJnzSgmmXOpSuU+iItnRrJIm6W/uYcLPv
R42Q80A7/BHizeapoUo568s9hCZwQYhyT3kseEBMgDe0xCulfIR4RSR4Qq31eyo8
zy7CB9g8vqB3mfs/kSyEAkAqXlg+S4M=
-----END CERTIFICATE-----
Generated at Fri Sep 20 23:11:48 2024 by rpki-client on console-fra.rpki-client.org