Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7a39cd02-c3c4-3d66-a551-d4bde47c0415.roa
File:                     7a39cd02-c3c4-3d66-a551-d4bde47c0415.roa (raw, json)
Hash identifier:          R/StpRoU6QIQKRov4QWLS4t4CBDZ6nX+RO0IILWlAO0=
Subject key identifier:   0F:7B:18:05:4D:2D:21:36:F8:19:F3:E8:B9:78:0B:EF:47:A5:38:2B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858455658A73401B274FA25832E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7a39cd02-c3c4-3d66-a551-d4bde47c0415.roa
Signing time:             Tue 26 Mar 2024 16:04:13 +0000
ROA not before:           Tue 26 Mar 2024 16:04:13 +0000
ROA not after:            Mon 24 Jun 2024 16:04:13 +0000
asID:                     58061
IP address blocks:        166.1.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:58:a7:34:01:b2:74:fa:25:83:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 26 16:04:13 2024 GMT
            Not After : Jun 24 16:04:13 2024 GMT
        Subject: CN=23d34dab-abb7-4789-894f-ac70f872fdb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:04:b6:6b:37:c8:2f:7d:ea:85:01:62:b3:55:
                    37:02:d6:e8:0b:9b:58:4b:17:23:31:ce:d8:e5:20:
                    6e:56:35:f4:50:bb:e2:ec:06:a6:79:85:6e:91:7f:
                    8d:5b:f7:c1:62:a0:b3:c7:b2:18:f5:e9:f4:6a:9c:
                    bf:4f:bb:32:e8:df:4e:20:f0:d6:e6:d8:cc:bb:fb:
                    82:ac:57:fd:ad:a1:5f:19:fc:70:27:52:af:03:c5:
                    7b:75:21:fb:7f:95:0f:9a:03:30:63:46:9e:dc:92:
                    9c:1d:82:04:09:23:b6:73:fd:f0:83:ed:aa:fc:d8:
                    90:0f:28:a5:e6:4b:4d:8a:43:be:31:4d:91:fc:01:
                    7d:d7:47:f1:e1:66:19:9b:e7:01:1c:4a:b6:e9:57:
                    33:19:1f:72:12:91:ab:7a:51:4b:42:e5:78:dc:09:
                    ac:90:16:93:af:05:3b:09:8e:07:ae:c6:35:69:0a:
                    3b:20:51:74:51:a9:44:c2:74:ed:2c:09:4b:22:b6:
                    80:d9:16:4d:5b:46:f4:11:eb:fa:c4:a0:f4:6d:bc:
                    3e:d3:a5:08:78:e0:4a:79:29:e7:fb:ef:db:24:85:
                    21:70:3a:c5:79:0e:00:72:ff:58:81:b0:dc:dd:2e:
                    bc:ff:8f:5f:76:7b:56:33:39:a7:3d:f3:86:1c:f2:
                    a2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7B:18:05:4D:2D:21:36:F8:19:F3:E8:B9:78:0B:EF:47:A5:38:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7a39cd02-c3c4-3d66-a551-d4bde47c0415.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:b0:2a:c0:09:69:22:ee:15:db:51:74:56:d5:df:d4:08:5a:
         8b:fb:16:ae:89:77:17:85:e3:e7:70:36:1d:d1:8a:ed:6a:34:
         75:00:b4:af:91:1e:8c:e7:52:89:04:0e:91:2e:e1:1f:56:0e:
         db:6b:72:1d:50:5e:97:c0:16:12:af:25:66:ea:6b:ca:5f:4e:
         0c:ba:99:7b:aa:4f:e8:d7:b4:a3:dd:71:c2:44:7e:5f:2e:cc:
         a2:ff:e6:c3:9a:b6:91:a2:d6:6f:de:74:12:15:73:0d:3b:cd:
         f0:59:f4:01:ab:87:6e:eb:2c:25:14:eb:38:da:44:c9:db:a4:
         00:a4:41:54:69:13:65:43:b0:aa:75:99:39:fc:7e:ec:c0:fd:
         b1:d7:cb:1d:b6:0f:09:66:77:56:fb:41:bc:ac:b4:f5:b1:7d:
         f6:3d:d6:f4:0c:64:33:d6:e4:db:7c:cf:f9:d9:3c:e1:fb:a4:
         9c:06:b0:9a:0a:72:49:b9:17:39:b9:e3:01:c0:75:0f:26:06:
         b3:92:82:56:47:8c:a6:cd:25:33:b1:6d:01:9f:6b:ce:ac:a6:
         8b:a7:5e:56:b9:dc:b4:1d:1f:06:a8:b2:c7:db:f2:b2:11:52:
         ce:3c:6f:b7:19:1e:a8:50:e7:e7:58:00:70:aa:7f:f8:e5:48:
         72:4a:7f:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVWWKc0AbJ0+iWDLgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDMyNjE2MDQxM1oXDTI0MDYyNDE2MDQxM1owLzEtMCsGA1UEAxMk
MjNkMzRkYWItYWJiNy00Nzg5LTg5NGYtYWM3MGY4NzJmZGI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAS2azfIL33qhQFis1U3AtboC5tYSxcjMc7Y
5SBuVjX0ULvi7AameYVukX+NW/fBYqCzx7IY9en0apy/T7sy6N9OIPDW5tjMu/uC
rFf9raFfGfxwJ1KvA8V7dSH7f5UPmgMwY0ae3JKcHYIECSO2c/3wg+2q/NiQDyil
5ktNikO+MU2R/AF910fx4WYZm+cBHEq26VczGR9yEpGrelFLQuV43AmskBaTrwU7
CY4HrsY1aQo7IFF0UalEwnTtLAlLIraA2RZNW0b0Eev6xKD0bbw+06UIeOBKeSnn
++/bJIUhcDrFeQ4Acv9YgbDc3S68/49fdntWMzmnPfOGHPKiSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA97GAVNLSE2+Bnz6Ll4C+9HpTgrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvN2EzOWNkMDItYzNjNC0z
ZDY2LWE1NTEtZDRiZGU0N2MwNDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgEvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH2wKsAJaSLuFdtRdFbV39QIWov7Fq6JdxeF4+dwNh3Riu1qNHUAtK+R
HoznUokEDpEu4R9WDttrch1QXpfAFhKvJWbqa8pfTgy6mXuqT+jXtKPdccJEfl8u
zKL/5sOatpGi1m/edBIVcw07zfBZ9AGrh27rLCUU6zjaRMnbpACkQVRpE2VDsKp1
mTn8fuzA/bHXyx22Dwlmd1b7QbystPWxffY91vQMZDPW5Nt8z/nZPOH7pJwGsJoK
ckm5Fzm54wHAdQ8mBrOSglZHjKbNJTOxbQGfa86spounXla53LQdHwaossfb8rIR
Us48b7cZHqhQ5+dYAHCqf/jlSHJKf0Q=
-----END CERTIFICATE-----
Generated at Fri May 3 17:56:23 2024 by rpki-client on console-fra.rpki-client.org