Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9537c9a7-341b-39f9-9188-9b2cb95454a8.roa
File:                     9537c9a7-341b-39f9-9188-9b2cb95454a8.roa (raw, json)
Hash identifier:          mC3vRenWF3SwJRjLzJaXFQktexH9vReCquayIdb4YPY=
Subject key identifier:   0A:04:21:53:79:CF:1A:D8:53:27:46:D3:8A:E3:E8:4E:85:3E:34:ED
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845A15E05B62FDE444887334500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9537c9a7-341b-39f9-9188-9b2cb95454a8.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     62240
IP address blocks:        166.1.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:05:b6:2f:de:44:48:87:33:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=625d968d-06f1-40e8-b694-c3b91c2996bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ef:33:66:33:f7:62:55:26:a8:a4:43:a5:50:
                    43:e1:08:18:3e:94:5f:67:72:fc:08:86:e6:34:dc:
                    0c:6f:ff:a2:62:0d:03:ce:15:a9:51:56:f8:26:6e:
                    7d:41:32:a4:64:22:8a:97:85:b0:f8:d6:87:90:32:
                    9e:fb:29:94:71:5e:8e:bf:bc:1b:30:c8:12:51:a9:
                    6e:36:e7:c9:f4:cc:dc:45:69:fb:ba:db:f8:2b:13:
                    77:c3:cd:67:a1:5e:8d:a7:2d:6f:b2:70:f2:a7:6d:
                    c5:f0:ba:a1:28:ef:21:f0:a6:1d:f5:92:91:30:cb:
                    10:94:8c:cb:98:01:57:4f:fc:53:3b:2b:4b:0d:00:
                    f3:22:f7:dc:3a:83:71:c0:61:60:a8:d3:ac:8b:43:
                    df:07:3c:72:09:06:4c:3b:cd:f9:69:09:bd:47:d4:
                    aa:5d:f9:72:9f:06:28:ca:ea:19:51:82:05:ae:61:
                    fb:c0:33:e8:b1:64:5a:ee:81:64:48:72:1b:e1:fa:
                    a4:ae:39:29:c5:11:1a:f5:02:0d:14:ef:68:48:5f:
                    4d:23:bb:18:28:38:02:cd:a0:96:9f:7b:b1:cc:9c:
                    80:35:91:a1:69:1a:cf:59:0a:29:25:d9:4b:c1:35:
                    f1:81:b5:90:05:80:5d:3d:bc:b1:00:87:4b:a2:ff:
                    9b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:04:21:53:79:CF:1A:D8:53:27:46:D3:8A:E3:E8:4E:85:3E:34:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9537c9a7-341b-39f9-9188-9b2cb95454a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:1f:b1:78:30:7c:3e:63:db:3d:1b:c5:10:71:56:86:5d:ab:
         db:e0:d2:d5:82:cd:c3:a0:e3:f7:cb:56:80:59:78:f7:7b:0d:
         0b:f5:03:dc:11:e1:77:e7:dc:88:35:96:a7:a0:4f:27:41:d8:
         21:b5:e8:e4:e3:e2:e3:d5:95:95:ef:e6:03:0c:41:f5:b9:00:
         f3:ed:ad:fc:3b:9e:8e:a1:22:86:a2:3f:79:70:ad:9c:6f:57:
         be:7e:e9:d5:e3:ef:21:86:f3:33:8c:32:82:b4:64:43:be:80:
         a7:84:fa:93:98:77:72:1e:6d:01:cc:f6:a4:f9:cc:01:1a:1e:
         59:1e:4d:6d:ed:cc:ac:66:d2:99:ae:7b:7b:18:49:89:e2:ae:
         80:67:10:7b:90:f0:4a:95:4b:d3:29:13:f7:f5:9a:a1:b3:ce:
         04:60:7a:67:39:42:7f:a2:9b:cf:75:e6:56:18:e5:a2:15:51:
         8d:1d:14:d9:c2:df:a9:08:5d:2a:48:52:69:a5:7a:1e:4a:f9:
         d6:bf:6a:a6:35:52:ae:6d:ca:df:ab:bb:ff:76:f4:8b:04:41:
         41:2e:bc:40:84:8d:1e:77:d8:11:4e:b0:96:63:78:3b:e5:a4:
         a3:64:ba:94:ed:56:a3:46:fc:ed:0c:35:4f:9c:dd:fe:10:8e:
         a7:03:b5:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXgW2L95ESIczRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk
NjI1ZDk2OGQtMDZmMS00MGU4LWI2OTQtYzNiOTFjMjk5NmJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje8zZjP3YlUmqKRDpVBD4QgYPpRfZ3L8CIbm
NNwMb/+iYg0DzhWpUVb4Jm59QTKkZCKKl4Ww+NaHkDKe+ymUcV6Ov7wbMMgSUalu
NufJ9MzcRWn7utv4KxN3w81noV6Npy1vsnDyp23F8LqhKO8h8KYd9ZKRMMsQlIzL
mAFXT/xTOytLDQDzIvfcOoNxwGFgqNOsi0PfBzxyCQZMO835aQm9R9SqXflynwYo
yuoZUYIFrmH7wDPosWRa7oFkSHIb4fqkrjkpxREa9QINFO9oSF9NI7sYKDgCzaCW
n3uxzJyANZGhaRrPWQopJdlLwTXxgbWQBYBdPbyxAIdLov+bmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAoEIVN5zxrYUydG04rj6E6FPjTtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTUzN2M5YTctMzQxYi0z
OWY5LTkxODgtOWIyY2I5NTQ1NGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgEnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF0fsXgwfD5j2z0bxRBxVoZdq9vg0tWCzcOg4/fLVoBZePd7DQv1A9wR
4Xfn3Ig1lqegTydB2CG16OTj4uPVlZXv5gMMQfW5APPtrfw7no6hIoaiP3lwrZxv
V75+6dXj7yGG8zOMMoK0ZEO+gKeE+pOYd3IebQHM9qT5zAEaHlkeTW3tzKxm0pmu
e3sYSYniroBnEHuQ8EqVS9MpE/f1mqGzzgRgemc5Qn+im8915lYY5aIVUY0dFNnC
36kIXSpIUmmleh5K+da/aqY1Uq5tyt+ru/929IsEQUEuvECEjR532BFOsJZjeDvl
pKNkupTtVqNG/O0MNU+c3f4QjqcDtaA=
-----END CERTIFICATE-----
Generated at Fri May 3 21:45:43 2024 by rpki-client on console-fra.rpki-client.org