Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9de31f78-cb52-300b-9337-c5d9c80175f9.roa
File:                     9de31f78-cb52-300b-9337-c5d9c80175f9.roa (raw, json)
Hash identifier:          /VuVM8xTOtPXqbFo1BfvsaiV0zQ0/0HcIhgBALXP6l0=
Subject key identifier:   90:CA:3C:4C:9C:42:91:45:BD:48:10:B8:1B:56:A8:41:56:97:AC:49
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858454AD2CED4B88B51848480037C
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9de31f78-cb52-300b-9337-c5d9c80175f9.roa
Signing time:             Fri 22 Mar 2024 13:00:34 +0000
ROA not before:           Fri 22 Mar 2024 13:00:34 +0000
ROA not after:            Thu 20 Jun 2024 13:00:34 +0000
asID:                     53427
IP address blocks:        166.0.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4a:d2:ce:d4:b8:8b:51:84:84:80:03:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 22 13:00:34 2024 GMT
            Not After : Jun 20 13:00:34 2024 GMT
        Subject: CN=5eabadbb-382e-48e6-a943-17ce23eea430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9c:e6:00:a0:6b:6c:65:c3:ee:c4:79:d3:be:
                    a3:f1:d7:41:f3:60:4d:0b:6a:6e:63:ce:85:57:db:
                    4d:4c:15:8c:59:0a:bf:88:c7:b1:6a:4b:64:a9:75:
                    82:86:d3:08:9a:13:9c:d5:ce:41:60:51:2d:c1:04:
                    3d:df:c0:de:76:6b:87:6a:6d:e6:a5:d7:50:ff:6c:
                    d0:cb:0a:15:b7:52:46:bd:81:c9:71:2e:a9:60:f2:
                    b9:aa:d9:c7:df:4b:72:fe:24:24:30:72:61:1c:9f:
                    9f:1a:7c:25:17:00:a8:6c:bf:09:91:b5:cd:c3:31:
                    1a:b1:0d:91:9e:53:45:9f:1d:b4:e9:e8:e9:a1:8d:
                    cd:4b:dd:ca:a8:f2:04:07:63:82:4d:17:66:12:fe:
                    8c:0b:34:0e:91:ec:de:00:1e:74:7f:85:d3:21:8d:
                    58:e2:b0:79:62:b7:13:16:b4:73:d9:24:bb:85:4b:
                    29:7b:a2:a4:c5:e9:f1:52:4f:cd:76:46:a3:fe:fd:
                    c5:7f:80:68:6a:b9:74:55:4e:26:ee:c0:9e:2f:e2:
                    d3:5c:e3:7f:70:c6:b3:48:36:51:9a:ad:1b:ac:1a:
                    00:67:49:21:ba:96:58:40:1e:a8:79:ef:d7:07:5a:
                    c6:d2:9f:db:d4:73:1e:24:10:95:d7:de:b9:3f:8d:
                    ef:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CA:3C:4C:9C:42:91:45:BD:48:10:B8:1B:56:A8:41:56:97:AC:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9de31f78-cb52-300b-9337-c5d9c80175f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:75:87:33:e2:ae:6e:3e:76:7a:e8:27:4b:70:86:50:89:98:
         87:ff:7a:9d:ab:85:e9:9d:29:04:24:b2:c2:6d:c9:73:2c:4a:
         f5:d0:d2:8f:65:06:9c:c7:b3:5e:33:81:66:ee:e5:09:4c:a5:
         9d:38:2d:81:25:33:19:26:67:f1:40:69:9c:1b:b8:a5:93:f1:
         7f:0d:3f:b8:c5:f1:52:24:d9:10:60:26:08:86:47:55:81:fb:
         ba:c5:c1:93:0c:44:5e:c7:04:f3:cd:6a:1d:75:23:82:b1:2a:
         39:e6:c7:d9:d1:d5:6f:e4:4b:df:2a:a2:41:c1:6f:c5:7c:a8:
         7e:ab:c9:06:3d:2d:79:ba:98:28:cb:35:f8:c8:6e:4c:c7:5a:
         e2:90:60:c1:13:46:8a:c0:bc:15:dd:8a:5d:4a:1c:d3:37:1d:
         a7:f6:66:4a:5d:0a:a2:15:3b:f2:13:90:56:03:e6:23:5c:fb:
         8e:64:28:b8:85:ac:02:4d:55:97:d3:d7:1a:95:70:df:4e:6b:
         7c:4b:60:67:cb:2c:47:17:d0:75:71:72:5c:64:44:89:07:f3:
         01:de:4e:28:79:90:40:b6:bd:62:11:62:50:1a:a9:93:6c:1b:
         9e:6e:48:ff:99:a6:2b:20:54:52:a7:80:52:c6:47:cd:e1:58:
         ef:cc:c8:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVK0s7UuItRhISAA3wwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDMyMjEzMDAzNFoXDTI0MDYyMDEzMDAzNFowLzEtMCsGA1UEAxMk
NWVhYmFkYmItMzgyZS00OGU2LWE5NDMtMTdjZTIzZWVhNDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5zmAKBrbGXD7sR5076j8ddB82BNC2puY86F
V9tNTBWMWQq/iMexaktkqXWChtMImhOc1c5BYFEtwQQ938DedmuHam3mpddQ/2zQ
ywoVt1JGvYHJcS6pYPK5qtnH30ty/iQkMHJhHJ+fGnwlFwCobL8JkbXNwzEasQ2R
nlNFnx206ejpoY3NS93KqPIEB2OCTRdmEv6MCzQOkezeAB50f4XTIY1Y4rB5YrcT
FrRz2SS7hUspe6KkxenxUk/Ndkaj/v3Ff4Boarl0VU4m7sCeL+LTXON/cMazSDZR
mq0brBoAZ0khupZYQB6oee/XB1rG0p/b1HMeJBCV1965P43vNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJDKPEycQpFFvUgQuBtWqEFWl6xJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOWRlMzFmNzgtY2I1Mi0z
MDBiLTkzMzctYzVkOWM4MDE3NWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGx1hzPirm4+dnroJ0twhlCJmIf/ep2rhemdKQQkssJtyXMsSvXQ0o9l
BpzHs14zgWbu5QlMpZ04LYElMxkmZ/FAaZwbuKWT8X8NP7jF8VIk2RBgJgiGR1WB
+7rFwZMMRF7HBPPNah11I4KxKjnmx9nR1W/kS98qokHBb8V8qH6ryQY9LXm6mCjL
NfjIbkzHWuKQYMETRorAvBXdil1KHNM3Haf2ZkpdCqIVO/ITkFYD5iNc+45kKLiF
rAJNVZfT1xqVcN9Oa3xLYGfLLEcX0HVxclxkRIkH8wHeTih5kEC2vWIRYlAaqZNs
G55uSP+ZpisgVFKngFLGR83hWO/MyPQ=
-----END CERTIFICATE-----
Generated at Fri May 3 21:45:43 2024 by rpki-client on console-fra.rpki-client.org