Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/af8f2134-7def-3b05-b7d7-370d33e72534.roa
File:                     af8f2134-7def-3b05-b7d7-370d33e72534.roa (raw, json)
Hash identifier:          v3vRYN6FPr6SHF/9BPZ+uwaEgSuSy6y4ERvF8Cogsdg=
Subject key identifier:   24:5F:01:FC:DB:3E:25:61:AC:87:3F:53:07:4A:CD:6A:2B:1B:26:24
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845A15E0E1B991EA4171E8D7F10
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/af8f2134-7def-3b05-b7d7-370d33e72534.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     62240
IP address blocks:        166.1.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:0e:1b:99:1e:a4:17:1e:8d:7f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=81004f11-f123-4ee1-9a11-1865cc00ba43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b1:4b:99:55:80:7f:75:19:fe:73:2e:90:3c:
                    56:2a:2d:fc:ce:eb:fb:60:c6:4f:4d:ef:7f:05:67:
                    4d:d6:e5:cd:1b:87:70:5b:62:1d:75:93:c6:fd:11:
                    0a:5f:9c:b2:c9:20:22:68:39:f1:bb:9b:03:7a:93:
                    8c:98:ba:3b:a1:20:16:ed:7f:79:a0:b5:e0:be:6e:
                    23:af:5c:fb:85:8d:75:4f:c0:3a:92:01:dc:14:90:
                    ec:70:a4:c4:b5:34:22:57:1a:0a:7f:2f:b4:37:c1:
                    df:4e:6e:60:c7:c6:2a:2d:55:8b:52:4d:1e:20:7c:
                    6a:1c:3d:03:6d:dd:15:31:ac:17:c7:bd:2f:4c:47:
                    33:56:1d:da:7f:58:24:c3:51:bc:d1:e2:5f:04:6e:
                    ea:75:e4:03:95:19:7a:0b:6a:44:b2:66:10:aa:49:
                    09:4d:93:2c:09:1c:57:f0:51:2a:54:81:eb:67:c2:
                    10:36:a0:07:2e:c8:15:ab:4e:66:28:09:8b:98:8e:
                    d7:b4:36:ca:11:ff:19:4a:b4:1b:d6:21:a5:52:e1:
                    23:1f:ec:e7:38:7b:aa:e4:7e:dd:74:4d:82:41:cd:
                    89:92:37:04:2e:50:2f:6d:fc:28:ab:69:e7:26:5b:
                    49:f0:15:c7:13:83:14:98:81:27:d2:a4:25:3e:c8:
                    99:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5F:01:FC:DB:3E:25:61:AC:87:3F:53:07:4A:CD:6A:2B:1B:26:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/af8f2134-7def-3b05-b7d7-370d33e72534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:8d:b9:0d:69:b8:6f:e9:b0:71:4a:01:fb:67:68:1f:ae:70:
         bc:c2:d8:e2:ce:5d:c2:94:98:48:60:eb:a5:94:54:8e:e7:58:
         37:c0:10:a8:ae:34:34:5e:65:b2:4d:27:7e:f9:45:cb:62:f7:
         00:8e:73:d2:d5:da:68:7f:2a:cb:c0:36:8e:2d:39:9a:42:c0:
         dd:6d:71:33:2c:5c:7c:c3:0d:5f:49:46:ba:62:93:88:25:4f:
         91:c1:1b:6b:78:35:44:be:52:e6:21:7b:7f:6e:9e:2e:43:56:
         c1:97:24:48:9e:4c:2f:cf:6c:cc:74:ed:1d:cd:84:a7:8c:56:
         89:89:15:db:75:ae:fd:b1:09:9e:aa:74:a0:f1:3d:8d:8a:69:
         e1:c7:cb:cc:20:98:c4:ad:97:07:77:9b:b6:b6:c2:98:ef:ce:
         03:1a:1d:52:ef:b7:a5:04:c6:af:2c:c4:6f:7c:5a:15:7c:4b:
         f0:b1:6f:43:73:ca:82:00:6c:26:25:ed:06:6f:35:3c:96:2b:
         1f:ed:9f:95:4c:09:09:bf:66:ba:ec:c2:10:1f:3e:c6:5d:1a:
         85:d2:a4:40:87:03:9d:82:7a:84:c8:f3:d7:db:76:2e:85:3e:
         ca:19:19:17:ff:d2:67:08:80:3a:4f:e0:8a:5f:04:5f:fb:21:
         cb:1d:8a:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXg4bmR6kFx6NfxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk
ODEwMDRmMTEtZjEyMy00ZWUxLTlhMTEtMTg2NWNjMDBiYTQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLFLmVWAf3UZ/nMukDxWKi38zuv7YMZPTe9/
BWdN1uXNG4dwW2IddZPG/REKX5yyySAiaDnxu5sDepOMmLo7oSAW7X95oLXgvm4j
r1z7hY11T8A6kgHcFJDscKTEtTQiVxoKfy+0N8HfTm5gx8YqLVWLUk0eIHxqHD0D
bd0VMawXx70vTEczVh3af1gkw1G80eJfBG7qdeQDlRl6C2pEsmYQqkkJTZMsCRxX
8FEqVIHrZ8IQNqAHLsgVq05mKAmLmI7XtDbKEf8ZSrQb1iGlUuEjH+znOHuq5H7d
dE2CQc2JkjcELlAvbfwoq2nnJltJ8BXHE4MUmIEn0qQlPsiZSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCRfAfzbPiVhrIc/UwdKzWorGyYkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYWY4ZjIxMzQtN2RlZi0z
YjA1LWI3ZDctMzcwZDMzZTcyNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB6NuQ1puG/psHFKAftnaB+ucLzC2OLOXcKUmEhg66WUVI7nWDfAEKiu
NDReZbJNJ375Rcti9wCOc9LV2mh/KsvANo4tOZpCwN1tcTMsXHzDDV9JRrpik4gl
T5HBG2t4NUS+UuYhe39uni5DVsGXJEieTC/PbMx07R3NhKeMVomJFdt1rv2xCZ6q
dKDxPY2KaeHHy8wgmMStlwd3m7a2wpjvzgMaHVLvt6UExq8sxG98WhV8S/Cxb0Nz
yoIAbCYl7QZvNTyWKx/tn5VMCQm/ZrrswhAfPsZdGoXSpECHA52CeoTI89fbdi6F
PsoZGRf/0mcIgDpP4IpfBF/7IcsdiuU=
-----END CERTIFICATE-----
Generated at Fri May 3 17:59:06 2024 by rpki-client on console-ams.rpki-client.org