Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b4230061-171d-3de7-9b81-4d2e8d6a0428.roa
File:                     b4230061-171d-3de7-9b81-4d2e8d6a0428.roa (raw, json)
Hash identifier:          DJRpeerk54BkX+4t4AWpS8XP5/LAwbgTIf8YlUsoroE=
Subject key identifier:   2B:09:7E:89:FB:2D:EF:B6:04:BB:1D:FD:BB:89:46:AB:E6:43:83:85
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584731FB9D6BD65D150FD93DA380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b4230061-171d-3de7-9b81-4d2e8d6a0428.roa
Signing time:             Fri 13 Sep 2024 01:00:32 +0000
ROA not before:           Fri 13 Sep 2024 01:00:32 +0000
ROA not after:            Thu 12 Dec 2024 02:00:32 +0000
asID:                     58061
IP address blocks:        166.0.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:31:fb:9d:6b:d6:5d:15:0f:d9:3d:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 13 01:00:32 2024 GMT
            Not After : Dec 12 02:00:32 2024 GMT
        Subject: CN=eb564f90-d5fb-48b7-a4b3-821ce214e2b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:96:ee:48:6a:76:7c:db:53:1a:07:6a:24:cc:
                    fc:12:8c:2a:2b:65:19:f0:7b:33:ad:fb:5d:a7:d8:
                    76:60:55:1f:72:87:e3:f6:04:a9:88:fe:f2:71:f7:
                    30:c2:5d:da:02:2e:34:2e:2b:30:e7:b9:de:f2:07:
                    1c:51:16:41:09:9e:b7:b6:96:ec:75:56:8d:e5:bb:
                    85:38:56:e2:2a:72:bb:34:13:dc:26:50:90:de:22:
                    66:88:27:27:67:85:4f:bd:f3:79:a9:33:06:82:ce:
                    5e:c6:56:32:c9:98:be:e3:0a:fd:2f:f8:8e:f3:b8:
                    b5:fb:95:2b:fe:fe:5b:12:a6:0f:73:f8:e4:d5:26:
                    06:bf:10:15:76:a4:f7:62:d6:78:c8:24:f0:13:51:
                    1c:5a:b8:de:6b:32:45:f3:46:ab:b9:50:53:ef:d5:
                    6e:70:d8:ac:d5:31:b5:e9:07:ca:a2:77:cc:74:56:
                    82:61:b4:ba:91:05:6a:d9:12:68:bb:c4:cc:62:e4:
                    c6:af:ed:fc:fa:8f:2f:17:ac:08:48:36:0e:0e:f6:
                    06:e1:50:94:06:b5:89:67:34:01:f1:80:d8:d2:09:
                    d2:32:51:de:02:7b:0f:91:4f:1d:10:e6:0a:53:c0:
                    57:a6:b8:41:4a:07:a1:85:ed:a7:7e:2c:91:d2:18:
                    dd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:09:7E:89:FB:2D:EF:B6:04:BB:1D:FD:BB:89:46:AB:E6:43:83:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b4230061-171d-3de7-9b81-4d2e8d6a0428.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:c0:aa:dd:39:bf:7f:e9:eb:cb:49:fe:9d:e3:53:cc:39:9b:
         82:d1:e4:2c:80:87:4c:bf:8c:ab:9e:80:27:d8:6b:59:22:e9:
         5f:4a:09:ae:71:59:7b:82:ac:78:f3:12:a5:1e:be:58:27:5e:
         ab:e5:6e:dd:d9:d3:f0:4d:f6:e7:8b:d6:f0:6c:13:98:4f:4b:
         93:61:71:dd:93:de:30:9b:f9:51:75:5e:66:35:54:a0:fd:87:
         c4:3d:b6:0f:39:de:96:9d:06:f4:ce:c6:26:42:7b:aa:1b:55:
         28:48:86:d2:18:2f:d3:a0:19:f4:8a:3e:aa:dc:f2:97:0c:98:
         55:36:51:8f:6e:14:04:2b:6e:14:1c:c1:ed:d7:7e:5b:38:f2:
         c6:0d:37:54:7f:54:9f:ef:ff:f0:5f:53:62:ae:92:69:8b:b2:
         98:b2:b9:6f:bf:89:09:3e:c9:7a:3f:20:20:a3:98:5f:47:0d:
         2d:dc:50:73:0c:fa:e2:fa:65:2a:83:e4:74:cf:73:d8:0e:30:
         ca:08:44:74:fe:59:5b:98:1d:12:35:e6:ee:87:8c:54:f2:b9:
         e6:ef:a8:9f:fd:79:f9:ca:d2:e9:c6:be:74:0d:39:95:9a:cb:
         c2:1f:6e:f5:c6:58:69:b7:d4:70:a8:e0:3d:fc:7e:df:cc:b6:
         2e:5c:1d:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcx+51r1l0VD9k9o4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDkxMzAxMDAzMloXDTI0MTIxMjAyMDAzMlowLzEtMCsGA1UEAxMk
ZWI1NjRmOTAtZDVmYi00OGI3LWE0YjMtODIxY2UyMTRlMmI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJbuSGp2fNtTGgdqJMz8EowqK2UZ8Hszrftd
p9h2YFUfcofj9gSpiP7ycfcwwl3aAi40Lisw57ne8gccURZBCZ63tpbsdVaN5buF
OFbiKnK7NBPcJlCQ3iJmiCcnZ4VPvfN5qTMGgs5exlYyyZi+4wr9L/iO87i1+5Ur
/v5bEqYPc/jk1SYGvxAVdqT3YtZ4yCTwE1EcWrjeazJF80aruVBT79VucNis1TG1
6QfKonfMdFaCYbS6kQVq2RJou8TMYuTGr+38+o8vF6wISDYODvYG4VCUBrWJZzQB
8YDY0gnSMlHeAnsPkU8dEOYKU8BXprhBSgehhe2nfiyR0hjdzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCsJfon7Le+2BLsd/buJRqvmQ4OFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYjQyMzAwNjEtMTcxZC0z
ZGU3LTliODEtNGQyZThkNmEwNDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAErAqt05v3/p68tJ/p3jU8w5m4LR5CyAh0y/jKuegCfYa1ki6V9KCa5x
WXuCrHjzEqUevlgnXqvlbt3Z0/BN9ueL1vBsE5hPS5Nhcd2T3jCb+VF1XmY1VKD9
h8Q9tg853padBvTOxiZCe6obVShIhtIYL9OgGfSKPqrc8pcMmFU2UY9uFAQrbhQc
we3Xfls48sYNN1R/VJ/v//BfU2KukmmLspiyuW+/iQk+yXo/ICCjmF9HDS3cUHMM
+uL6ZSqD5HTPc9gOMMoIRHT+WVuYHRI15u6HjFTyuebvqJ/9efnK0unGvnQNOZWa
y8IfbvXGWGm31HCo4D38ft/Mti5cHWM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:32:22 2024 by rpki-client on console-fra.rpki-client.org