Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8b540d6-ee19-384d-af3d-324f2ea92bf3.roa
File:                     b8b540d6-ee19-384d-af3d-324f2ea92bf3.roa (raw, json)
Hash identifier:          FxtBEjZuwuRpz4PxfTrf7ZrRKquHmbG5yyyyw8T/UsE=
Subject key identifier:   6F:46:3B:ED:FD:A6:58:25:5E:F4:EE:73:D1:E7:A4:5F:73:D1:CB:C6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845A15E0F85303400EEEC236C40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8b540d6-ee19-384d-af3d-324f2ea92bf3.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     62240
IP address blocks:        166.1.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:0f:85:30:34:00:ee:ec:23:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=fcc737b2-57f6-4c8f-8740-3703879c7247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:26:54:cd:84:56:3f:f7:aa:17:b9:ab:83:d0:
                    09:ad:f9:7e:1b:45:12:db:cd:41:49:d4:90:ed:18:
                    63:28:0a:de:16:ad:71:ed:af:b6:16:bb:97:1d:32:
                    3e:07:b8:a0:fc:4d:7e:c2:31:1e:35:f6:bd:91:6e:
                    c9:e1:ea:ba:c0:35:83:bc:cc:e2:6f:db:5d:26:b6:
                    f7:df:c4:63:96:4b:2a:ad:d2:ba:2b:e2:db:8e:17:
                    17:01:7a:80:ba:28:47:e5:05:89:72:7f:e6:cf:da:
                    b9:e4:2d:57:f0:72:6e:cd:b4:e5:b5:fb:6a:9f:20:
                    66:f3:48:80:a2:90:3d:27:89:1f:6c:ce:71:ef:ac:
                    ad:bd:91:5c:bd:4c:d2:89:e3:e3:ea:25:57:db:e4:
                    92:38:34:09:17:61:05:d4:e4:6a:79:d9:f5:12:bb:
                    f7:8d:65:35:8c:b8:03:d7:29:be:bf:53:2d:bd:1b:
                    02:76:a4:af:cf:94:f6:5c:f6:eb:7f:e5:56:de:83:
                    cd:a7:dc:4b:dd:62:b7:07:59:09:bb:04:80:22:88:
                    fe:9e:c9:b2:90:ab:2a:2e:b0:18:75:be:92:97:99:
                    1d:b9:51:78:8e:e1:6a:d7:ba:ad:d2:5b:e4:dd:8c:
                    7a:86:dc:8c:d5:93:e6:b6:45:84:67:b7:fe:64:96:
                    ae:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:46:3B:ED:FD:A6:58:25:5E:F4:EE:73:D1:E7:A4:5F:73:D1:CB:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8b540d6-ee19-384d-af3d-324f2ea92bf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:8e:77:f9:61:2b:a5:11:9d:a6:0d:ac:66:3e:29:9a:dd:4c:
         f4:e9:0f:b4:a3:94:a4:a1:cd:49:c2:56:32:6d:93:e3:c3:c9:
         e0:78:d7:ae:04:99:bd:b0:ac:5b:1c:d8:22:23:ec:83:14:4c:
         5a:e4:aa:22:ee:c7:a9:26:1a:1a:be:5f:77:a1:14:f5:f7:48:
         21:2b:90:ac:7f:fd:56:80:83:d3:6e:be:3a:17:8c:d5:93:dd:
         f5:10:ae:a6:67:b9:ca:b7:cc:23:d1:c9:fd:3c:ea:f7:86:6a:
         bc:da:47:33:21:9d:4f:c3:db:b7:b5:de:b1:8d:22:75:56:29:
         e1:ad:28:9a:4f:83:f9:b6:2d:d6:07:cf:3f:31:6c:ae:ee:2a:
         bf:d1:98:41:06:e5:5e:09:8c:4f:08:6d:c1:34:58:a6:48:0b:
         19:36:6f:ba:5e:dc:96:7b:87:1e:58:4a:50:b4:48:dc:56:49:
         91:c8:e8:d4:b3:55:af:6d:0a:26:6a:2f:cf:de:b5:e0:38:f2:
         9b:fd:82:27:07:56:db:f4:71:d7:0d:24:95:d5:28:26:6e:d1:
         8f:77:52:95:7f:a1:72:c8:0c:0f:23:07:af:c5:46:80:50:00:
         83:04:1c:59:02:8a:1b:4b:3e:ba:18:cc:47:17:be:ce:93:94:
         a6:6b:b6:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXg+FMDQA7uwjbEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk
ZmNjNzM3YjItNTdmNi00YzhmLTg3NDAtMzcwMzg3OWM3MjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryZUzYRWP/eqF7mrg9AJrfl+G0US281BSdSQ
7RhjKAreFq1x7a+2FruXHTI+B7ig/E1+wjEeNfa9kW7J4eq6wDWDvMzib9tdJrb3
38RjlksqrdK6K+LbjhcXAXqAuihH5QWJcn/mz9q55C1X8HJuzbTltftqnyBm80iA
opA9J4kfbM5x76ytvZFcvUzSiePj6iVX2+SSODQJF2EF1ORqedn1Erv3jWU1jLgD
1ym+v1MtvRsCdqSvz5T2XPbrf+VW3oPNp9xL3WK3B1kJuwSAIoj+nsmykKsqLrAY
db6Sl5kduVF4juFq17qt0lvk3Yx6htyM1ZPmtkWEZ7f+ZJauKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG9GO+39plglXvTuc9HnpF9z0cvGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYjhiNTQwZDYtZWUxOS0z
ODRkLWFmM2QtMzI0ZjJlYTkyYmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAeOd/lhK6URnaYNrGY+KZrdTPTpD7SjlKShzUnCVjJtk+PDyeB4164E
mb2wrFsc2CIj7IMUTFrkqiLux6kmGhq+X3ehFPX3SCErkKx//VaAg9NuvjoXjNWT
3fUQrqZnucq3zCPRyf086veGarzaRzMhnU/D27e13rGNInVWKeGtKJpPg/m2LdYH
zz8xbK7uKr/RmEEG5V4JjE8IbcE0WKZICxk2b7pe3JZ7hx5YSlC0SNxWSZHI6NSz
Va9tCiZqL8/eteA48pv9gicHVtv0cdcNJJXVKCZu0Y93UpV/oXLIDA8jB6/FRoBQ
AIMEHFkCihtLProYzEcXvs6TlKZrtkk=
-----END CERTIFICATE-----
Generated at Fri May 3 21:45:45 2024 by rpki-client on console-fra.rpki-client.org