Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ba193a74-dc0c-3d8d-9667-b1960d66b3d7.roa
File:                     ba193a74-dc0c-3d8d-9667-b1960d66b3d7.roa (raw, json)
Hash identifier:          1/c+cNM0TaM7f0RQrVxuA/2AdsbkMVReNFr/bnzfVA4=
Subject key identifier:   BA:F8:79:00:2D:D3:93:9D:46:2A:A2:9F:BF:E7:6E:34:3E:D2:2B:DF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858455A2D84539F40806F114E9000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ba193a74-dc0c-3d8d-9667-b1960d66b3d7.roa
Signing time:             Thu 28 Mar 2024 01:00:27 +0000
ROA not before:           Thu 28 Mar 2024 01:00:27 +0000
ROA not after:            Wed 26 Jun 2024 01:00:27 +0000
asID:                     399122
IP address blocks:        166.0.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5a:2d:84:53:9f:40:80:6f:11:4e:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 28 01:00:27 2024 GMT
            Not After : Jun 26 01:00:27 2024 GMT
        Subject: CN=a53a84fc-61bd-4e1f-a6b8-9b99c0af3440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:c8:98:95:cd:ee:1f:38:92:25:44:37:3c:
                    d5:98:b6:26:0a:43:c7:e7:bf:1d:fb:37:fe:83:06:
                    f0:69:78:5a:90:18:3f:7b:2f:8c:61:d5:70:02:ab:
                    f1:50:0f:4e:be:3e:8e:0b:68:9c:e3:12:0b:51:cc:
                    6d:7c:94:61:75:3a:89:38:e1:35:40:a3:70:da:38:
                    2c:94:1e:64:8e:14:c0:a3:be:94:d3:7a:76:44:76:
                    06:b0:ab:7c:7d:ca:c3:0c:8d:fb:aa:6a:3c:94:ed:
                    00:0a:77:0e:67:a3:98:04:b5:c7:e8:3f:f3:0e:0d:
                    0e:da:92:c0:fb:43:0c:0a:37:87:75:72:b3:f4:d2:
                    c8:36:9f:e2:ea:da:2b:18:42:e9:a4:57:97:49:d2:
                    0f:91:bb:9e:da:85:d3:e3:c3:6d:1c:ec:7e:33:e6:
                    bd:7e:2b:d5:d7:77:c5:40:97:8a:65:91:8c:7e:aa:
                    2c:84:21:10:cb:43:fc:99:01:e1:ff:76:8b:3f:e7:
                    ce:22:8f:05:a2:85:be:ef:3d:1c:53:df:ff:23:c3:
                    13:bf:ab:ef:f2:90:82:cd:2e:02:a6:08:25:0c:1b:
                    fb:50:f4:1b:37:78:71:e3:28:4b:b1:26:89:0c:ce:
                    b7:8d:80:75:61:5a:09:7d:8f:20:21:30:b0:f4:00:
                    29:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F8:79:00:2D:D3:93:9D:46:2A:A2:9F:BF:E7:6E:34:3E:D2:2B:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ba193a74-dc0c-3d8d-9667-b1960d66b3d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:25:91:58:05:ab:a2:eb:b3:22:4c:c0:b0:5a:3a:12:c4:c2:
         5f:5a:86:a2:68:7d:fd:64:21:e0:e9:84:82:8c:ee:a7:9f:32:
         2f:ba:13:e9:c5:c8:64:2a:95:6f:08:97:04:10:d9:10:85:80:
         e9:78:40:cd:40:4e:0e:c0:70:df:b4:5e:0a:3f:a3:b4:19:d4:
         6c:e0:0e:5c:5c:ad:05:43:8c:3a:fb:a5:6c:bb:70:b2:e7:85:
         9c:39:5e:85:31:fe:b0:02:9b:2d:37:6e:c8:88:7b:27:d2:79:
         80:09:eb:7c:54:25:e3:c0:08:91:86:eb:fe:0e:7e:4c:d3:9e:
         cf:e2:23:49:7c:15:38:18:58:b3:e4:60:29:a4:8e:7d:4e:4b:
         d0:56:35:8e:a1:67:4f:0c:9e:d1:3b:41:1a:f8:91:77:98:2d:
         b9:70:16:24:7d:83:d6:b2:d1:85:0a:4d:2c:8c:82:ec:fd:ea:
         84:75:af:29:5e:2c:74:bb:d0:62:d8:6b:0f:3b:7b:1a:b4:12:
         42:68:43:ef:88:c4:89:0d:82:56:e0:d3:64:98:1a:df:3a:29:
         fe:d4:f6:14:fb:a7:86:9c:e0:3b:4b:78:21:7f:6a:47:fa:6c:
         ac:a2:7e:ba:21:b9:83:88:5d:0b:6e:53:09:f2:4a:b0:67:3c:
         2c:b8:ed:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVaLYRTn0CAbxFOkAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDMyODAxMDAyN1oXDTI0MDYyNjAxMDAyN1owLzEtMCsGA1UEAxMk
YTUzYTg0ZmMtNjFiZC00ZTFmLWE2YjgtOWI5OWMwYWYzNDQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8HImJXN7h84kiVENzzVmLYmCkPH578d+zf+
gwbwaXhakBg/ey+MYdVwAqvxUA9Ovj6OC2ic4xILUcxtfJRhdTqJOOE1QKNw2jgs
lB5kjhTAo76U03p2RHYGsKt8fcrDDI37qmo8lO0ACncOZ6OYBLXH6D/zDg0O2pLA
+0MMCjeHdXKz9NLINp/i6torGELppFeXSdIPkbue2oXT48NtHOx+M+a9fivV13fF
QJeKZZGMfqoshCEQy0P8mQHh/3aLP+fOIo8FooW+7z0cU9//I8MTv6vv8pCCzS4C
pgglDBv7UPQbN3hx4yhLsSaJDM63jYB1YVoJfY8gITCw9AAp2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLr4eQAt05OdRiqin7/nbjQ+0ivfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYmExOTNhNzQtZGMwYy0z
ZDhkLTk2NjctYjE5NjBkNjZiM2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK0lkVgFq6LrsyJMwLBaOhLEwl9ahqJoff1kIeDphIKM7qefMi+6E+nF
yGQqlW8IlwQQ2RCFgOl4QM1ATg7AcN+0Xgo/o7QZ1GzgDlxcrQVDjDr7pWy7cLLn
hZw5XoUx/rACmy03bsiIeyfSeYAJ63xUJePACJGG6/4OfkzTns/iI0l8FTgYWLPk
YCmkjn1OS9BWNY6hZ08MntE7QRr4kXeYLblwFiR9g9ay0YUKTSyMguz96oR1ryle
LHS70GLYaw87exq0EkJoQ++IxIkNglbg02SYGt86Kf7U9hT7p4ac4DtLeCF/akf6
bKyifrohuYOIXQtuUwnySrBnPCy47a4=
-----END CERTIFICATE-----
Generated at Sun Apr 21 03:37:36 2024 by rpki-client on console-fra.rpki-client.org