Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bddb2042-55fd-3546-9632-59a7d4839f55.roa
File:                     bddb2042-55fd-3546-9632-59a7d4839f55.roa (raw, json)
Hash identifier:          ZyUGMXQfCg5NvD6OauZTm9JZcextBL4yceROcXd8ueI=
Subject key identifier:   21:91:62:FA:E9:4C:CE:0E:BD:FA:E8:57:84:5B:9E:D5:0B:1F:A4:E8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848F00C6FFAE8CEBAAAD7D365C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bddb2042-55fd-3546-9632-59a7d4839f55.roa
Signing time:             Wed 19 Feb 2025 19:45:57 +0000
ROA not before:           Wed 19 Feb 2025 19:45:57 +0000
ROA not after:            Tue 20 May 2025 18:45:57 +0000
asID:                     62240
IP address blocks:        166.1.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f0:0c:6f:fa:e8:ce:ba:aa:d7:d3:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 19 19:45:57 2025 GMT
            Not After : May 20 18:45:57 2025 GMT
        Subject: CN=4fa435ff-6820-4dfe-b948-65fc403ba0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fb:70:56:10:4d:68:64:5e:1e:ae:c6:68:61:
                    f7:fd:fb:ec:5f:43:ac:27:f1:44:73:39:11:28:64:
                    0a:b9:93:12:ef:11:de:99:bb:5d:06:71:0f:b7:c4:
                    3b:c2:35:d5:01:d1:00:ce:43:82:83:e0:6b:30:57:
                    3a:18:47:f8:93:ee:b9:21:42:a0:5c:5e:f6:45:8a:
                    c3:37:fb:52:e5:9d:34:b0:ca:e6:bc:eb:04:bf:25:
                    6b:34:4b:1e:b8:ea:dc:b2:2c:ac:ed:6b:d5:b7:28:
                    9d:b6:9f:52:e5:04:f3:ca:9d:a5:13:3a:73:7b:67:
                    1f:f2:67:8b:4b:28:1c:63:ce:be:9e:dc:c9:ab:fc:
                    fd:30:70:c6:cf:99:d2:75:46:38:a8:49:64:28:8a:
                    cc:e5:e8:8a:f9:d9:12:78:d5:bb:d2:44:e2:ea:d3:
                    35:e2:4f:b1:f8:c8:50:4d:6d:7b:b0:8f:21:d7:21:
                    67:9d:d7:f4:1a:b2:7c:a0:2e:db:fa:aa:eb:b8:c8:
                    38:73:15:7d:f0:30:f7:22:62:b7:62:e6:38:1d:52:
                    d5:22:72:c5:9a:cc:da:d8:70:35:74:48:39:4f:23:
                    f5:22:94:f0:15:22:ad:32:2b:6f:f6:aa:54:3c:1a:
                    5a:3b:fc:3a:c9:cb:c8:a8:fe:aa:29:f8:d1:c2:3e:
                    50:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:91:62:FA:E9:4C:CE:0E:BD:FA:E8:57:84:5B:9E:D5:0B:1F:A4:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bddb2042-55fd-3546-9632-59a7d4839f55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:0c:df:e3:3e:df:fd:70:d4:f6:10:aa:f5:66:42:bf:3d:a6:
         48:be:b2:ef:4c:79:75:47:21:c0:bd:e0:f9:d4:43:37:7c:6b:
         24:e5:aa:d8:a5:04:82:24:77:e4:f3:7d:66:62:09:ca:15:59:
         63:e0:a2:07:f9:24:3c:fa:4a:0c:80:58:eb:9d:c4:6d:39:e6:
         5c:13:9e:5c:2e:b4:8b:a2:a5:b3:34:0c:71:32:e4:f4:68:9e:
         7b:4e:b2:4c:bf:92:f9:ff:12:07:4f:dd:8a:52:a1:79:a4:87:
         ef:28:b1:7a:74:4e:b6:c5:96:7f:c8:d6:d3:bc:fb:2a:5f:e6:
         b1:03:a5:dd:a2:82:03:f3:33:97:06:a6:0b:d1:4f:30:61:eb:
         bd:8f:05:52:b9:b0:0d:a9:a9:57:85:f3:f9:3c:f3:6d:dc:65:
         cb:56:3c:80:8b:69:23:62:b0:87:53:c6:11:46:b9:d8:da:93:
         ab:7a:46:83:15:cc:cf:78:e9:f8:b5:5f:48:b5:08:18:1c:4e:
         91:ad:83:72:7e:67:70:8d:10:cb:9d:84:02:e6:d2:7a:d9:80:
         68:2d:63:69:04:ec:7b:1f:e4:85:06:8d:86:c7:2a:4d:6d:f8:
         c1:ea:4c:59:f7:bf:0c:57:1a:c0:b0:77:a1:71:f0:59:0a:6a:
         69:ba:f4:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjwDG/66M66qtfTZcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIxOTE5NDU1N1oXDTI1MDUyMDE4NDU1N1owLzEtMCsGA1UEAxMk
NGZhNDM1ZmYtNjgyMC00ZGZlLWI5NDgtNjVmYzQwM2JhMGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvtwVhBNaGReHq7GaGH3/fvsX0OsJ/FEczkR
KGQKuZMS7xHembtdBnEPt8Q7wjXVAdEAzkOCg+BrMFc6GEf4k+65IUKgXF72RYrD
N/tS5Z00sMrmvOsEvyVrNEseuOrcsiys7WvVtyidtp9S5QTzyp2lEzpze2cf8meL
SygcY86+ntzJq/z9MHDGz5nSdUY4qElkKIrM5eiK+dkSeNW70kTi6tM14k+x+MhQ
TW17sI8h1yFnndf0GrJ8oC7b+qrruMg4cxV98DD3ImK3YuY4HVLVInLFmsza2HA1
dEg5TyP1IpTwFSKtMitv9qpUPBpaO/w6ycvIqP6qKfjRwj5QHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCGRYvrpTM4OvfroV4RbntULH6ToMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYmRkYjIwNDItNTVmZC0z
NTQ2LTk2MzItNTlhN2Q0ODM5ZjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJAM3+M+3/1w1PYQqvVmQr89pki+su9MeXVHIcC94PnUQzd8ayTlqtil
BIIkd+TzfWZiCcoVWWPgogf5JDz6SgyAWOudxG055lwTnlwutIuipbM0DHEy5PRo
nntOsky/kvn/EgdP3YpSoXmkh+8osXp0TrbFln/I1tO8+ypf5rEDpd2iggPzM5cG
pgvRTzBh672PBVK5sA2pqVeF8/k8823cZctWPICLaSNisIdTxhFGudjak6t6RoMV
zM946fi1X0i1CBgcTpGtg3J+Z3CNEMudhALm0nrZgGgtY2kE7Hsf5IUGjYbHKk1t
+MHqTFn3vwxXGsCwd6Fx8FkKamm69E4=
-----END CERTIFICATE-----
Generated at Thu Apr 3 22:31:29 2025 by rpki-client