Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e27fbbdd-1750-3ac6-9950-0542f69b847c.roa
File:                     e27fbbdd-1750-3ac6-9950-0542f69b847c.roa (raw, json)
Hash identifier:          CCkgRv3ou2hiR5X+hs/PvrP0wMtTGvkE9IXL6pTMCHU=
Subject key identifier:   FD:D2:77:6C:D8:F7:E2:7E:13:CC:00:03:7A:4A:FF:5C:67:05:88:27
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847ED24C89CC68B3EA923920200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e27fbbdd-1750-3ac6-9950-0542f69b847c.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     132335
IP address blocks:        166.0.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c8:9c:c6:8b:3e:a9:23:92:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=c9ed32e1-665b-4c84-bd61-ab3e7ccaaf4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1c:1b:cf:17:c6:7a:60:74:75:08:34:4b:b5:
                    e8:38:e1:f0:1a:77:f5:82:0d:d4:28:fd:be:dd:7a:
                    7e:93:d5:e0:78:75:b3:c2:b1:33:66:a0:5f:e4:44:
                    21:6c:ec:e2:ae:73:93:92:bb:b4:6d:7f:f5:3d:e8:
                    a9:5a:42:ff:bb:eb:19:db:af:76:00:00:f6:82:fd:
                    d0:97:25:57:d2:af:c5:66:4d:65:3e:47:4f:1c:4c:
                    20:9e:bb:a6:08:af:a4:5e:ba:8c:da:6e:56:7a:74:
                    57:bb:dd:9d:d3:80:c0:57:82:c7:93:8c:aa:be:0f:
                    5b:70:31:64:3a:76:f9:69:2e:6a:2f:41:c4:fe:90:
                    25:a4:a1:a4:61:e2:63:aa:80:7d:f2:4f:6c:53:7c:
                    35:ee:39:6e:a4:f3:8a:cc:f1:18:d9:5e:c1:cd:56:
                    57:bd:77:d6:2b:ea:66:a7:9f:00:d2:81:50:47:10:
                    65:3d:d5:a5:29:99:b2:2a:be:99:ee:9e:66:6f:5d:
                    26:04:51:52:54:ee:38:96:9d:ee:87:73:e4:07:9c:
                    38:7b:39:8c:4e:5a:20:b4:a8:a2:52:9e:dc:e3:9b:
                    78:3f:98:0f:78:b0:d2:56:10:e0:84:77:ff:ea:63:
                    8c:85:eb:7a:d8:e2:2b:51:a0:2b:39:15:a3:15:7e:
                    f8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D2:77:6C:D8:F7:E2:7E:13:CC:00:03:7A:4A:FF:5C:67:05:88:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e27fbbdd-1750-3ac6-9950-0542f69b847c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:05:49:0d:ad:a3:bb:39:fe:47:ce:98:48:3d:95:4e:a8:34:
         b1:20:b1:18:31:f2:d4:65:64:7b:78:0b:45:0d:c2:65:8c:53:
         21:58:25:02:53:3a:52:15:02:42:20:16:74:d3:37:c6:cf:85:
         b4:8d:9f:8d:52:8f:2d:ec:48:9f:de:5e:09:1e:62:fb:e1:05:
         d7:f0:7c:81:a3:89:d8:dc:2d:6c:a0:33:f9:bd:2b:4a:cc:12:
         3c:a3:7c:1e:79:de:e5:81:0a:50:f9:b0:e4:1a:2f:a0:de:0b:
         3f:82:7c:c6:f1:5d:46:39:60:6a:ea:d4:e6:bc:2f:bf:7a:06:
         1b:ee:cc:b8:b5:5c:48:ec:48:ac:eb:27:f3:72:2a:af:47:04:
         a9:3d:d3:9f:ff:1d:3f:9d:fc:38:43:42:db:4a:82:10:03:5e:
         a0:51:66:b1:be:43:4c:a1:74:7d:24:b1:5d:41:16:97:ad:14:
         8b:ed:17:c2:4e:fc:ca:aa:be:4f:22:31:29:30:be:fb:8a:09:
         90:ff:db:21:c5:50:83:11:54:8a:24:b4:b6:9a:53:c9:0d:aa:
         4f:f0:00:eb:21:87:4b:0f:29:ec:5a:41:5c:b7:06:17:ad:06:
         26:6c:c6:55:eb:95:aa:b9:54:59:3e:03:7d:69:62:d1:3e:fa:
         42:97:a4:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJMicxos+qSOSAgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk
YzllZDMyZTEtNjY1Yi00Yzg0LWJkNjEtYWIzZTdjY2FhZjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRwbzxfGemB0dQg0S7XoOOHwGnf1gg3UKP2+
3Xp+k9XgeHWzwrEzZqBf5EQhbOzirnOTkru0bX/1PeipWkL/u+sZ2692AAD2gv3Q
lyVX0q/FZk1lPkdPHEwgnrumCK+kXrqM2m5WenRXu92d04DAV4LHk4yqvg9bcDFk
Onb5aS5qL0HE/pAlpKGkYeJjqoB98k9sU3w17jlupPOKzPEY2V7BzVZXvXfWK+pm
p58A0oFQRxBlPdWlKZmyKr6Z7p5mb10mBFFSVO44lp3uh3PkB5w4ezmMTlogtKii
Up7c45t4P5gPeLDSVhDghHf/6mOMhet62OIrUaArORWjFX74IwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP3Sd2zY9+J+E8wAA3pK/1xnBYgnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTI3ZmJiZGQtMTc1MC0z
YWM2LTk5NTAtMDU0MmY2OWI4NDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgD0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJAFSQ2to7s5/kfOmEg9lU6oNLEgsRgx8tRlZHt4C0UNwmWMUyFYJQJT
OlIVAkIgFnTTN8bPhbSNn41Sjy3sSJ/eXgkeYvvhBdfwfIGjidjcLWygM/m9K0rM
EjyjfB553uWBClD5sOQaL6DeCz+CfMbxXUY5YGrq1Oa8L796BhvuzLi1XEjsSKzr
J/NyKq9HBKk905//HT+d/DhDQttKghADXqBRZrG+Q0yhdH0ksV1BFpetFIvtF8JO
/Mqqvk8iMSkwvvuKCZD/2yHFUIMRVIoktLaaU8kNqk/wAOshh0sPKexaQVy3Bhet
BiZsxlXrlaq5VFk+A31pYtE++kKXpLE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:50 2024 by rpki-client on console-ams.rpki-client.org