Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f91468d5-a66d-3fa4-8b8a-3a925d580a87.roa
File:                     f91468d5-a66d-3fa4-8b8a-3a925d580a87.roa (raw, json)
Hash identifier:          vBhKDpp2HI/k9UxK1QWIJWp41o22BZ51sOoDO3GHnkM=
Subject key identifier:   0C:BE:98:81:62:BD:BE:73:60:F1:19:1F:80:18:B2:75:AC:CE:1D:BA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858483F802F9177DB549F58033180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f91468d5-a66d-3fa4-8b8a-3a925d580a87.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     62240
IP address blocks:        166.1.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:2f:91:77:db:54:9f:58:03:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=b12ed23f-c131-4592-b32f-54e8b980e328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e1:99:69:5c:ac:96:db:86:5a:06:42:49:6c:
                    ad:b3:33:27:87:e7:38:19:17:70:5f:33:e5:7b:64:
                    a2:34:67:56:e0:54:fe:74:f5:1e:9a:a4:d0:37:6e:
                    7a:e5:61:e4:68:d4:dc:13:f6:e6:e2:2f:93:63:ad:
                    92:8f:dc:78:ef:fa:72:02:19:c2:25:fc:05:d3:e9:
                    ac:f0:7f:15:e6:6c:64:f3:6f:2f:1c:5b:ce:43:f1:
                    11:9b:dc:07:cf:2f:5e:e7:97:30:77:1e:ea:4c:cb:
                    0e:4e:02:06:e5:fd:26:a3:b1:7c:53:1a:ac:b5:b5:
                    14:e3:9e:e5:47:f6:d1:ee:b6:ad:78:d3:46:ec:82:
                    97:98:a3:9c:52:9b:2e:51:b7:ca:3f:eb:1f:2c:d1:
                    3e:8b:f9:4b:fa:04:07:af:ce:0e:4f:a9:56:de:fc:
                    bb:1e:82:cd:e6:17:09:9f:25:2a:37:ef:86:2e:2d:
                    3a:5e:04:f2:66:bf:f4:32:14:11:d1:fd:05:66:d4:
                    38:8a:ae:95:58:8e:6f:0a:c3:3d:85:4b:d1:a8:de:
                    11:6f:8a:82:f9:a6:3f:99:ca:19:f6:76:a0:12:33:
                    7e:08:5b:88:c9:e0:b8:a7:7d:ac:89:1c:25:65:db:
                    f0:ef:50:07:da:93:c7:40:a3:b6:db:ec:8a:b7:58:
                    55:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BE:98:81:62:BD:BE:73:60:F1:19:1F:80:18:B2:75:AC:CE:1D:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f91468d5-a66d-3fa4-8b8a-3a925d580a87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:dc:27:b5:db:ea:7c:7c:f4:af:52:63:33:c5:8c:0f:02:e3:
         ab:b3:c7:13:fd:f5:d7:9f:f5:fc:18:88:47:9f:4f:02:7d:c7:
         97:b9:71:86:ca:5a:c4:66:8b:13:00:3d:2a:96:6b:59:bc:37:
         65:c6:f5:d0:be:4b:34:e2:0d:27:dc:83:5e:8c:76:a4:3a:0e:
         5d:6f:c9:5e:27:64:0c:44:d2:ea:5c:3b:8b:05:bd:99:c0:10:
         ab:de:16:f1:64:14:ac:cf:c1:f7:1d:dc:5c:5b:5b:b3:ae:ca:
         56:37:54:43:19:fa:d8:3c:e3:e3:86:e2:b9:5c:41:3c:3b:b0:
         0e:95:68:11:45:08:7e:8f:21:69:62:60:22:5e:f7:8a:e8:1d:
         2e:d8:3c:8d:d6:64:4b:e2:d4:b7:9b:c9:96:20:16:92:4b:d7:
         54:7b:dd:4d:6f:f1:80:38:61:37:e9:e1:51:fb:b8:41:77:9b:
         f7:6b:81:49:d7:cb:22:d1:49:ec:d5:82:8e:14:93:5f:9e:50:
         13:55:ab:ef:48:24:62:fe:3f:02:09:ca:d4:a1:3d:9c:34:28:
         f1:8b:6e:44:02:6d:e0:7f:fe:da:aa:d4:9e:37:2c:38:e8:b6:
         04:de:4d:0d:12:52:5c:33:54:21:4d:55:aa:d9:74:25:80:f7:
         74:8a:f7:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg/gC+Rd9tUn1gDMYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk
YjEyZWQyM2YtYzEzMS00NTkyLWIzMmYtNTRlOGI5ODBlMzI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuGZaVysltuGWgZCSWytszMnh+c4GRdwXzPl
e2SiNGdW4FT+dPUemqTQN2565WHkaNTcE/bm4i+TY62Sj9x47/pyAhnCJfwF0+ms
8H8V5mxk828vHFvOQ/ERm9wHzy9e55cwdx7qTMsOTgIG5f0mo7F8UxqstbUU457l
R/bR7rateNNG7IKXmKOcUpsuUbfKP+sfLNE+i/lL+gQHr84OT6lW3vy7HoLN5hcJ
nyUqN++GLi06XgTyZr/0MhQR0f0FZtQ4iq6VWI5vCsM9hUvRqN4Rb4qC+aY/mcoZ
9nagEjN+CFuIyeC4p32siRwlZdvw71AH2pPHQKO22+yKt1hVUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAy+mIFivb5zYPEZH4AYsnWszh26MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjkxNDY4ZDUtYTY2ZC0z
ZmE0LThiOGEtM2E5MjVkNTgwYTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHcJ7Xb6nx89K9SYzPFjA8C46uzxxP99def9fwYiEefTwJ9x5e5cYbK
WsRmixMAPSqWa1m8N2XG9dC+SzTiDSfcg16MdqQ6Dl1vyV4nZAxE0upcO4sFvZnA
EKveFvFkFKzPwfcd3FxbW7OuylY3VEMZ+tg84+OG4rlcQTw7sA6VaBFFCH6PIWli
YCJe94roHS7YPI3WZEvi1LebyZYgFpJL11R73U1v8YA4YTfp4VH7uEF3m/drgUnX
yyLRSezVgo4Uk1+eUBNVq+9IJGL+PwIJytShPZw0KPGLbkQCbeB//tqq1J43LDjo
tgTeTQ0SUlwzVCFNVarZdCWA93SK94Q=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:38:42 2025 by rpki-client