Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aefa5d40-e696-3643-8d61-4408999fd742.roa
File:                     aefa5d40-e696-3643-8d61-4408999fd742.roa (raw, json)
Hash identifier:          RdSlvTpjtbEZF73b6hjpbGZqbGnYJf1D60YaeU18fEg=
Subject key identifier:   C3:C3:82:33:93:96:4F:F5:8F:69:81:56:59:B0:B5:E5:B6:8D:7D:AC
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858430EC999AF1AF0C0AC44C26900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aefa5d40-e696-3643-8d61-4408999fd742.roa
Signing time:             Tue 29 Aug 2023 12:00:00 +0000
ROA not before:           Tue 29 Aug 2023 12:00:00 +0000
ROA not after:            Mon 16 Sep 2024 04:00:00 +0000
asID:                     13335
IP address blocks:        172.66.144.0/20 maxlen: 20
                          172.66.160.0/20 maxlen: 20
                          172.66.128.0/20 maxlen: 20
                          172.66.176.0/24 maxlen: 24
                          172.66.177.0/24 maxlen: 24
                          172.66.208.0/21 maxlen: 21
                          172.66.192.0/20 maxlen: 20
                          172.66.216.0/24 maxlen: 24
                          172.66.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0e:c9:99:af:1a:f0:c0:ac:44:c2:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 29 12:00:00 2023 GMT
            Not After : Sep 16 04:00:00 2024 GMT
        Subject: CN=db388963-334c-4b7b-b080-25446d419dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ca:84:4f:16:bb:e8:de:1d:db:20:37:e3:78:
                    bf:0b:9c:d0:8e:97:2d:7a:60:56:7e:24:c3:ae:6d:
                    71:cf:6f:b5:26:ed:5d:b2:ad:0c:68:55:6d:94:01:
                    bb:36:47:3e:03:80:ee:00:16:1c:33:cb:d8:8d:c2:
                    fd:0c:58:5f:70:3a:88:83:aa:4d:7c:19:1c:9b:9b:
                    36:19:11:41:f5:6e:5a:66:8f:c4:dd:17:78:41:2d:
                    cd:7d:bf:96:f9:19:bb:d0:d7:bc:4f:47:0d:4e:ed:
                    0b:fe:21:c7:e1:47:8a:d7:9a:4a:84:8e:98:e4:11:
                    7e:d9:06:05:a7:6b:f7:82:3b:21:9f:4f:96:3f:52:
                    fe:84:99:a3:5c:60:54:89:dc:ac:be:b7:a9:9e:6b:
                    82:2f:f8:41:90:ab:21:f4:65:82:72:fc:26:a4:61:
                    0d:47:55:6d:e4:f7:40:d3:7b:aa:75:46:87:b6:9f:
                    3e:2e:45:94:ff:1f:5b:71:5a:87:da:62:9f:5e:99:
                    01:89:e8:db:77:3e:70:4c:28:d8:61:10:14:f6:fa:
                    98:1f:54:1a:ae:bd:3f:2a:29:9b:10:02:fb:82:75:
                    72:60:18:bc:5b:cd:fd:44:28:2b:d6:5f:6e:af:84:
                    01:d3:b5:5f:80:1c:89:74:92:a4:7b:a7:c0:20:ae:
                    2d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C3:82:33:93:96:4F:F5:8F:69:81:56:59:B0:B5:E5:B6:8D:7D:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aefa5d40-e696-3643-8d61-4408999fd742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.66.128.0-172.66.177.255
                  172.66.192.0-172.66.217.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:6b:a2:ae:11:b1:39:67:e0:ca:d1:6f:d2:7b:c3:b4:fe:54:
         2c:f8:f9:06:19:e1:a3:f0:6f:33:58:54:b3:c0:78:26:79:c9:
         52:7a:97:b8:36:3e:75:3d:6b:ec:c7:f5:60:f1:e2:5a:5e:af:
         26:be:8d:5e:a4:92:d0:4b:a6:95:27:f9:82:15:7e:83:5f:87:
         12:f8:f6:55:8d:60:65:1f:13:a7:9b:44:39:a7:2e:4c:e3:85:
         f7:f2:23:96:b7:c8:ab:37:56:32:f3:23:3b:1b:dc:d2:16:1d:
         d5:0a:89:d1:83:ef:0e:5b:f1:94:b1:97:55:e9:bf:c7:ee:b0:
         d8:50:cf:0f:f6:62:31:2d:a8:0e:45:9a:6b:fe:cb:38:8a:43:
         50:ea:82:4d:85:97:ea:1b:4e:77:33:90:f3:f4:2c:32:85:74:
         eb:eb:7c:48:18:c0:8f:f6:b3:e8:fc:54:f8:4e:36:09:c9:d3:
         06:a8:a2:ef:8b:78:b3:89:4e:d8:ba:a4:af:9a:dd:f8:00:a2:
         07:e6:f3:99:3e:c8:f1:39:5a:77:78:c1:9e:b6:27:bf:c5:42:
         4d:78:21:13:44:e5:8b:5d:fb:68:9a:de:f7:9f:a8:c8:ee:6b:
         4c:30:28:f2:78:f7:62:75:92:4d:c8:48:ea:cc:91:65:cd:50:
         57:48:f3:69
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEMOyZmvGvDArETCaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTIzMDgyOTEyMDAwMFoXDTI0MDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk
ZGIzODg5NjMtMzM0Yy00YjdiLWIwODAtMjU0NDZkNDE5ZGZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMqETxa76N4d2yA343i/C5zQjpctemBWfiTD
rm1xz2+1Ju1dsq0MaFVtlAG7Nkc+A4DuABYcM8vYjcL9DFhfcDqIg6pNfBkcm5s2
GRFB9W5aZo/E3Rd4QS3Nfb+W+Rm70Ne8T0cNTu0L/iHH4UeK15pKhI6Y5BF+2QYF
p2v3gjshn0+WP1L+hJmjXGBUidysvrepnmuCL/hBkKsh9GWCcvwmpGENR1Vt5PdA
03uqdUaHtp8+LkWU/x9bcVqH2mKfXpkBiejbdz5wTCjYYRAU9vqYH1Qarr0/Kimb
EAL7gnVyYBi8W839RCgr1l9ur4QB07VfgByJdJKke6fAIK4tBwIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFMPDgjOTlk/1j2mBVlmwteW2jX2sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWVmYTVkNDAtZTY5Ni0z
NjQzLThkNjEtNDQwODk5OWZkNzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAesQoAD
BAGsQrAwDAMEBqxCwAMEAaxC2DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBba6KuEbE5Z+DK0W/Se8O0/lQs
+PkGGeGj8G8zWFSzwHgmeclSepe4Nj51PWvsx/Vg8eJaXq8mvo1epJLQS6aVJ/mC
FX6DX4cS+PZVjWBlHxOnm0Q5py5M44X38iOWt8irN1Yy8yM7G9zSFh3VConRg+8O
W/GUsZdV6b/H7rDYUM8P9mIxLagORZpr/ss4ikNQ6oJNhZfqG053M5Dz9CwyhXTr
63xIGMCP9rPo/FT4TjYJydMGqKLvi3iziU7YuqSvmt34AKIH5vOZPsjxOVp3eMGe
tie/xUJNeCETROWLXftomt73n6jI7mtMMCjyePdidZJNyEjqzJFlzVBXSPNp
-----END CERTIFICATE-----
Generated at Sat May 11 02:48:10 2024 by rpki-client on console-fra.rpki-client.org