Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df833a82-7a66-3fb2-86c2-e24767894bdc.roa
File:                     df833a82-7a66-3fb2-86c2-e24767894bdc.roa (raw, json)
Hash identifier:          xf7+J8NFJvyBP2zr/M4PJwM9xYTsknyz7JNSOlU02R4=
Subject key identifier:   F4:16:B7:E0:15:BE:69:78:EF:08:59:A5:92:8C:F8:C0:D4:B8:33:79
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F432858472F3086B99EF9822050E08E80
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df833a82-7a66-3fb2-86c2-e24767894bdc.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     16696
IP address blocks:        66.255.204.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:86:b9:9e:f9:82:20:50:e0:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=ecb74b1f-4bd1-4d1d-b68b-5365f55df8b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:51:b6:33:6d:c1:34:78:9a:be:c3:23:5e:dc:
                    8e:f6:5d:d6:dc:ae:3a:74:09:4f:3c:4a:51:a8:d2:
                    2c:fe:7e:21:71:5f:a7:49:a3:91:3b:45:45:9d:f0:
                    72:a0:f1:6c:99:a0:a0:f7:34:be:bb:ed:a8:f1:67:
                    a8:79:45:04:44:9a:59:ab:4d:9b:68:0d:d7:b2:00:
                    55:b5:62:f2:50:b5:39:96:e0:9a:4b:e7:23:8a:6c:
                    30:a5:99:b1:93:1c:b5:20:19:66:8c:51:2d:f7:4f:
                    b8:24:e1:e8:f5:32:6f:22:f0:51:f5:12:50:6f:cf:
                    21:81:94:f2:b8:67:5c:35:27:61:94:4b:0b:27:b4:
                    fb:3e:2f:d9:fc:25:06:fa:cd:3c:42:aa:5a:50:cd:
                    8e:68:85:e7:9b:e3:f6:ef:ed:2e:f7:63:88:19:77:
                    13:c4:48:44:6e:b8:4e:20:01:6b:de:53:80:65:4f:
                    88:0b:2c:16:55:9d:c0:08:0e:b4:b9:ac:73:b1:9e:
                    47:5b:ad:4c:1a:b3:52:a4:65:f8:94:c8:a2:bb:92:
                    45:19:c4:c0:c9:e8:d3:3a:a6:f1:60:39:ac:52:2b:
                    0b:e9:3c:d5:93:6c:bc:48:36:d2:4b:78:00:78:75:
                    a8:f5:55:57:10:8b:57:e0:13:ff:1a:4c:5f:02:0f:
                    7c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:16:B7:E0:15:BE:69:78:EF:08:59:A5:92:8C:F8:C0:D4:B8:33:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df833a82-7a66-3fb2-86c2-e24767894bdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.255.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:76:b9:4c:f8:f0:8d:2d:bb:56:a3:af:ab:55:6e:ec:67:24:
         a2:c3:c7:96:aa:4d:4e:13:9b:06:88:7c:d8:28:a3:a9:db:26:
         e9:35:5a:f9:2c:19:89:be:3d:26:99:fe:a2:b9:23:06:67:5e:
         09:f4:f5:c9:b6:e3:04:9f:5f:db:5c:ca:ea:d8:5a:fe:40:b9:
         d5:68:65:ba:43:d1:ee:c4:c6:db:96:4c:c6:39:6b:94:1c:54:
         93:fe:8a:28:54:ea:a4:62:6f:c8:2b:de:f1:62:5a:49:2f:f5:
         c5:97:68:83:5a:30:17:9c:0d:02:bc:06:f1:f9:68:85:ce:2a:
         ad:87:b1:1d:1d:6c:4b:09:32:97:6d:2f:74:db:a2:fa:c5:e7:
         a4:fd:a3:19:5b:96:64:66:38:e9:6a:6a:79:1c:a8:0a:57:06:
         28:20:18:88:12:17:35:51:b4:41:a0:7a:6a:09:e4:f9:e8:f7:
         74:ab:68:f8:91:f7:4b:e3:1a:b7:07:42:96:db:08:7a:62:61:
         ce:b7:7b:3a:ca:4f:e1:22:a6:f0:2a:dc:8b:27:25:f2:ce:d1:
         36:74:12:05:8d:7d:5b:39:81:77:93:1a:80:f3:53:01:dc:f3:
         0e:7a:50:4f:2c:bf:43:ea:93:15:de:36:2a:da:99:b6:46:be:
         e6:cb:8b:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcvMIa5nvmCIFDgjoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI0MDkxMjAxMDAzMVoXDTI0MTIxMTAyMDAzMVowLzEtMCsGA1UEAxMk
ZWNiNzRiMWYtNGJkMS00ZDFkLWI2OGItNTM2NWY1NWRmOGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VG2M23BNHiavsMjXtyO9l3W3K46dAlPPEpR
qNIs/n4hcV+nSaORO0VFnfByoPFsmaCg9zS+u+2o8WeoeUUERJpZq02baA3XsgBV
tWLyULU5luCaS+cjimwwpZmxkxy1IBlmjFEt90+4JOHo9TJvIvBR9RJQb88hgZTy
uGdcNSdhlEsLJ7T7Pi/Z/CUG+s08QqpaUM2OaIXnm+P27+0u92OIGXcTxEhEbrhO
IAFr3lOAZU+ICywWVZ3ACA60uaxzsZ5HW61MGrNSpGX4lMiiu5JFGcTAyejTOqbx
YDmsUisL6TzVk2y8SDbSS3gAeHWo9VVXEItX4BP/GkxfAg98OQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPQWt+AVvml47whZpZKM+MDUuDN5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZGY4MzNhODItN2E2Ni0z
ZmIyLTg2YzItZTI0NzY3ODk0YmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQv/MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIx2uUz48I0tu1ajr6tVbuxnJKLDx5aqTU4TmwaIfNgoo6nbJuk1Wvks
GYm+PSaZ/qK5IwZnXgn09cm24wSfX9tcyurYWv5AudVoZbpD0e7ExtuWTMY5a5Qc
VJP+iihU6qRib8gr3vFiWkkv9cWXaINaMBecDQK8BvH5aIXOKq2HsR0dbEsJMpdt
L3TbovrF56T9oxlblmRmOOlqankcqApXBiggGIgSFzVRtEGgemoJ5Pno93SraPiR
90vjGrcHQpbbCHpiYc63ezrKT+EipvAq3IsnJfLO0TZ0EgWNfVs5gXeTGoDzUwHc
8w56UE8sv0PqkxXeNirambZGvubLi1c=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:39 2024 by rpki-client on console-fra.rpki-client.org