Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/fa9646e1-fa04-3cf6-962b-dedb839a3abe.roa
File:                     fa9646e1-fa04-3cf6-962b-dedb839a3abe.roa (raw, json)
Hash identifier:          b22LMx5qd1a20G3xf5lADbUM7s1NvsWnZAGIifTkBX0=
Subject key identifier:   A8:17:D0:1E:F3:DC:B8:B2:FA:01:96:A5:EA:96:CE:A4:AA:E6:CE:7B
Certificate issuer:       /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97
Certificate serial:       010D0C9F4328584769D0D8F3EBD30F7D8AA68100
Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/fa9646e1-fa04-3cf6-962b-dedb839a3abe.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     6597
IP address blocks:        66.163.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:d8:f3:eb:d3:0f:7d:8a:a6:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=dd9b31fb-a8ce-422f-b882-9464050da36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c3:28:cb:f5:3c:89:40:5c:f8:5e:0e:49:c4:
                    cb:42:6b:ce:e9:68:36:dc:3f:53:aa:3a:6b:b3:5f:
                    aa:35:a1:15:88:8b:57:e7:89:59:2e:a0:8c:17:f7:
                    d4:e4:a6:bc:72:d2:aa:bb:9f:28:60:20:fe:45:ba:
                    fa:39:52:e0:00:b6:0b:33:ea:74:c4:df:44:fd:46:
                    64:47:3d:02:00:f6:1e:e8:da:1c:7c:36:98:13:4b:
                    34:bc:fa:d0:fb:4e:68:b4:e0:f5:de:21:3f:73:89:
                    27:24:a2:5d:78:b5:60:87:67:68:9b:0a:ba:1d:b7:
                    5d:be:e3:b9:0c:62:0f:07:b6:7d:21:2d:4e:82:b3:
                    1a:dc:40:b9:06:33:f2:10:36:13:f0:28:28:d1:31:
                    d6:0e:96:8c:69:f3:21:98:5c:b8:05:91:4d:ce:04:
                    a2:ac:e1:f2:bd:69:60:47:4d:ed:bd:68:3a:47:ec:
                    9a:9d:c7:06:d6:40:f0:f3:56:c2:05:f0:1d:6f:7c:
                    8e:ad:ce:8e:21:b4:26:d2:e3:b4:d5:b1:ce:16:f4:
                    93:b5:a2:c8:6e:e4:38:1a:d8:96:72:26:a8:3f:44:
                    35:8d:5f:62:41:18:17:97:1a:07:e3:55:76:43:d9:
                    7c:ac:d8:1e:f9:a7:cc:ec:bc:ce:87:52:58:5f:a4:
                    99:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:17:D0:1E:F3:DC:B8:B2:FA:01:96:A5:EA:96:CE:A4:AA:E6:CE:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/fa9646e1-fa04-3cf6-962b-dedb839a3abe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl

            X509v3 Authority Key Identifier:
                keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:6c:6f:49:36:ff:57:35:b1:1e:1a:82:5c:7c:3c:39:1b:d0:
         55:34:bc:5a:31:34:c4:1f:0a:66:aa:0f:70:6e:42:2b:0b:ad:
         78:b7:72:c4:bb:1f:ef:55:4c:3a:21:48:32:95:02:1c:68:00:
         89:e1:36:35:0f:cd:e1:b6:1f:14:8b:99:23:a3:9f:26:14:21:
         e1:4e:b8:fd:2d:77:33:e0:cd:fe:1e:8a:c6:4c:24:59:bc:37:
         f5:cb:1c:ed:58:87:41:75:cd:b3:1b:81:74:5f:e6:4c:85:18:
         59:15:86:db:1f:c5:e6:89:43:f3:7d:9d:e7:a8:df:c7:69:39:
         54:f3:d5:44:52:13:b1:70:ac:6f:b8:58:e9:06:11:5d:c2:ef:
         28:c4:ed:0b:81:10:f7:cb:20:f7:4a:69:38:49:a3:59:5d:9c:
         97:64:da:e7:aa:a2:85:93:ea:5c:16:60:62:4b:b3:e3:0f:69:
         72:48:ea:5b:e5:b5:5a:7b:cf:ce:c1:e5:9a:b0:76:c7:39:e2:
         24:aa:5c:a3:f8:33:a6:70:97:83:75:79:d6:a0:58:f4:93:84:
         4d:bb:e7:63:fd:12:d7:4e:89:d1:0d:3c:54:b0:0a:97:aa:db:
         71:be:33:86:e8:51:f2:66:7d:ef:38:18:81:a7:48:b2:84:be:
         bf:cd:42:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdp0Njz69MPfYqmgQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl
Yjk3MB4XDTI0MTAwMzAxMDAzMVoXDTI1MDEwMTAyMDAzMVowLzEtMCsGA1UEAxMk
ZGQ5YjMxZmItYThjZS00MjJmLWI4ODItOTQ2NDA1MGRhMzZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9cMoy/U8iUBc+F4OScTLQmvO6Wg23D9Tqjpr
s1+qNaEViItX54lZLqCMF/fU5Ka8ctKqu58oYCD+Rbr6OVLgALYLM+p0xN9E/UZk
Rz0CAPYe6NocfDaYE0s0vPrQ+05otOD13iE/c4knJKJdeLVgh2domwq6HbddvuO5
DGIPB7Z9IS1OgrMa3EC5BjPyEDYT8Cgo0THWDpaMafMhmFy4BZFNzgSirOHyvWlg
R03tvWg6R+yanccG1kDw81bCBfAdb3yOrc6OIbQm0uO01bHOFvSTtaLIbuQ4GtiW
ciaoP0Q1jV9iQRgXlxoH41V2Q9l8rNge+afM7LzOh1JYX6SZlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKgX0B7z3Liy+gGWpeqWzqSq5s57MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk
NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvZmE5NjQ2ZTEtZmEwNC0z
Y2Y2LTk2MmItZGVkYjgzOWEzYWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5
NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1
ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5
MDJkNWViOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQqPgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEpsb0k2/1c1sR4aglx8PDkb0FU0vFoxNMQfCmaqD3BuQisLrXi3csS7
H+9VTDohSDKVAhxoAInhNjUPzeG2HxSLmSOjnyYUIeFOuP0tdzPgzf4eisZMJFm8
N/XLHO1Yh0F1zbMbgXRf5kyFGFkVhtsfxeaJQ/N9neeo38dpOVTz1URSE7FwrG+4
WOkGEV3C7yjE7QuBEPfLIPdKaThJo1ldnJdk2ueqooWT6lwWYGJLs+MPaXJI6lvl
tVp7z87B5Zqwdsc54iSqXKP4M6Zwl4N1edagWPSThE2752P9EtdOidENPFSwCpeq
23G+M4boUfJmfe84GIGnSLKEvr/NQrw=
-----END CERTIFICATE-----
Generated at Mon Nov 25 15:57:21 2024 by rpki-client on console-fra.rpki-client.org