Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/efda3b32-fb84-3bc1-b2fe-2ab5a1fd1612.roa
File:                     efda3b32-fb84-3bc1-b2fe-2ab5a1fd1612.roa (raw, json)
Hash identifier:          uLJ3XrOFUcwCgJNvbMxWm38QSArcuiSfQtPgaD9Pra8=
Subject key identifier:   40:58:7D:98:70:10:1F:83:DF:55:5C:61:B0:0D:A5:4C:40:40:6D:52
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584734C73C3A12EF8B6FAF293240
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/efda3b32-fb84-3bc1-b2fe-2ab5a1fd1612.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7029
IP address blocks:        69.66.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:3c:3a:12:ef:8b:6f:af:29:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=8df50d03-2259-417d-9f9b-630e0b6cde40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:98:5d:26:94:a4:32:66:cd:5a:ff:c2:3f:1e:
                    ed:06:62:d0:87:86:a7:b1:06:d3:7d:1b:94:60:f6:
                    97:fb:bd:11:70:5d:07:95:f5:62:33:a3:c5:8a:20:
                    c4:5e:4e:a2:2d:58:36:96:5d:c7:d9:bc:e4:ae:42:
                    50:55:3c:c4:a8:f9:15:c7:37:c7:7f:20:72:c9:88:
                    32:21:cd:5d:2a:17:5f:82:60:41:de:04:66:82:41:
                    a4:45:24:7c:03:43:35:93:72:11:ef:09:4d:b1:e7:
                    e2:53:b2:5f:8e:ec:ae:f9:7b:9f:ee:c1:e5:3f:01:
                    d4:1a:bc:1a:42:ea:95:4c:83:65:ef:5a:cd:6a:b5:
                    24:ca:df:54:4c:ef:77:86:bc:40:fa:bc:f2:c8:d8:
                    52:b4:88:b5:d5:e2:97:36:50:50:e2:41:23:99:c5:
                    16:05:75:8a:29:1b:7e:95:e8:d6:45:13:62:11:36:
                    50:2a:0c:d2:0f:26:09:f4:9b:c4:f3:5b:44:2b:d3:
                    78:15:39:e1:ee:9b:d6:96:40:91:36:ee:3b:71:1d:
                    0d:bb:95:ad:f7:d7:b7:ea:3d:0e:18:d0:9a:76:36:
                    68:76:1e:6f:bd:d4:89:13:19:43:f8:73:3f:96:6d:
                    21:2f:28:f1:dc:03:14:11:4b:3e:d5:68:30:11:21:
                    f0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:58:7D:98:70:10:1F:83:DF:55:5C:61:B0:0D:A5:4C:40:40:6D:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/efda3b32-fb84-3bc1-b2fe-2ab5a1fd1612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.66.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:18:a5:07:81:fa:c2:a2:35:13:5a:e3:19:f2:5e:f8:52:09:
         d8:be:57:73:80:29:60:5e:c3:42:c0:1e:a7:49:cf:8f:74:ea:
         92:af:67:f2:58:5c:aa:c8:2f:e6:2b:df:98:df:f8:b9:f3:6d:
         67:42:f0:72:30:95:74:59:25:d4:e4:97:5b:ac:33:f6:27:20:
         ed:04:59:d1:7d:c8:b7:18:96:6b:28:c9:31:cd:a1:77:5d:fc:
         a4:07:48:d9:19:05:c4:4d:a9:20:ac:64:6c:d1:aa:ef:77:16:
         07:91:2b:7b:39:43:20:f2:61:35:65:18:62:a4:fe:82:cf:39:
         48:fb:7d:f5:81:d5:20:3b:74:b5:6e:b5:45:be:85:af:2d:35:
         5d:f4:ad:fe:63:60:f8:a4:b3:f7:13:bd:b2:c2:e7:8e:74:16:
         4b:de:14:cb:2f:1f:d2:36:c9:15:89:49:91:74:8d:64:33:f0:
         88:5b:29:a9:f0:b9:5f:b0:db:47:e1:c5:eb:03:68:fb:ac:fb:
         ff:64:12:5a:db:93:5e:8e:ff:76:41:97:dd:a4:c1:0d:e1:1a:
         e5:30:c0:37:2d:45:6b:2b:bd:60:51:25:37:4d:eb:28:8a:40:
         24:2b:67:fe:b8:2e:a6:1a:a0:68:4f:b0:bc:34:19:8b:05:ed:
         32:45:2c:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0xzw6Eu+Lb68pMkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
OGRmNTBkMDMtMjI1OS00MTdkLTlmOWItNjMwZTBiNmNkZTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2phdJpSkMmbNWv/CPx7tBmLQh4ansQbTfRuU
YPaX+70RcF0HlfViM6PFiiDEXk6iLVg2ll3H2bzkrkJQVTzEqPkVxzfHfyByyYgy
Ic1dKhdfgmBB3gRmgkGkRSR8A0M1k3IR7wlNsefiU7Jfjuyu+Xuf7sHlPwHUGrwa
QuqVTINl71rNarUkyt9UTO93hrxA+rzyyNhStIi11eKXNlBQ4kEjmcUWBXWKKRt+
lejWRRNiETZQKgzSDyYJ9JvE81tEK9N4FTnh7pvWlkCRNu47cR0Nu5Wt99e36j0O
GNCadjZodh5vvdSJExlD+HM/lm0hLyjx3AMUEUs+1WgwESHwBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEBYfZhwEB+D31VcYbANpUxAQG1SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWZkYTNiMzItZmI4NC0z
YmMxLWIyZmUtMmFiNWExZmQxNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUKcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIEYpQeB+sKiNRNa4xnyXvhSCdi+V3OAKWBew0LAHqdJz4906pKvZ/JY
XKrIL+Yr35jf+LnzbWdC8HIwlXRZJdTkl1usM/YnIO0EWdF9yLcYlmsoyTHNoXdd
/KQHSNkZBcRNqSCsZGzRqu93FgeRK3s5QyDyYTVlGGKk/oLPOUj7ffWB1SA7dLVu
tUW+ha8tNV30rf5jYPiks/cTvbLC5450FkveFMsvH9I2yRWJSZF0jWQz8IhbKanw
uV+w20fhxesDaPus+/9kElrbk16O/3ZBl92kwQ3hGuUwwDctRWsrvWBRJTdN6yiK
QCQrZ/64LqYaoGhPsLw0GYsF7TJFLCQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:44:17 2024 by rpki-client on console-ams.rpki-client.org