Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/d2e9a628-bb73-378c-9508-2db3fb689656.roa
File:                     d2e9a628-bb73-378c-9508-2db3fb689656.roa (raw, json)
Hash identifier:          t79GC7n4rT6BIRUELDOw3wGkc/b2vlDLdXim04fMPak=
Subject key identifier:   A7:45:7D:F9:F4:B9:CE:E0:01:CC:E1:E1:1D:2F:3F:EF:D0:47:10:F2
Certificate issuer:       /CN=66cf51f2-af3c-4c05-a781-3b923f753475
Certificate serial:       010D0C9F432858476E00FEF63034E0B48A384A00
Authority key identifier: 2D:B1:B7:27:82:F7:13:63:1E:4C:00:C0:63:9F:AB:19:28:48:B0:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/d2e9a628-bb73-378c-9508-2db3fb689656.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     21976
IP address blocks:        192.100.64.0/24 maxlen: 24
                          192.154.128.0/24 maxlen: 24
                          192.154.129.0/24 maxlen: 24
                          192.154.130.0/24 maxlen: 24
                          204.152.148.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:00:fe:f6:30:34:e0:b4:8a:38:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66cf51f2-af3c-4c05-a781-3b923f753475
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=1fb1d697-94a3-455c-854d-64b85d40868a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:01:36:f4:3d:49:c9:3f:65:11:b4:92:ea:05:
                    e1:72:6e:45:aa:a2:ef:c7:d8:f3:b2:b0:c0:88:e1:
                    6c:65:6e:ed:b5:2a:8f:20:60:3f:a7:fb:0a:47:19:
                    f9:9e:db:a5:28:5b:a9:88:f1:f2:d7:dc:5d:d1:70:
                    4e:ef:b6:89:79:48:db:f3:ec:95:ec:62:38:7d:15:
                    37:98:47:65:ca:a7:27:4c:e1:32:06:56:24:50:2a:
                    0e:db:9c:71:7b:8f:74:cf:9d:d3:32:44:ea:22:b0:
                    26:5f:17:ce:6b:f5:e4:b5:91:e3:3f:a4:c2:64:62:
                    c7:77:29:08:48:8e:e4:d5:6f:78:47:77:dd:01:5e:
                    c9:12:40:20:1e:3d:27:51:b1:68:d7:cf:2b:06:3f:
                    5d:d1:a7:c6:7a:fe:be:b0:7d:53:e1:15:6a:b7:bb:
                    8c:e5:a7:d0:d3:8b:cf:24:d2:97:ce:b0:e7:9b:ec:
                    16:59:48:0a:c7:8d:1f:6a:53:b4:3c:ec:27:76:e0:
                    49:8c:65:c7:68:d8:bf:d1:22:4e:3c:ab:ae:79:5f:
                    d5:72:60:c9:0f:75:d4:b3:6d:a2:25:eb:27:11:92:
                    93:da:84:33:af:d4:3a:a4:e4:d6:c5:bd:29:c9:22:
                    c4:ec:85:bb:17:ba:74:8c:46:c7:73:98:ab:30:3e:
                    ff:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:45:7D:F9:F4:B9:CE:E0:01:CC:E1:E1:1D:2F:3F:EF:D0:47:10:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/d2e9a628-bb73-378c-9508-2db3fb689656.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.crl

            X509v3 Authority Key Identifier:
                keyid:2D:B1:B7:27:82:F7:13:63:1E:4C:00:C0:63:9F:AB:19:28:48:B0:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.64.0/24
                  192.154.128.0-192.154.130.255
                  204.152.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:38:38:5c:09:64:99:d0:a3:77:a8:9b:83:f0:ed:78:fa:2b:
         be:da:6c:e4:8e:aa:af:af:67:ea:d1:6c:7e:59:35:f6:04:45:
         dc:13:f3:23:e3:ff:6e:e5:42:04:4d:67:f5:41:ed:29:e8:86:
         f2:5e:c6:4f:39:2c:25:d7:67:6b:d6:c3:02:9c:2d:74:0f:00:
         fa:ad:d5:93:1e:8d:ac:c7:44:f6:31:28:33:4b:40:1a:9c:7f:
         02:14:18:86:50:31:78:09:8b:1f:1c:a4:e5:4a:a5:06:51:e3:
         e1:48:7e:4d:ff:94:cb:27:ff:84:1d:a8:0a:cc:8b:3e:6c:c7:
         f0:a2:8e:40:03:01:40:f1:20:92:9f:35:05:68:3a:ed:a1:fe:
         09:e1:f0:29:f0:62:8b:0d:08:d5:f4:ab:44:11:8c:30:53:76:
         f6:77:e5:38:68:d3:f1:9f:0a:75:96:c3:cf:c1:21:2b:4d:83:
         dd:9a:96:3d:ed:99:d3:6a:b8:86:3e:40:c8:bc:93:b4:1c:62:
         4b:94:0c:91:65:f9:33:38:a0:2b:a5:f9:6a:39:cf:4e:28:82:
         70:8a:69:49:c8:1d:f5:9a:23:24:16:4a:10:b0:5a:eb:e9:f7:
         89:36:72:7c:b2:0e:ce:dc:d0:f3:e5:b6:9d:3d:b0:fb:61:9e:
         7e:cb:8b:17
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEduAP72MDTgtIo4SgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZjZjUxZjItYWYzYy00YzA1LWE3ODEtM2I5MjNmNzUz
NDc1MB4XDTI0MTAwNDEzMDA0MloXDTI1MDEwMjE0MDA0MlowLzEtMCsGA1UEAxMk
MWZiMWQ2OTctOTRhMy00NTVjLTg1NGQtNjRiODVkNDA4NjhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAE29D1JyT9lEbSS6gXhcm5FqqLvx9jzsrDA
iOFsZW7ttSqPIGA/p/sKRxn5ntulKFupiPHy19xd0XBO77aJeUjb8+yV7GI4fRU3
mEdlyqcnTOEyBlYkUCoO25xxe490z53TMkTqIrAmXxfOa/XktZHjP6TCZGLHdykI
SI7k1W94R3fdAV7JEkAgHj0nUbFo188rBj9d0afGev6+sH1T4RVqt7uM5afQ04vP
JNKXzrDnm+wWWUgKx40falO0POwnduBJjGXHaNi/0SJOPKuueV/VcmDJD3XUs22i
JesnEZKT2oQzr9Q6pOTWxb0pySLE7IW7F7p0jEbHc5irMD7/5QIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFKdFffn0uc7gAczh4R0vP+/QRxDyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NmNm
NTFmMi1hZjNjLTRjMDUtYTc4MS0zYjkyM2Y3NTM0NzUvZDJlOWE2MjgtYmI3My0z
NzhjLTk1MDgtMmRiM2ZiNjg5NjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjZjZjUxZjItYWYzYy00YzA1LWE3
ODEtM2I5MjNmNzUzNDc1LzY2Y2Y1MWYyLWFmM2MtNGMwNS1hNzgxLTNiOTIzZjc1
MzQ3NS5jcmwwHwYDVR0jBBgwFoAULbG3J4L3E2MeTADAY5+rGShIsDIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82NmNmNTFmMi1hZjNjLTRjMDUtYTc4MS0zYjky
M2Y3NTM0NzUuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAwGRAMAwD
BAfAmoADBADAmoIDBAHMmJQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgjg4XAlkmdCjd6ibg/DtePorvtps
5I6qr69n6tFsflk19gRF3BPzI+P/buVCBE1n9UHtKeiG8l7GTzksJddna9bDApwt
dA8A+q3Vkx6NrMdE9jEoM0tAGpx/AhQYhlAxeAmLHxyk5UqlBlHj4Uh+Tf+Uyyf/
hB2oCsyLPmzH8KKOQAMBQPEgkp81BWg67aH+CeHwKfBiiw0I1fSrRBGMMFN29nfl
OGjT8Z8KdZbDz8EhK02D3ZqWPe2Z02q4hj5AyLyTtBxiS5QMkWX5MzigK6X5ajnP
TiiCcIppScgd9ZojJBZKELBa6+n3iTZyfLIOztzQ8+W2nT2w+2GefsuLFw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:57 2024 by rpki-client on console-fra.rpki-client.org