Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/0a39a1ed-5680-3419-807a-f8b2fd922efb.roa
File:                     0a39a1ed-5680-3419-807a-f8b2fd922efb.roa (raw, json)
Hash identifier:          kk02W308DM80hb8Evx+9PRNRUquX7Qqz/uPuNdNo6yA=
Subject key identifier:   A0:84:A8:D2:58:00:72:CF:A1:B0:E0:2F:66:F4:B0:54:A4:ED:74:44
Certificate issuer:       /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Certificate serial:       010D0C9F4328584582A88E6FB42DBF9D423DCF80
Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/0a39a1ed-5680-3419-807a-f8b2fd922efb.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     399244
IP address blocks:        66.59.209.0/24 maxlen: 24
                          66.59.210.0/24 maxlen: 24
                          66.59.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:8e:6f:b4:2d:bf:9d:42:3d:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=d60f35ce-b452-4624-b6e0-6735e04e1193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:09:dd:9f:5b:dd:eb:75:94:0a:ff:64:01:07:
                    5a:12:cd:c1:3c:4a:62:57:0c:e4:64:33:e3:b8:a3:
                    13:65:28:7b:60:21:1d:ab:61:75:02:8e:13:d0:e5:
                    89:2b:5e:8e:2e:63:3a:94:ba:57:f7:f4:02:5e:20:
                    86:3e:0a:0b:69:3a:6f:53:18:cc:81:e5:95:47:6f:
                    e7:01:88:6b:ed:5e:9a:d1:59:17:c7:62:cd:b0:06:
                    ad:04:79:b3:3f:a6:b9:0b:dc:74:2f:b4:67:37:f6:
                    c3:ff:ff:b7:9f:e2:41:06:63:cd:b9:ad:32:d9:b1:
                    c5:25:81:33:54:e6:4f:f5:a8:ac:01:a1:7d:f1:82:
                    b9:3b:b2:a3:06:6e:39:b8:f2:4b:65:1e:41:91:73:
                    dc:44:c0:02:c8:9b:fc:30:4a:69:6c:3b:ab:5d:16:
                    4f:21:27:fb:6f:91:40:9b:f1:f2:01:12:94:10:48:
                    27:ef:13:72:6a:c7:1d:a7:f4:e6:af:2e:34:1f:c2:
                    ec:ed:be:ae:a8:29:9f:32:1e:50:9c:db:08:fc:5d:
                    0b:05:33:71:f4:40:74:b6:ad:fb:f4:87:9e:0c:b6:
                    eb:6f:15:80:e3:9a:ea:f3:8c:43:5a:cf:ea:a6:90:
                    0e:9e:1c:b7:cd:16:1b:3d:4b:f6:e0:c4:55:c0:c5:
                    56:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:84:A8:D2:58:00:72:CF:A1:B0:E0:2F:66:F4:B0:54:A4:ED:74:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/0a39a1ed-5680-3419-807a-f8b2fd922efb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl

            X509v3 Authority Key Identifier:
                keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.59.209.0-66.59.211.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:3b:a6:6a:56:15:63:2b:df:3d:22:1c:b5:0e:ff:5e:9b:46:
         a2:f3:62:5b:0b:67:91:02:80:3c:82:12:ec:b9:9a:a5:6d:6b:
         97:5e:e0:17:db:27:28:a9:72:96:15:07:ef:b6:b7:2d:5e:ae:
         9b:11:d9:eb:a7:52:86:39:0b:76:9a:a8:f3:80:8e:b8:27:32:
         ab:ed:f9:23:d2:af:2e:19:5e:89:21:00:3c:f2:90:70:78:ef:
         5c:47:b5:bf:3a:7c:14:4c:42:5f:38:8e:2e:fb:3c:8d:d9:5c:
         00:1e:c4:56:c3:98:aa:32:fd:66:24:1e:b0:39:92:23:72:c7:
         24:cf:d4:20:bf:4d:50:61:9a:c0:65:e7:4a:f3:86:81:a6:40:
         6a:fa:9d:80:da:fa:74:44:9a:6c:40:21:64:12:1f:1a:3e:3a:
         4a:c1:01:87:1a:dd:b4:76:0f:d0:52:4e:37:ab:29:85:7c:0c:
         aa:e2:e3:40:bd:2d:9d:11:0e:db:82:ad:5f:dc:96:97:5e:b5:
         80:e0:37:68:70:a4:47:bf:68:ec:c4:2c:bc:77:3c:04:0c:e2:
         47:2c:91:91:b5:23:a4:17:d7:ee:ee:7c:44:1d:23:c1:56:c7:
         32:4b:58:9f:3f:ef:93:06:d5:6d:61:7d:e3:2b:e1:92:81:96:
         9c:10:a7:78
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEWCqI5vtC2/nUI9z4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTAyZDgyZmUtOTVhNy00ZTA5LTlhMmEtYmUxZTE1NGJh
MzhkMB4XDTI0MDQxMTEzMDAzNloXDTI0MDcxMDEzMDAzNlowLzEtMCsGA1UEAxMk
ZDYwZjM1Y2UtYjQ1Mi00NjI0LWI2ZTAtNjczNWUwNGUxMTkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAndn1vd63WUCv9kAQdaEs3BPEpiVwzkZDPj
uKMTZSh7YCEdq2F1Ao4T0OWJK16OLmM6lLpX9/QCXiCGPgoLaTpvUxjMgeWVR2/n
AYhr7V6a0VkXx2LNsAatBHmzP6a5C9x0L7RnN/bD//+3n+JBBmPNua0y2bHFJYEz
VOZP9aisAaF98YK5O7KjBm45uPJLZR5BkXPcRMACyJv8MEppbDurXRZPISf7b5FA
m/HyARKUEEgn7xNyascdp/Tmry40H8Ls7b6uqCmfMh5QnNsI/F0LBTNx9EB0tq37
9IeeDLbrbxWA45rq84xDWs/qppAOnhy3zRYbPUv24MRVwMVWvQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFKCEqNJYAHLPobDgL2b0sFSk7XREMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJk
ODJmZS05NWE3LTRlMDktOWEyYS1iZTFlMTU0YmEzOGQvMGEzOWExZWQtNTY4MC0z
NDE5LTgwN2EtZjhiMmZkOTIyZWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTAyZDgyZmUtOTVhNy00ZTA5LTlh
MmEtYmUxZTE1NGJhMzhkL2UwMmQ4MmZlLTk1YTctNGUwOS05YTJhLWJlMWUxNTRi
YTM4ZC5jcmwwHwYDVR0jBBgwFoAUpMW3Uwr3bKTh98MEI6vYWwVwhGwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJkODJmZS05NWE3LTRlMDktOWEyYS1iZTFl
MTU0YmEzOGQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABCO9ED
BAJCO9AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEABTumalYVYyvfPSIctQ7/XptGovNiWwtnkQKAPIIS7Lma
pW1rl17gF9snKKlylhUH77a3LV6umxHZ66dShjkLdpqo84COuCcyq+35I9KvLhle
iSEAPPKQcHjvXEe1vzp8FExCXziOLvs8jdlcAB7EVsOYqjL9ZiQesDmSI3LHJM/U
IL9NUGGawGXnSvOGgaZAavqdgNr6dESabEAhZBIfGj46SsEBhxrdtHYP0FJON6sp
hXwMquLjQL0tnREO24KtX9yWl161gOA3aHCkR79o7MQsvHc8BAziRyyRkbUjpBfX
7u58RB0jwVbHMktYnz/vkwbVbWF94yvhkoGWnBCneA==
-----END CERTIFICATE-----
Generated at Thu May 2 05:11:16 2024 by rpki-client on console-ams.rpki-client.org