Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/7c3ea0dc-bea7-3240-852d-488e3868906a.roa
File:                     7c3ea0dc-bea7-3240-852d-488e3868906a.roa (raw, json)
Hash identifier:          Dd0tBoiC/mODI8gVtCipLnh3l3bXbwGeV9KPmgqh9bk=
Subject key identifier:   05:E7:AC:BE:41:EB:DB:D5:25:D1:3B:C9:63:E0:48:A8:1B:85:31:A9
Certificate issuer:       /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Certificate serial:       010D0C9F432858477230EBAA9FA6B0B83BFA6600
Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/7c3ea0dc-bea7-3240-852d-488e3868906a.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     8100
IP address blocks:        66.248.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:eb:aa:9f:a6:b0:b8:3b:fa:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=c20070d4-eb23-4820-814e-e11a63a1a12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:12:52:95:ca:35:8c:b7:e0:6c:aa:58:09:18:
                    4f:d3:d2:bc:91:e7:dd:a3:69:de:6b:a5:af:ea:e1:
                    0b:fb:a0:96:b0:d1:87:25:6b:df:50:0c:c3:22:af:
                    1b:1a:79:47:8f:cb:50:31:e6:fa:01:aa:41:c1:67:
                    81:dc:72:a1:cc:9b:94:18:a3:4e:cb:52:3e:ce:41:
                    44:0b:87:ed:bb:83:17:17:c8:d1:45:b9:d7:1f:fb:
                    4c:ea:3f:c1:48:fb:12:7f:e6:0a:fb:6b:d5:31:3d:
                    b6:a1:dc:0c:4a:70:9c:97:ca:a6:18:a0:90:51:b3:
                    af:d0:fe:08:1b:47:27:a6:85:c5:ec:a6:7e:7a:83:
                    c0:6d:8a:62:42:05:7e:80:91:2d:43:d5:2f:cb:27:
                    44:ae:e7:82:8e:67:84:d6:92:a9:0b:3d:ea:63:98:
                    50:48:bb:b0:f4:85:96:a9:d4:1a:be:8d:8f:59:17:
                    de:5a:99:25:97:2f:28:d6:ee:86:4c:6e:33:80:2c:
                    67:cf:86:b6:67:cb:0c:0f:bf:e2:67:64:ba:9c:77:
                    ee:c5:2f:12:48:bf:45:9b:bb:18:d0:d2:f9:ee:7d:
                    c2:4a:ef:9b:fc:07:66:54:73:85:46:87:6c:58:5d:
                    d2:8c:d9:ef:4a:55:5b:dc:ff:43:ea:a6:a0:3b:ff:
                    95:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E7:AC:BE:41:EB:DB:D5:25:D1:3B:C9:63:E0:48:A8:1B:85:31:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/7c3ea0dc-bea7-3240-852d-488e3868906a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl

            X509v3 Authority Key Identifier:
                keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.248.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:72:1b:39:7d:69:ae:8e:60:9f:48:84:0f:f7:26:54:3c:99:
         c2:13:d6:a5:7c:04:58:40:65:4e:22:ee:2b:7a:11:4d:e2:72:
         19:18:da:72:ba:d1:51:81:b0:56:a1:0c:15:3f:12:1b:72:6a:
         78:81:cc:61:cd:90:5f:ad:bf:bb:3d:3e:70:25:a0:e7:42:2f:
         51:d6:92:ee:3b:e0:bc:b3:a1:89:d3:17:cb:3c:4a:08:4f:89:
         a3:27:0f:c4:23:1c:51:95:f7:b5:5d:05:c0:57:96:19:95:ab:
         b0:68:15:1b:8b:cc:f4:a5:72:04:fd:ef:0d:69:3f:93:ba:ac:
         e9:f8:94:73:d7:c5:76:f9:be:c6:3c:8e:c7:62:99:22:ec:c9:
         82:78:6f:b8:8d:44:8f:b2:ce:fd:ea:4d:1d:5a:37:09:1a:f3:
         82:f2:89:68:05:5b:cd:6c:c7:31:7e:ec:19:4b:b2:88:c8:1b:
         c1:84:8d:fd:0b:1f:ca:55:bc:5f:27:04:1a:e5:76:74:df:4c:
         91:27:45:75:b4:8c:f2:51:9b:ce:b7:0a:21:6c:f2:2f:8e:2a:
         0a:b6:60:ec:22:6c:73:e9:26:50:37:5f:9c:6a:11:9e:56:f8:
         af:23:e4:45:59:57:ea:c6:13:96:60:f5:77:59:c9:54:0f:f1:
         2d:14:cf:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdyMOuqn6awuDv6ZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk
M2RmMB4XDTI0MTAwNjAxMDAzMVoXDTI1MDEwNDAyMDAzMVowLzEtMCsGA1UEAxMk
YzIwMDcwZDQtZWIyMy00ODIwLTgxNGUtZTExYTYzYTFhMTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxJSlco1jLfgbKpYCRhP09K8kefdo2nea6Wv
6uEL+6CWsNGHJWvfUAzDIq8bGnlHj8tQMeb6AapBwWeB3HKhzJuUGKNOy1I+zkFE
C4ftu4MXF8jRRbnXH/tM6j/BSPsSf+YK+2vVMT22odwMSnCcl8qmGKCQUbOv0P4I
G0cnpoXF7KZ+eoPAbYpiQgV+gJEtQ9UvyydErueCjmeE1pKpCz3qY5hQSLuw9IWW
qdQavo2PWRfeWpklly8o1u6GTG4zgCxnz4a2Z8sMD7/iZ2S6nHfuxS8SSL9Fm7sY
0NL57n3CSu+b/AdmVHOFRodsWF3SjNnvSlVb3P9D6qagO/+VTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAXnrL5B69vVJdE7yWPgSKgbhTGpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm
YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvN2MzZWEwZGMtYmVhNy0z
MjQwLTg1MmQtNDg4ZTM4Njg5MDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5
MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1
ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx
MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvjwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHlyGzl9aa6OYJ9IhA/3JlQ8mcIT1qV8BFhAZU4i7it6EU3ichkY2nK6
0VGBsFahDBU/EhtyaniBzGHNkF+tv7s9PnAloOdCL1HWku474LyzoYnTF8s8SghP
iaMnD8QjHFGV97VdBcBXlhmVq7BoFRuLzPSlcgT97w1pP5O6rOn4lHPXxXb5vsY8
jsdimSLsyYJ4b7iNRI+yzv3qTR1aNwka84LyiWgFW81sxzF+7BlLsojIG8GEjf0L
H8pVvF8nBBrldnTfTJEnRXW0jPJRm863CiFs8i+OKgq2YOwibHPpJlA3X5xqEZ5W
+K8j5EVZV+rGE5Zg9XdZyVQP8S0Uzz8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:32 2024 by rpki-client on console-fra.rpki-client.org