Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/4a9ab8b7-7957-36fc-9d25-f11f15ac7c73.roa
File:                     4a9ab8b7-7957-36fc-9d25-f11f15ac7c73.roa (raw, json)
Hash identifier:          BXhuaZmB13pKjipKaA2vUHM5X7+8pD1CEPyXJem2tJc=
Subject key identifier:   90:FE:43:AE:41:34:2B:DB:1A:42:7E:D4:F7:DC:41:3A:12:0E:40:4B
Certificate issuer:       /CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08
Certificate serial:       010D0C9F43285847A30C04235642C41073271D80
Authority key identifier: 62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/4a9ab8b7-7957-36fc-9d25-f11f15ac7c73.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     26703
IP address blocks:        66.102.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0c:04:23:56:42:c4:10:73:27:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=42018552-4e9d-49ea-981a-c4951e07244f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:69:46:6c:31:1a:83:80:d0:d5:71:70:a9:21:
                    87:bd:f1:5a:80:b3:0e:1f:b9:7a:5d:cc:f5:88:93:
                    17:44:37:f6:26:6c:5a:b6:86:f7:df:a7:e7:8e:ad:
                    35:d4:dd:01:47:40:64:a4:40:b8:be:ab:ad:c1:66:
                    22:ee:a5:ec:d4:29:92:54:d9:37:52:a1:07:3f:d7:
                    15:b1:5d:14:d4:59:45:41:04:b1:24:73:ca:1e:28:
                    95:c9:cc:3d:f0:99:88:40:a2:6f:16:74:1b:82:17:
                    ea:fa:fc:98:dd:7e:1e:c8:5c:cf:c4:eb:27:21:5d:
                    49:83:5d:84:87:b7:5d:24:54:47:6f:8f:87:a2:6e:
                    79:dd:63:b8:2a:ee:bb:f2:89:e8:4a:e0:cf:62:ac:
                    ba:2b:84:17:8b:df:91:f1:31:86:46:8c:f2:be:bf:
                    fb:f8:16:4a:60:34:eb:e4:01:7b:2c:b4:70:90:7e:
                    e3:34:27:0b:f3:0f:43:41:b9:1d:62:db:4f:d2:75:
                    2c:45:30:b3:a3:86:e7:7e:4d:b3:09:be:25:61:9b:
                    2d:66:90:56:88:6a:a3:cf:92:4d:e1:74:4d:0d:9a:
                    73:0e:bc:4c:bb:83:6f:ff:3f:bd:2f:b0:21:da:67:
                    ff:a9:87:79:5e:f4:7d:61:3e:85:1a:0b:7f:22:1b:
                    48:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FE:43:AE:41:34:2B:DB:1A:42:7E:D4:F7:DC:41:3A:12:0E:40:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/4a9ab8b7-7957-36fc-9d25-f11f15ac7c73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl

            X509v3 Authority Key Identifier:
                keyid:62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:b3:51:1c:18:8d:66:d0:0e:7d:7c:71:dd:d5:26:c7:0b:11:
         74:91:b7:5f:23:45:d4:f5:55:ca:89:8c:e0:ad:c5:77:32:11:
         dc:ff:93:35:54:2f:de:83:bb:ab:0d:79:10:8a:8f:56:e8:ec:
         b1:8d:61:dc:ad:eb:73:fe:71:fc:b5:73:0b:56:af:35:be:80:
         6d:3d:29:3a:d1:52:67:a0:41:61:71:50:23:2e:5c:00:cc:08:
         a8:91:19:d4:99:f4:60:89:c6:c7:77:7a:e2:8d:15:fd:0a:f5:
         32:49:42:16:2d:a6:b8:76:16:10:b1:45:53:c4:d7:6f:b8:e6:
         6a:70:55:68:17:1f:2b:a0:2f:c8:9b:a3:89:66:a5:de:d9:a5:
         a2:d8:74:5c:0a:13:67:7a:ee:3d:2e:ab:ec:3a:4a:86:78:56:
         d7:ea:1b:97:b8:cc:e2:c7:73:99:22:b1:54:a7:89:e9:f9:95:
         19:b9:33:52:c5:88:d6:7d:75:9f:45:7b:84:4d:e1:f6:cf:85:
         a8:3a:b4:7d:02:30:84:d4:5f:3b:18:72:a1:34:48:da:a4:fc:
         3a:30:32:c9:d4:d6:80:86:ac:ca:39:e8:78:51:ab:2a:e7:3d:
         b4:86:e3:e6:13:56:de:e0:d0:24:0d:9e:f9:09:f0:8d:2f:80:
         db:e1:fb:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEejDAQjVkLEEHMnHYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ2ODNhNTQtZjhhNS00ZDRiLTg4NzgtOGE5ZWU3OGVj
ZTA4MB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk
NDIwMTg1NTItNGU5ZC00OWVhLTk4MWEtYzQ5NTFlMDcyNDRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWlGbDEag4DQ1XFwqSGHvfFagLMOH7l6Xcz1
iJMXRDf2Jmxatob336fnjq011N0BR0BkpEC4vqutwWYi7qXs1CmSVNk3UqEHP9cV
sV0U1FlFQQSxJHPKHiiVycw98JmIQKJvFnQbghfq+vyY3X4eyFzPxOsnIV1Jg12E
h7ddJFRHb4+Hom553WO4Ku678onoSuDPYqy6K4QXi9+R8TGGRozyvr/7+BZKYDTr
5AF7LLRwkH7jNCcL8w9DQbkdYttP0nUsRTCzo4bnfk2zCb4lYZstZpBWiGqjz5JN
4XRNDZpzDrxMu4Nv/z+9L7Ah2mf/qYd5XvR9YT6FGgt/IhtIVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJD+Q65BNCvbGkJ+1PfcQToSDkBLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4
M2E1NC1mOGE1LTRkNGItODg3OC04YTllZTc4ZWNlMDgvNGE5YWI4YjctNzk1Ny0z
NmZjLTlkMjUtZjExZjE1YWM3YzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGQ2ODNhNTQtZjhhNS00ZDRiLTg4
NzgtOGE5ZWU3OGVjZTA4LzBkNjgzYTU0LWY4YTUtNGQ0Yi04ODc4LThhOWVlNzhl
Y2UwOC5jcmwwHwYDVR0jBBgwFoAUYhQJZeW4q2q2o5sGcBnKdCWTjqswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4M2E1NC1mOGE1LTRkNGItODg3OC04YTll
ZTc4ZWNlMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmbeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACKzURwYjWbQDn18cd3VJscLEXSRt18jRdT1VcqJjOCtxXcyEdz/kzVU
L96Du6sNeRCKj1bo7LGNYdyt63P+cfy1cwtWrzW+gG09KTrRUmegQWFxUCMuXADM
CKiRGdSZ9GCJxsd3euKNFf0K9TJJQhYtprh2FhCxRVPE12+45mpwVWgXHyugL8ib
o4lmpd7ZpaLYdFwKE2d67j0uq+w6SoZ4VtfqG5e4zOLHc5kisVSnien5lRm5M1LF
iNZ9dZ9Fe4RN4fbPhag6tH0CMITUXzsYcqE0SNqk/DowMsnU1oCGrMo56HhRqyrn
PbSG4+YTVt7g0CQNnvkJ8I0vgNvh+4k=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:29 2024 by rpki-client on console-ams.rpki-client.org