Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/126e6211-b10e-34d5-84e6-013c27a19202.roa
File:                     126e6211-b10e-34d5-84e6-013c27a19202.roa (raw, json)
Hash identifier:          8SB6UjKZ3DA39fUgNA8omLa/0R1J3y5CU7BCMCLmeUw=
Subject key identifier:   6F:18:CA:50:E8:5B:2D:5F:EC:7A:0C:9D:F0:B2:0D:69:DE:51:27:53
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F4328584762D65A98621B894859B4995C
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/126e6211-b10e-34d5-84e6-013c27a19202.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     23115
IP address blocks:        66.161.156.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:5a:98:62:1b:89:48:59:b4:99:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=05582a23-a133-4875-a3f5-7af1e2499d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ae:91:27:b4:e2:53:2f:8b:82:35:ae:c1:b1:
                    3f:78:7e:54:60:f5:42:e6:1f:c7:f8:f1:45:a5:e7:
                    9b:13:da:d1:4f:9a:18:a9:ff:cb:7e:66:ae:6a:8a:
                    84:51:e9:6b:ad:16:76:52:4c:ad:bf:34:ec:29:f1:
                    66:e4:20:2f:28:c6:45:77:98:5b:42:c3:bc:37:c7:
                    83:25:a5:42:7a:05:ff:e3:02:b1:b1:fe:9c:9d:03:
                    7f:d4:bd:22:f0:9c:5c:1c:c2:ff:0a:c8:26:03:22:
                    bd:b3:2d:bf:37:82:57:cb:b5:b3:3a:fb:7d:df:15:
                    d4:c1:3c:02:6a:52:98:c6:b0:1a:e0:67:2b:d2:8a:
                    27:f6:c5:84:53:b4:4f:cd:47:95:75:e1:d2:07:8c:
                    08:f8:e1:c2:d5:f6:6e:d1:1d:9f:6d:1d:5d:74:41:
                    b1:b6:d3:7f:b4:03:09:5f:ad:e1:87:84:2a:10:7d:
                    dc:df:f9:ee:27:06:c4:49:92:50:9c:2f:b1:69:a2:
                    3d:7b:27:17:91:7a:32:3d:3a:ce:f0:37:b6:bb:98:
                    2d:9c:82:06:d1:f9:08:53:83:17:1e:c8:d8:f3:ce:
                    0d:31:76:29:ef:e0:f1:6b:b9:1e:c3:54:ec:65:b8:
                    f2:03:e8:82:02:83:26:f0:eb:5d:99:01:5b:16:8c:
                    2c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:18:CA:50:E8:5B:2D:5F:EC:7A:0C:9D:F0:B2:0D:69:DE:51:27:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/126e6211-b10e-34d5-84e6-013c27a19202.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.161.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:81:b3:46:8c:cb:88:7f:10:19:a5:e8:f8:78:2e:71:ef:3d:
         3c:55:5a:f5:23:61:9a:4a:a0:c4:3a:63:86:af:2a:9a:45:94:
         43:07:17:45:1c:b3:62:91:92:6e:23:53:6f:d2:9a:6a:4d:c9:
         a5:0a:b2:bb:50:63:d8:d5:3b:70:7e:64:16:8a:67:af:c5:68:
         3a:5d:8b:29:d4:c2:19:e7:1e:35:4b:90:83:93:0e:7f:49:79:
         6e:7a:e6:b7:d6:38:5e:74:7a:d2:66:d2:c3:bc:04:aa:94:24:
         b0:1c:0d:3f:7f:b7:69:ae:93:0b:00:43:77:d6:c9:d3:20:ab:
         c8:b3:b0:b5:e3:bc:da:56:1f:3e:f9:b1:d0:60:85:c8:3d:51:
         33:e9:43:f3:ff:3d:73:ee:20:d0:3a:e6:e6:0e:bd:2d:df:8b:
         80:36:a6:fa:08:cd:35:fe:6b:ca:bb:3d:7e:5e:27:57:c0:00:
         57:bf:6f:4c:a1:fd:0b:d5:0c:a6:27:a0:b3:4e:14:75:e4:59:
         72:44:cf:b7:d3:4d:2a:2d:ce:85:97:15:25:c1:85:5c:30:3b:
         a3:82:6e:25:66:c3:0e:42:c1:2a:d7:6c:a3:4e:99:64:64:57:
         94:16:80:73:49:0a:f2:db:eb:63:b8:09:26:f0:b5:4f:d5:1c:
         a4:00:d7:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdi1lqYYhuJSFm0mVwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQ2MzkzNjYtYzA0NC00NTZlLWI4YzgtMGRlMDRhNTQz
YTBjMB4XDTI0MDkzMDEzMDA0MloXDTI0MTIyOTE0MDA0MlowLzEtMCsGA1UEAxMk
MDU1ODJhMjMtYTEzMy00ODc1LWEzZjUtN2FmMWUyNDk5ZDgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q6RJ7TiUy+LgjWuwbE/eH5UYPVC5h/H+PFF
peebE9rRT5oYqf/LfmauaoqEUelrrRZ2UkytvzTsKfFm5CAvKMZFd5hbQsO8N8eD
JaVCegX/4wKxsf6cnQN/1L0i8JxcHML/CsgmAyK9sy2/N4JXy7WzOvt93xXUwTwC
alKYxrAa4Gcr0oon9sWEU7RPzUeVdeHSB4wI+OHC1fZu0R2fbR1ddEGxttN/tAMJ
X63hh4QqEH3c3/nuJwbESZJQnC+xaaI9eycXkXoyPTrO8De2u5gtnIIG0fkIU4MX
HsjY884NMXYp7+Dxa7kew1TsZbjyA+iCAoMm8OtdmQFbFowsQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG8YylDoWy1f7HoMnfCyDWneUSdTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYz
OTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1NDNhMGMvMTI2ZTYyMTEtYjEwZS0z
NGQ1LTg0ZTYtMDEzYzI3YTE5MjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWQ2MzkzNjYtYzA0NC00NTZlLWI4
YzgtMGRlMDRhNTQzYTBjLzFkNjM5MzY2LWMwNDQtNDU2ZS1iOGM4LTBkZTA0YTU0
M2EwYy5jcmwwHwYDVR0jBBgwFoAU/DVXyQ49tRkFhaSn5xDpZWoEZ4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUw
NGE1NDNhMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQqGcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGqBs0aMy4h/EBml6Ph4LnHvPTxVWvUjYZpKoMQ6Y4avKppFlEMHF0Uc
s2KRkm4jU2/SmmpNyaUKsrtQY9jVO3B+ZBaKZ6/FaDpdiynUwhnnHjVLkIOTDn9J
eW565rfWOF50etJm0sO8BKqUJLAcDT9/t2mukwsAQ3fWydMgq8izsLXjvNpWHz75
sdBghcg9UTPpQ/P/PXPuINA65uYOvS3fi4A2pvoIzTX+a8q7PX5eJ1fAAFe/b0yh
/QvVDKYnoLNOFHXkWXJEz7fTTSotzoWXFSXBhVwwO6OCbiVmww5CwSrXbKNOmWRk
V5QWgHNJCvLb62O4CSbwtU/VHKQA13o=
-----END CERTIFICATE-----
Generated at Sun Nov 24 18:29:04 2024 by rpki-client on console-ams.rpki-client.org