Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/867fd398-dc75-3cc9-980b-1b9e8ddec7b5.roa
File:                     867fd398-dc75-3cc9-980b-1b9e8ddec7b5.roa (raw, json)
Hash identifier:          0IGKXsOmQS5V8CsgY3gV4CMvTDdmFxob4jJwtQlbZx0=
Subject key identifier:   B1:17:10:06:61:CA:24:8A:10:F5:62:38:21:8C:8F:64:08:9A:1C:14
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858475A763F43E45F95556FBE8200
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/867fd398-dc75-3cc9-980b-1b9e8ddec7b5.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     19092
IP address blocks:        66.62.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:3f:43:e4:5f:95:55:6f:be:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=98dcebf7-f5b5-4b89-be3f-1398bbb9500a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:91:24:a0:27:81:7c:39:a1:51:e0:77:9c:b9:
                    bc:1b:19:66:6d:fb:ea:7f:f3:ea:5f:5b:c7:a0:3c:
                    e8:a4:f6:2e:2d:35:4d:c6:c8:12:6c:80:c0:d5:8d:
                    93:9c:ae:3d:cc:53:1b:b7:1a:f2:35:12:e9:c1:7a:
                    31:f1:f8:9d:b8:f8:82:5b:3b:0f:c8:55:d3:03:ff:
                    2d:b8:7f:f2:ed:56:12:69:56:12:0d:cf:f2:83:66:
                    3c:72:98:1a:80:4a:44:0e:e5:85:24:89:d2:58:5b:
                    02:7f:9a:11:3e:32:68:5a:7a:ee:94:42:19:8b:6a:
                    23:59:50:31:b7:88:b4:75:91:76:f2:fe:74:1e:00:
                    e8:d4:35:55:42:a1:04:5e:90:ca:d2:b0:66:70:27:
                    52:67:02:40:b2:27:29:2f:c6:d0:48:0b:45:6d:a5:
                    c8:57:d0:a2:ef:ca:a6:56:b1:4a:49:71:72:c8:60:
                    2d:15:27:20:b7:ea:8d:15:47:3e:28:9c:9a:1a:fd:
                    80:21:2c:94:0e:54:66:86:cb:10:fc:96:3f:3c:7a:
                    8d:97:37:42:a4:70:2d:40:a4:d0:a1:7c:39:38:e4:
                    ee:01:ae:84:86:df:dd:53:4f:5b:31:d6:70:77:79:
                    4b:fd:e5:13:bb:b8:1a:c2:97:a0:90:0c:df:29:19:
                    30:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:17:10:06:61:CA:24:8A:10:F5:62:38:21:8C:8F:64:08:9A:1C:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/867fd398-dc75-3cc9-980b-1b9e8ddec7b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.62.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:d2:41:e1:fa:71:04:7a:07:38:a1:a4:32:27:22:9e:b7:82:
         c7:db:8a:a9:1e:b6:c6:42:d7:23:c1:a0:32:fe:97:0b:fb:cf:
         d9:1d:b0:5f:bf:f5:d0:0a:88:cd:a4:eb:fc:86:76:44:d6:89:
         f3:1e:03:2f:f5:8e:4f:54:43:d7:9b:e8:c0:6b:cc:f1:83:72:
         47:89:02:e6:50:a1:db:8a:3b:48:66:be:06:77:b5:4a:24:53:
         b0:7c:88:24:5e:04:a7:b0:f7:79:71:ef:b9:72:d0:92:a4:09:
         4e:56:3f:dd:d9:5c:f3:5e:27:39:fa:73:99:3c:6f:c2:6c:9e:
         df:0b:be:07:dc:b4:01:03:22:31:fa:0f:d7:a0:1c:46:1d:0d:
         b3:1c:a9:72:42:2e:f6:68:5f:48:bf:1f:73:11:97:1e:7e:20:
         c5:ce:79:8b:4c:89:14:63:00:98:39:4a:e9:28:02:bf:13:da:
         84:d8:ce:90:00:dc:cc:32:a8:dd:14:ff:98:45:7f:1b:34:e1:
         f7:04:57:73:7c:9d:2e:d7:60:f9:67:eb:05:e6:d5:e6:17:b2:
         43:b6:c8:19:a5:6f:e4:c6:0f:26:87:74:d9:d5:09:0b:27:e4:
         e6:26:89:59:95:ee:89:02:cb:81:42:6c:a9:9b:cd:69:b6:8c:
         85:1f:11:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdadj9D5F+VVW++ggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI0MDkyNzEzMDA0MVoXDTI0MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk
OThkY2ViZjctZjViNS00Yjg5LWJlM2YtMTM5OGJiYjk1MDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpEkoCeBfDmhUeB3nLm8Gxlmbfvqf/PqX1vH
oDzopPYuLTVNxsgSbIDA1Y2TnK49zFMbtxryNRLpwXox8fiduPiCWzsPyFXTA/8t
uH/y7VYSaVYSDc/yg2Y8cpgagEpEDuWFJInSWFsCf5oRPjJoWnrulEIZi2ojWVAx
t4i0dZF28v50HgDo1DVVQqEEXpDK0rBmcCdSZwJAsicpL8bQSAtFbaXIV9Ci78qm
VrFKSXFyyGAtFScgt+qNFUc+KJyaGv2AISyUDlRmhssQ/JY/PHqNlzdCpHAtQKTQ
oXw5OOTuAa6Eht/dU09bMdZwd3lL/eUTu7gawpegkAzfKRkw4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLEXEAZhyiSKEPViOCGMj2QImhwUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvODY3ZmQzOTgtZGM3NS0z
Y2M5LTk4MGItMWI5ZThkZGVjN2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQj6AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGDSQeH6cQR6BzihpDInIp63gsfbiqketsZC1yPBoDL+lwv7z9kdsF+/
9dAKiM2k6/yGdkTWifMeAy/1jk9UQ9eb6MBrzPGDckeJAuZQoduKO0hmvgZ3tUok
U7B8iCReBKew93lx77ly0JKkCU5WP93ZXPNeJzn6c5k8b8Jsnt8LvgfctAEDIjH6
D9egHEYdDbMcqXJCLvZoX0i/H3MRlx5+IMXOeYtMiRRjAJg5SukoAr8T2oTYzpAA
3MwyqN0U/5hFfxs04fcEV3N8nS7XYPln6wXm1eYXskO2yBmlb+TGDyaHdNnVCQsn
5OYmiVmV7okCy4FCbKmbzWm2jIUfEZE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:57 2024 by rpki-client on console-fra.rpki-client.org