Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/867fd398-dc75-3cc9-980b-1b9e8ddec7b5.roa
File:                     867fd398-dc75-3cc9-980b-1b9e8ddec7b5.roa (raw, json)
Hash identifier:          XHlW91jTI3vKTehgUtjMglfrqL3wwf6z0hhW13nv4Jo=
Subject key identifier:   0F:2F:31:BE:B4:AB:B2:C6:9B:72:9D:6E:99:DB:D9:F5:75:20:3D:52
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858459A633C514E8718CEB3007AD0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/867fd398-dc75-3cc9-980b-1b9e8ddec7b5.roa
Signing time:             Sat 20 Apr 2024 01:00:26 +0000
ROA not before:           Sat 20 Apr 2024 01:00:26 +0000
ROA not after:            Fri 19 Jul 2024 01:00:26 +0000
asID:                     19092
IP address blocks:        66.62.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:63:3c:51:4e:87:18:ce:b3:00:7a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr 20 01:00:26 2024 GMT
            Not After : Jul 19 01:00:26 2024 GMT
        Subject: CN=675453b9-f7e2-417e-9a26-6b02781355fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d7:22:8e:2e:d9:7d:f3:b1:5a:33:8f:ea:ba:
                    1c:81:45:e4:65:82:d5:07:3a:ce:33:60:63:17:be:
                    e3:46:27:82:b2:e4:26:55:78:0d:aa:ef:f0:00:05:
                    54:69:1a:2c:1b:97:f1:f5:d0:ad:f0:6d:d1:c5:5f:
                    e2:a3:2b:87:49:28:3e:ff:e8:f9:7d:2d:05:19:92:
                    1c:6a:70:65:90:e7:15:df:7e:1e:99:fa:2f:fb:96:
                    c9:b7:cf:b9:2d:8b:8b:a0:e7:44:c6:0d:6a:86:b9:
                    8b:25:62:d7:e0:78:1d:08:55:18:32:01:0d:73:a1:
                    22:31:12:f1:0a:a8:da:7b:9a:c2:e1:9b:03:98:0e:
                    4a:b9:5e:66:ae:34:64:37:5f:af:70:22:b2:ab:9c:
                    95:43:14:57:a2:0d:b1:8f:73:28:19:27:83:ce:9f:
                    e3:4f:0a:9e:d8:86:97:64:7c:cc:50:ea:9b:4d:b2:
                    a6:a3:d1:c8:a8:11:ae:40:ef:d9:71:67:92:e9:c4:
                    8e:18:79:96:b3:fe:23:1c:d7:5b:82:62:bb:18:f0:
                    0b:a2:85:45:2c:00:7f:1f:0a:ce:d7:74:89:4e:66:
                    3f:da:7a:9c:1b:84:e9:0b:18:ca:d6:7d:3f:27:89:
                    b5:95:5f:da:9e:9f:4b:f0:75:a5:50:c3:d4:8c:7d:
                    44:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2F:31:BE:B4:AB:B2:C6:9B:72:9D:6E:99:DB:D9:F5:75:20:3D:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/867fd398-dc75-3cc9-980b-1b9e8ddec7b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.62.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:08:4e:cb:dc:da:a0:b4:62:5b:1c:f2:9a:a1:fa:79:3a:bc:
         e6:ca:a7:d6:bd:21:31:a6:96:67:98:af:3d:98:b1:49:a6:64:
         d4:22:67:87:e9:20:f1:5b:dd:a5:fb:60:5f:f1:48:ab:38:5b:
         52:4f:d3:58:93:40:e9:79:be:03:80:0c:87:1b:1d:df:9a:be:
         c6:6d:21:f5:71:18:f1:c7:b3:f0:ef:b0:8b:98:9d:0d:29:10:
         da:78:26:61:16:f9:94:32:b8:63:6c:6d:62:a0:7b:02:6b:6e:
         5e:24:25:10:ea:12:26:eb:d7:8b:6a:ba:c4:3a:e6:5b:eb:7f:
         ae:62:e3:48:e6:41:c9:4e:7b:e3:ed:58:6e:9b:6a:12:98:c5:
         c3:e3:9c:d7:f1:96:d1:f0:d3:02:60:25:87:e4:09:ef:42:93:
         31:eb:ec:b3:e1:1d:28:3d:85:9d:f3:18:a7:c1:e9:62:46:59:
         ad:6b:b5:b4:0e:20:22:55:47:00:e1:e8:2f:0f:73:22:61:79:
         dd:00:35:17:8f:6e:96:c1:39:ed:c3:c6:43:42:e4:d0:2e:8f:
         3b:20:52:67:2a:fa:36:6d:f6:c1:34:81:ac:8d:74:59:a2:f0:
         d8:80:cc:4a:8b:04:06:19:7a:8f:03:1c:5c:be:f5:a2:76:a0:
         52:f4:cb:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWaYzxRTocYzrMAetAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI0MDQyMDAxMDAyNloXDTI0MDcxOTAxMDAyNlowLzEtMCsGA1UEAxMk
Njc1NDUzYjktZjdlMi00MTdlLTlhMjYtNmIwMjc4MTM1NWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9ciji7ZffOxWjOP6rocgUXkZYLVBzrOM2Bj
F77jRieCsuQmVXgNqu/wAAVUaRosG5fx9dCt8G3RxV/ioyuHSSg+/+j5fS0FGZIc
anBlkOcV334emfov+5bJt8+5LYuLoOdExg1qhrmLJWLX4HgdCFUYMgENc6EiMRLx
Cqjae5rC4ZsDmA5KuV5mrjRkN1+vcCKyq5yVQxRXog2xj3MoGSeDzp/jTwqe2IaX
ZHzMUOqbTbKmo9HIqBGuQO/ZcWeS6cSOGHmWs/4jHNdbgmK7GPALooVFLAB/HwrO
13SJTmY/2nqcG4TpCxjK1n0/J4m1lV/anp9L8HWlUMPUjH1EXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA8vMb60q7LGm3Kdbpnb2fV1ID1SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvODY3ZmQzOTgtZGM3NS0z
Y2M5LTk4MGItMWI5ZThkZGVjN2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQj6AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFUITsvc2qC0Ylsc8pqh+nk6vObKp9a9ITGmlmeYrz2YsUmmZNQiZ4fp
IPFb3aX7YF/xSKs4W1JP01iTQOl5vgOADIcbHd+avsZtIfVxGPHHs/DvsIuYnQ0p
ENp4JmEW+ZQyuGNsbWKgewJrbl4kJRDqEibr14tqusQ65lvrf65i40jmQclOe+Pt
WG6bahKYxcPjnNfxltHw0wJgJYfkCe9CkzHr7LPhHSg9hZ3zGKfB6WJGWa1rtbQO
ICJVRwDh6C8PcyJhed0ANRePbpbBOe3DxkNC5NAujzsgUmcq+jZt9sE0gayNdFmi
8NiAzEqLBAYZeo8DHFy+9aJ2oFL0y7I=
-----END CERTIFICATE-----
Generated at Mon May 20 17:25:29 2024 by rpki-client on console-ams.rpki-client.org