Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/71428917-1150-3057-a18b-55412b2abe5c.roa
File:                     71428917-1150-3057-a18b-55412b2abe5c.roa (raw, json)
Hash identifier:          WPSW/11UH0vcpxsJ4o/VDTHc5DlnVvddSZ3mOJySxDE=
Subject key identifier:   3B:09:13:BB:0E:E3:A8:22:5D:9B:4F:2F:22:5A:CD:8C:22:43:4B:86
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858475EA629171AAD0F6E9596B780
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/71428917-1150-3057-a18b-55412b2abe5c.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     6461
IP address blocks:        66.46.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:29:17:1a:ad:0f:6e:95:96:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=87bb9e88-a1b4-413c-8a3c-7f9f8a06462f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4a:e8:1e:53:65:0f:6d:00:5f:64:f9:6a:87:
                    2e:09:1c:73:1e:ce:b2:92:33:08:de:35:35:2e:19:
                    91:eb:a8:4b:ed:72:9f:3f:69:15:76:d8:e1:1a:f2:
                    d4:88:38:21:fb:cc:2b:83:ad:37:4a:63:f5:38:38:
                    b5:c9:df:3f:0a:4f:d6:37:8d:cc:de:1a:e4:cc:99:
                    e9:12:43:98:42:c7:68:13:60:06:57:49:77:25:40:
                    6c:e4:99:b6:76:65:00:00:36:fa:3b:a2:3f:ec:da:
                    8d:57:bd:3b:d1:86:6f:da:67:b3:8c:d0:06:2b:65:
                    f4:75:fa:3c:5c:a6:72:17:36:da:44:c2:09:a1:c8:
                    42:d6:e6:b9:a4:7e:bc:1c:e6:3a:23:6a:32:17:1e:
                    d2:14:06:26:71:74:2c:95:98:67:a2:b3:bd:62:a2:
                    76:d4:41:e3:f8:ad:cf:af:b8:e8:d5:ac:15:45:99:
                    b6:02:9e:ca:19:94:cd:77:9b:16:24:59:38:99:13:
                    7b:08:03:1b:b0:5d:2f:ae:56:3d:5f:74:60:53:86:
                    f8:f3:5d:75:d0:cd:2f:49:c2:e1:8c:dd:a6:c2:34:
                    ea:b8:be:01:8f:f2:71:04:d1:69:2d:0f:ab:fb:67:
                    19:89:69:b7:c9:50:6c:e5:21:30:67:31:86:31:48:
                    1b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:09:13:BB:0E:E3:A8:22:5D:9B:4F:2F:22:5A:CD:8C:22:43:4B:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/71428917-1150-3057-a18b-55412b2abe5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.46.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:39:4c:a1:78:dd:37:c5:9c:bf:c4:ea:e3:11:a1:cc:f0:3e:
         c8:59:7b:ef:4a:66:40:f4:07:df:82:93:91:74:01:62:73:0e:
         1f:5c:49:6a:88:d1:c1:b5:8b:71:8e:0d:a3:2e:0a:57:33:71:
         ee:ac:d6:00:17:03:a2:cb:ae:4b:9c:ac:db:7a:99:1e:0f:65:
         19:57:08:7f:ca:7c:19:ab:f9:6f:a3:89:90:77:80:14:4a:2b:
         87:db:fe:fc:67:72:94:5d:24:9a:f3:3d:fa:b9:ba:1b:c5:51:
         4e:d4:a9:b5:d1:79:6e:0a:96:53:3b:90:e6:ed:d0:00:03:67:
         9c:b2:5b:9b:bb:ff:e1:52:32:2b:51:44:9c:0b:7e:8b:c1:f1:
         a8:2c:5f:54:11:fe:a3:e2:e4:9e:55:e2:e7:fe:b8:4e:e6:4e:
         aa:d4:67:1b:96:70:29:ca:25:1e:2b:3e:97:bd:0c:25:b5:3a:
         28:61:98:3a:1d:ae:6a:8d:ea:03:31:e6:01:c2:34:8a:66:e3:
         31:72:c4:74:a1:f2:1e:31:f1:88:81:fd:b6:96:2e:ff:80:cc:
         d7:70:f3:50:c2:cb:ea:29:34:4d:04:1e:41:79:dc:e2:c2:76:
         6f:d8:c9:3b:24:61:d5:99:69:ba:a8:a9:f0:08:f2:d1:da:aa:
         4a:df:7b:3c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEdepikXGq0PbpWWt4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI0MDkyOTAxMDAzMloXDTI0MTIyODAyMDAzMlowLzEtMCsGA1UEAxMk
ODdiYjllODgtYTFiNC00MTNjLThhM2MtN2Y5ZjhhMDY0NjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUroHlNlD20AX2T5aocuCRxzHs6ykjMI3jU1
LhmR66hL7XKfP2kVdtjhGvLUiDgh+8wrg603SmP1ODi1yd8/Ck/WN43M3hrkzJnp
EkOYQsdoE2AGV0l3JUBs5Jm2dmUAADb6O6I/7NqNV7070YZv2mezjNAGK2X0dfo8
XKZyFzbaRMIJochC1ua5pH68HOY6I2oyFx7SFAYmcXQslZhnorO9YqJ21EHj+K3P
r7jo1awVRZm2Ap7KGZTNd5sWJFk4mRN7CAMbsF0vrlY9X3RgU4b481110M0vScLh
jN2mwjTquL4Bj/JxBNFpLQ+r+2cZiWm3yVBs5SEwZzGGMUgbhQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDsJE7sO46giXZtPLyJazYwiQ0uGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvNzE0Mjg5MTctMTE1MC0z
MDU3LWExOGItNTU0MTJiMmFiZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQi4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAUTlMoXjdN8Wcv8Tq4xGhzPA+yFl770pmQPQH34KTkXQBYnMOH1xJaojR
wbWLcY4Noy4KVzNx7qzWABcDosuuS5ys23qZHg9lGVcIf8p8Gav5b6OJkHeAFEor
h9v+/GdylF0kmvM9+rm6G8VRTtSptdF5bgqWUzuQ5u3QAANnnLJbm7v/4VIyK1FE
nAt+i8HxqCxfVBH+o+LknlXi5/64TuZOqtRnG5ZwKcolHis+l70MJbU6KGGYOh2u
ao3qAzHmAcI0imbjMXLEdKHyHjHxiIH9tpYu/4DM13DzUMLL6ik0TQQeQXnc4sJ2
b9jJOyRh1Zlpuqip8Ajy0dqqSt97PA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:00 2024 by rpki-client on console-ams.rpki-client.org