Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/7b0b6429-7145-32fb-8c0d-208298348d3f.roa
File:                     7b0b6429-7145-32fb-8c0d-208298348d3f.roa (raw, json)
Hash identifier:          27fsBIXygcjFzMH78Xk16FXlrVM65OrNjl3ox0eqI60=
Subject key identifier:   10:A3:CE:EA:48:2D:E0:99:B4:D4:48:C9:8D:73:B3:A7:C0:4A:A4:87
Certificate issuer:       /CN=c63341d1-6cda-433e-9220-8eb860d0f1d5
Certificate serial:       010D0C9F43285847E094C0BA4A6A16A6D29E5520
Authority key identifier: 30:8E:63:48:1C:3A:A3:59:5B:A4:2F:67:BC:4B:84:13:B1:61:B0:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/7b0b6429-7145-32fb-8c0d-208298348d3f.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     14618
IP address blocks:        66.45.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/c63341d1-6cda-433e-9220-8eb860d0f1d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/c63341d1-6cda-433e-9220-8eb860d0f1d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:c0:ba:4a:6a:16:a6:d2:9e:55:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c63341d1-6cda-433e-9220-8eb860d0f1d5
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=a7daeffc-dd88-4aab-a95c-609b63ee8b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3f:6c:7a:52:d3:c5:8b:c8:26:73:66:17:d1:
                    2a:eb:ca:9e:04:e7:0f:f1:18:7a:9b:c4:20:f3:b9:
                    c5:4c:fc:d3:f6:2e:8f:93:d2:c0:22:4a:67:db:29:
                    c4:90:ae:5b:0f:4a:8b:ea:8c:90:5e:8a:2e:84:ab:
                    b9:a2:24:66:0a:be:35:71:f9:09:ac:77:31:0f:37:
                    4d:f8:eb:c7:a8:d6:c5:64:31:c6:cb:48:60:1d:0d:
                    34:2a:b4:7f:91:a6:f9:77:0b:9f:e0:6d:1b:bd:2b:
                    f8:21:b4:c9:da:56:42:76:1f:03:b6:17:32:0c:5c:
                    40:40:ea:99:fa:3e:5a:ed:da:ae:f8:7f:a0:e6:95:
                    9c:c7:62:24:77:6f:b1:cb:9b:62:82:7d:3f:c0:95:
                    6c:1a:1d:6b:d2:a2:38:b2:4b:30:17:e4:52:19:b5:
                    3b:d8:e6:77:74:78:47:78:92:ac:82:06:95:20:17:
                    68:da:24:e8:3a:ef:c0:a5:04:12:42:dd:06:40:b1:
                    ba:b5:c4:9d:6c:f4:a4:76:03:cf:15:fe:7f:04:23:
                    70:bd:72:61:8b:57:49:54:2f:c1:98:04:2a:90:b4:
                    69:e1:14:39:f8:5f:b2:cb:0c:5e:e5:6a:9b:ea:6f:
                    2a:0c:78:a7:6a:94:84:11:1c:7b:fc:20:2d:31:bf:
                    f7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A3:CE:EA:48:2D:E0:99:B4:D4:48:C9:8D:73:B3:A7:C0:4A:A4:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/7b0b6429-7145-32fb-8c0d-208298348d3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/c63341d1-6cda-433e-9220-8eb860d0f1d5.crl

            X509v3 Authority Key Identifier:
                keyid:30:8E:63:48:1C:3A:A3:59:5B:A4:2F:67:BC:4B:84:13:B1:61:B0:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:94:a8:4d:25:7b:47:c6:b1:7c:18:c1:f2:41:b4:15:b2:76:
         2c:30:f7:a6:ad:f0:d7:b4:55:7f:27:40:7d:9e:7c:e6:9d:d8:
         d6:48:48:34:1c:38:2b:3c:bc:b1:81:40:53:7a:8c:e3:b5:6b:
         91:59:54:09:d7:ef:45:99:ac:4c:a4:79:76:fd:d1:3f:57:a8:
         40:f7:1c:79:cd:dd:64:e6:97:e1:58:d1:5d:a4:53:66:63:0a:
         be:47:a7:34:70:4d:eb:09:ec:34:76:f9:41:db:28:93:73:73:
         01:8c:d8:b2:c4:ac:0a:55:b6:ce:32:07:3f:60:3f:1d:e5:d2:
         d7:71:78:1c:24:93:c9:08:7b:16:6f:77:4b:08:ec:7c:7d:dc:
         28:7b:a4:9f:53:ae:91:a8:64:74:b1:f0:32:69:24:0f:06:8a:
         a0:23:09:52:e1:52:8f:dc:db:e6:34:2f:a8:36:e4:ce:7e:14:
         a0:48:00:34:c5:f4:b5:16:ca:59:80:7e:f9:c0:e9:1e:d8:61:
         71:00:41:d1:72:da:5d:e8:27:34:5e:9f:48:38:f2:80:09:1d:
         65:e2:a3:ea:ca:24:45:02:f7:55:53:be:a1:59:3d:38:4c:05:
         e2:c1:40:46:2b:71:6f:6f:b1:84:0b:d8:7c:3e:ea:7e:ef:ba:
         fa:81:b2:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglMC6SmoWptKeVSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzYzMzQxZDEtNmNkYS00MzNlLTkyMjAtOGViODYwZDBm
MWQ1MB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk
YTdkYWVmZmMtZGQ4OC00YWFiLWE5NWMtNjA5YjYzZWU4YjcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT9selLTxYvIJnNmF9Eq68qeBOcP8Rh6m8Qg
87nFTPzT9i6Pk9LAIkpn2ynEkK5bD0qL6oyQXoouhKu5oiRmCr41cfkJrHcxDzdN
+OvHqNbFZDHGy0hgHQ00KrR/kab5dwuf4G0bvSv4IbTJ2lZCdh8DthcyDFxAQOqZ
+j5a7dqu+H+g5pWcx2Ikd2+xy5tign0/wJVsGh1r0qI4skswF+RSGbU72OZ3dHhH
eJKsggaVIBdo2iToOu/ApQQSQt0GQLG6tcSdbPSkdgPPFf5/BCNwvXJhi1dJVC/B
mAQqkLRp4RQ5+F+yywxe5Wqb6m8qDHinapSEERx7/CAtMb/3KwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBCjzupILeCZtNRIyY1zs6fASqSHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jNjMz
NDFkMS02Y2RhLTQzM2UtOTIyMC04ZWI4NjBkMGYxZDUvN2IwYjY0MjktNzE0NS0z
MmZiLThjMGQtMjA4Mjk4MzQ4ZDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYzYzMzQxZDEtNmNkYS00MzNlLTky
MjAtOGViODYwZDBmMWQ1L2M2MzM0MWQxLTZjZGEtNDMzZS05MjIwLThlYjg2MGQw
ZjFkNS5jcmwwHwYDVR0jBBgwFoAUMI5jSBw6o1lbpC9nvEuEE7FhsHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jNjMzNDFkMS02Y2RhLTQzM2UtOTIyMC04ZWI4
NjBkMGYxZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQi1KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGSUqE0le0fGsXwYwfJBtBWydiww96at8Ne0VX8nQH2efOad2NZISDQc
OCs8vLGBQFN6jOO1a5FZVAnX70WZrEykeXb90T9XqED3HHnN3WTml+FY0V2kU2Zj
Cr5HpzRwTesJ7DR2+UHbKJNzcwGM2LLErApVts4yBz9gPx3l0tdxeBwkk8kIexZv
d0sI7Hx93Ch7pJ9TrpGoZHSx8DJpJA8GiqAjCVLhUo/c2+Y0L6g25M5+FKBIADTF
9LUWylmAfvnA6R7YYXEAQdFy2l3oJzRen0g48oAJHWXio+rKJEUC91VTvqFZPThM
BeLBQEYrcW9vsYQL2Hw+6n7vuvqBsrQ=
-----END CERTIFICATE-----
Generated at Sun Nov 24 19:48:12 2024 by rpki-client on console-fra.rpki-client.org