Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/400e676d-5cc7-3ba6-9927-178cc82769f3.roa
File:                     400e676d-5cc7-3ba6-9927-178cc82769f3.roa (raw, json)
Hash identifier:          PpGC7Q9Np6CpkPm0wK9Ch2h+LfPjEmsKg00W57Bk98I=
Subject key identifier:   D4:B1:65:33:90:F4:4B:6A:21:37:90:90:2B:58:A9:35:2B:B4:8E:35
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328583831300EAF3B80FDEBC04C9400
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/400e676d-5cc7-3ba6-9927-178cc82769f3.roa
Signing time:             Mon 07 Dec 2020 05:00:00 +0000
ROA not before:           Mon 07 Dec 2020 05:00:00 +0000
ROA not after:            Mon 30 Nov 2026 05:00:00 +0000
asID:                     12271
IP address blocks:        66.108.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:31:30:0e:af:3b:80:fd:eb:c0:4c:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec  7 05:00:00 2020 GMT
            Not After : Nov 30 05:00:00 2026 GMT
        Subject: CN=76f60ad7-0f9f-4b4a-8924-5ae4a1ab5f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:f7:3a:32:5a:3b:f3:6e:3e:ca:69:dd:af:
                    b7:98:c6:c2:8a:04:5b:bc:5c:b8:51:03:76:81:f2:
                    45:cd:1b:12:02:4d:c1:1f:b5:08:b2:7e:f4:21:b6:
                    a8:8d:71:2a:e8:b5:22:a0:65:4f:e9:2f:0e:f5:dc:
                    18:b1:a5:df:86:78:d4:e4:89:bb:f8:97:27:e3:1f:
                    00:22:4f:85:f1:da:e2:03:14:c1:f9:32:47:97:d9:
                    2d:5f:6e:39:7c:27:e2:7d:dc:67:e6:0b:e7:bb:83:
                    39:d6:1a:7b:36:4b:dc:02:67:e6:3f:3c:e9:5d:84:
                    fb:39:75:f5:36:ec:3f:4a:28:9f:85:8d:bd:3f:9b:
                    57:a0:f1:0f:b3:dd:e4:67:16:00:b9:26:74:f1:c1:
                    93:fa:3e:4f:01:d6:f8:2c:b4:2b:67:9c:26:ef:a9:
                    5e:98:10:b0:28:f8:f2:e3:ff:27:17:bc:e2:9b:a7:
                    f9:e5:5f:be:c6:70:61:67:df:9a:8c:b9:9d:b0:f7:
                    7a:1b:fc:2d:63:25:1e:cd:4c:72:61:2f:62:6d:ef:
                    0f:93:78:d9:ce:d6:ca:7e:11:24:73:0a:42:c4:3c:
                    43:70:35:39:cf:1c:20:6f:7a:cc:69:09:cb:2f:06:
                    ad:99:5e:7d:2d:c5:ea:42:65:29:fb:8c:bd:d4:37:
                    c8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B1:65:33:90:F4:4B:6A:21:37:90:90:2B:58:A9:35:2B:B4:8E:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/400e676d-5cc7-3ba6-9927-178cc82769f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.108.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:11:4f:bd:b1:78:0a:90:ed:24:bb:e8:28:a0:b5:be:ce:9c:
         b3:6e:bb:bf:50:50:16:af:45:b8:ae:3c:6a:f0:fd:b2:be:80:
         ad:cb:fd:ae:51:d4:ba:36:dc:ac:bd:aa:a4:6b:d2:12:7d:1d:
         e6:6d:39:05:57:3a:40:fb:22:77:9e:2d:18:0e:df:10:e6:08:
         e6:a3:e9:7f:07:e9:b4:78:73:3c:32:ee:87:59:e6:cc:e5:0e:
         87:fd:f5:43:5e:d3:15:1c:cd:e0:26:cb:e3:11:23:aa:f5:17:
         48:38:d7:50:cf:3c:a8:5b:94:e9:47:24:9d:76:90:16:11:d4:
         f7:76:21:5f:40:84:0e:2f:4b:3e:75:9b:22:07:dd:47:9b:53:
         1a:26:67:46:4d:da:03:23:93:cd:f8:1f:a7:2c:13:03:c4:8c:
         91:69:5e:a5:7f:fb:98:c9:4e:87:ed:76:8e:ca:13:9a:55:9d:
         e4:6a:64:47:b7:9d:fc:f5:99:0f:78:6c:d3:f1:71:80:50:b3:
         f4:19:65:bf:33:49:99:95:b0:76:22:4e:08:78:fd:79:bc:10:
         d0:79:58:96:c1:54:e6:d5:47:c9:a1:f3:0e:a6:18:ad:6d:4e:
         0d:a3:bb:67:33:a2:0c:4e:53:ee:f0:1f:38:11:97:38:74:3d:
         38:6c:3a:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDgxMA6vO4D968BMlAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTIwMTIwNzA1MDAwMFoXDTI2MTEzMDA1MDAwMFowLzEtMCsGA1UEAxMk
NzZmNjBhZDctMGY5Zi00YjRhLTg5MjQtNWFlNGExYWI1ZjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0H3OjJaO/NuPspp3a+3mMbCigRbvFy4UQN2
gfJFzRsSAk3BH7UIsn70IbaojXEq6LUioGVP6S8O9dwYsaXfhnjU5Im7+Jcn4x8A
Ik+F8driAxTB+TJHl9ktX245fCfifdxn5gvnu4M51hp7NkvcAmfmPzzpXYT7OXX1
Nuw/SiifhY29P5tXoPEPs93kZxYAuSZ08cGT+j5PAdb4LLQrZ5wm76lemBCwKPjy
4/8nF7zim6f55V++xnBhZ9+ajLmdsPd6G/wtYyUezUxyYS9ibe8Pk3jZztbKfhEk
cwpCxDxDcDU5zxwgb3rMaQnLLwatmV59LcXqQmUp+4y91DfIbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNSxZTOQ9EtqITeQkCtYqTUrtI41MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNDAwZTY3NmQtNWNjNy0z
YmE2LTk5MjctMTc4Y2M4Mjc2OWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQmwAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGERT72xeAqQ7SS76Cigtb7OnLNuu79QUBavRbiuPGrw/bK+gK3L/a5R
1Lo23Ky9qqRr0hJ9HeZtOQVXOkD7IneeLRgO3xDmCOaj6X8H6bR4czwy7odZ5szl
Dof99UNe0xUczeAmy+MRI6r1F0g411DPPKhblOlHJJ12kBYR1Pd2IV9AhA4vSz51
myIH3UebUxomZ0ZN2gMjk834H6csEwPEjJFpXqV/+5jJToftdo7KE5pVneRqZEe3
nfz1mQ94bNPxcYBQs/QZZb8zSZmVsHYiTgh4/Xm8ENB5WJbBVObVR8mh8w6mGK1t
Tg2ju2czogxOU+7wHzgRlzh0PThsOkQ=
-----END CERTIFICATE-----
Generated at Thu May 2 12:36:46 2024 by rpki-client on console-ams.rpki-client.org