Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/61c97edc-5074-3a26-a239-8d1e41ca9dcc.roa
File:                     61c97edc-5074-3a26-a239-8d1e41ca9dcc.roa (raw, json)
Hash identifier:          fN89Nlodv6QRxR+UG8RvZT6cN8YeSmLHT0nR3RHJji8=
Subject key identifier:   4A:20:E9:D4:2E:F9:50:AB:4F:75:CE:37:6B:2E:F1:D2:F5:AD:35:C2
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0B82244F354890665C800
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/61c97edc-5074-3a26-a239-8d1e41ca9dcc.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     21801
IP address blocks:        71.66.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:b8:22:44:f3:54:89:06:65:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=8f74a2d6-1e02-4b7f-ab40-eaaa421aeeb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:80:7e:85:a3:b7:ae:05:b3:0a:81:c7:37:dc:
                    51:11:3c:34:77:2b:cd:3b:9e:03:13:90:bd:ff:83:
                    eb:3c:4f:6b:9c:1e:70:8e:b0:39:75:46:ac:2a:65:
                    90:b1:b9:b6:d6:a3:d1:65:27:ea:53:f8:21:28:61:
                    28:42:2d:70:ca:94:d1:e5:76:68:f7:8a:9b:fe:6c:
                    db:6a:e4:a9:9e:18:7f:16:27:27:15:7a:49:20:62:
                    5c:08:d8:2b:1f:4d:ac:7a:a7:ae:a6:64:78:7d:e7:
                    c3:60:95:db:b9:e1:99:fe:da:ae:e9:a8:ef:c3:c8:
                    5d:4e:9b:0b:5c:04:21:2d:88:ac:f3:e2:c6:76:31:
                    0b:bc:21:01:93:48:69:cf:b9:81:28:d5:ad:d8:ce:
                    3a:bd:25:56:a2:d0:97:22:cb:40:cc:fb:6b:d0:85:
                    c1:72:d5:cf:ae:d2:f4:66:b9:a8:e8:9f:4e:a8:a6:
                    9b:66:96:77:0c:ef:79:65:ce:49:0d:8a:ec:9f:ea:
                    ff:58:8d:1a:b5:dc:89:80:90:85:fc:89:2e:3b:0d:
                    92:74:02:f2:ad:a5:0b:aa:89:cb:23:ee:d4:d2:c8:
                    76:9a:e6:23:a7:29:e8:bd:30:db:e4:1a:00:9b:61:
                    a6:88:84:21:0d:92:b8:8d:89:a2:7c:17:53:f1:93:
                    10:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:20:E9:D4:2E:F9:50:AB:4F:75:CE:37:6B:2E:F1:D2:F5:AD:35:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/61c97edc-5074-3a26-a239-8d1e41ca9dcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.66.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:01:f1:7c:78:f3:4f:9d:4d:2e:a3:a2:1b:70:5e:69:ed:44:
         99:36:a4:fd:5e:6e:0f:38:6d:2f:9b:87:6a:1b:8a:f2:95:17:
         f9:f7:be:0f:14:12:7a:d4:89:cb:e7:d1:6a:30:b7:3a:75:e2:
         49:00:05:9b:f2:2c:c2:c6:df:f3:8f:2d:f3:66:5e:75:d2:34:
         a9:13:ae:af:a5:d7:fa:0f:53:81:6b:f7:90:26:35:5c:f2:23:
         4a:83:cb:50:43:50:db:ae:0d:f6:08:92:9e:7b:2d:96:c1:01:
         62:62:a8:ac:05:5e:0f:6d:6f:d5:cb:7f:96:4f:94:7d:78:01:
         16:2d:a5:99:2f:dd:0e:fb:05:82:d0:5a:84:9f:0b:c8:3d:51:
         31:39:e2:a9:87:05:62:61:41:ba:bf:a6:ac:b2:93:a1:04:f0:
         03:5c:47:46:be:da:13:65:97:59:55:c6:88:ad:4d:f5:d3:35:
         a3:0a:21:ba:91:0d:71:31:03:37:43:0d:84:6e:fa:27:08:32:
         51:f9:8b:a3:86:7b:89:ed:b6:fa:63:26:0c:64:de:fd:c2:87:
         ef:49:90:e4:99:16:fe:41:07:c4:a4:7b:bf:28:9c:4a:ca:fc:
         ce:90:c6:cd:07:fb:43:da:35:7a:2d:5a:15:26:0f:ca:3e:5b:
         66:a6:10:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioLgiRPNUiQZlyAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
OGY3NGEyZDYtMWUwMi00YjdmLWFiNDAtZWFhYTQyMWFlZWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIB+haO3rgWzCoHHN9xRETw0dyvNO54DE5C9
/4PrPE9rnB5wjrA5dUasKmWQsbm21qPRZSfqU/ghKGEoQi1wypTR5XZo94qb/mzb
auSpnhh/FicnFXpJIGJcCNgrH02seqeupmR4fefDYJXbueGZ/tqu6ajvw8hdTpsL
XAQhLYis8+LGdjELvCEBk0hpz7mBKNWt2M46vSVWotCXIstAzPtr0IXBctXPrtL0
Zrmo6J9OqKabZpZ3DO95Zc5JDYrsn+r/WI0atdyJgJCF/IkuOw2SdALyraULqonL
I+7U0sh2muYjpynovTDb5BoAm2GmiIQhDZK4jYmifBdT8ZMQWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEog6dQu+VCrT3XON2su8dL1rTXCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNjFjOTdlZGMtNTA3NC0z
YTI2LWEyMzktOGQxZTQxY2E5ZGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR0KvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADsB8Xx480+dTS6johtwXmntRJk2pP1ebg84bS+bh2obivKVF/n3vg8U
EnrUicvn0Wowtzp14kkABZvyLMLG3/OPLfNmXnXSNKkTrq+l1/oPU4Fr95AmNVzy
I0qDy1BDUNuuDfYIkp57LZbBAWJiqKwFXg9tb9XLf5ZPlH14ARYtpZkv3Q77BYLQ
WoSfC8g9UTE54qmHBWJhQbq/pqyyk6EE8ANcR0a+2hNll1lVxoitTfXTNaMKIbqR
DXExAzdDDYRu+icIMlH5i6OGe4nttvpjJgxk3v3Ch+9JkOSZFv5BB8Ske78onErK
/M6Qxs0H+0PaNXotWhUmD8o+W2amEAo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:11 2024 by rpki-client on console-ams.rpki-client.org