Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/05cc3a83-1c1a-3115-804a-5cd36d8fc4c4.roa
File:                     05cc3a83-1c1a-3115-804a-5cd36d8fc4c4.roa (raw, json)
Hash identifier:          vFWQU4b65Sqplklc/ygDA4WmvtqsxeFYzZdUsU6K0m0=
Subject key identifier:   86:0A:C9:52:D0:80:9B:28:DD:56:B7:22:A7:0A:EF:0D:C8:5C:33:E6
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F432858457A488807AA3848927F9B32A0
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/05cc3a83-1c1a-3115-804a-5cd36d8fc4c4.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     6453
IP address blocks:        66.110.40.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:88:07:aa:38:48:92:7f:9b:32:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=4f9727b6-389e-425d-bfc2-f20cc1eaea7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8b:4f:0e:b6:e2:31:44:52:0b:a3:30:6c:79:
                    80:5c:72:2b:09:98:9e:fe:75:a8:1d:46:d5:d2:71:
                    2d:b2:aa:ad:00:31:64:f0:ae:f1:9c:08:a4:5b:71:
                    34:b8:ef:02:0f:44:68:75:ae:fe:8e:0b:af:b7:71:
                    d7:66:18:c4:54:b6:9a:19:9e:fa:07:64:31:32:ef:
                    45:3a:20:7f:ff:29:0e:50:9d:0a:8d:19:45:4f:49:
                    b1:10:47:11:3d:a7:63:00:2f:ea:50:eb:73:05:f8:
                    e6:f9:c3:9e:c6:af:9f:56:7e:c2:84:43:3e:68:3e:
                    24:18:69:d9:9e:be:0f:51:11:a5:40:2b:5a:5d:93:
                    62:f9:64:af:8d:eb:23:0f:26:2e:7f:6a:c5:74:c9:
                    1b:ae:18:bf:76:9f:3e:6e:ac:cb:6c:dd:27:6d:44:
                    6a:99:3f:7a:d3:ef:f7:52:c7:29:a5:17:be:44:6e:
                    f4:d5:2c:5c:64:65:93:8c:ba:46:fe:eb:f1:7d:a5:
                    09:fc:96:b5:64:f3:5a:64:22:ac:c3:90:0f:24:4d:
                    9e:92:17:48:3b:13:3f:c2:59:65:c8:b2:42:13:54:
                    f9:79:78:fc:f9:70:28:d3:de:b1:17:03:1c:bd:f2:
                    5f:a1:85:a5:56:cb:92:e9:b3:fb:9d:fe:94:b3:8b:
                    62:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0A:C9:52:D0:80:9B:28:DD:56:B7:22:A7:0A:EF:0D:C8:5C:33:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/05cc3a83-1c1a-3115-804a-5cd36d8fc4c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.110.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:fb:2e:85:79:9c:f0:87:02:64:4a:91:44:63:e7:47:a7:6f:
         b5:49:a8:b0:31:87:0f:e4:5b:cf:cc:be:b6:5f:bd:95:ce:64:
         cb:e7:65:ed:9d:51:d6:d2:70:f4:31:28:5c:d3:ab:33:fd:ad:
         06:5c:f9:fe:44:a9:11:c8:d5:36:64:d7:81:21:6a:a4:42:62:
         67:eb:71:66:3e:ba:b5:5f:16:d0:bf:32:a7:ad:a5:47:9e:fc:
         0e:d9:84:29:be:e1:d9:bc:f4:8d:3a:ac:c2:8d:de:6c:e3:3a:
         b0:73:45:e7:54:14:79:a5:64:87:bf:7a:72:6d:d6:ee:d2:32:
         a7:7a:87:f0:7b:fa:d6:cb:9c:6b:2c:a1:fd:94:05:f0:2b:62:
         25:86:45:b9:ba:e3:f1:51:b6:2e:a3:e3:c6:9b:0b:bf:ba:88:
         0a:60:45:01:7b:c0:05:d2:b8:ea:c3:13:9f:6d:8a:af:b5:93:
         9b:01:bc:ff:4e:2b:4e:0b:c3:7a:7a:04:0e:e7:01:14:fc:9f:
         cd:c4:af:5b:43:8f:b3:a3:8d:9e:0f:46:0e:c1:fb:39:ff:50:
         39:45:5b:c1:77:48:dd:4d:6a:a6:b2:42:62:e7:8d:8e:5c:c1:
         0c:82:5a:32:84:3b:80:35:ec:2b:d6:dc:b5:89:32:7b:03:c1:
         dd:a5:38:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV6SIgHqjhIkn+bMqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm
NzU4MB4XDTI0MDQwODEzMDAzNFoXDTI0MDcwNzEzMDAzNFowLzEtMCsGA1UEAxMk
NGY5NzI3YjYtMzg5ZS00MjVkLWJmYzItZjIwY2MxZWFlYTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtotPDrbiMURSC6MwbHmAXHIrCZie/nWoHUbV
0nEtsqqtADFk8K7xnAikW3E0uO8CD0Roda7+jguvt3HXZhjEVLaaGZ76B2QxMu9F
OiB//ykOUJ0KjRlFT0mxEEcRPadjAC/qUOtzBfjm+cOexq+fVn7ChEM+aD4kGGnZ
nr4PURGlQCtaXZNi+WSvjesjDyYuf2rFdMkbrhi/dp8+bqzLbN0nbURqmT960+/3
UscppRe+RG701SxcZGWTjLpG/uvxfaUJ/Ja1ZPNaZCKsw5APJE2ekhdIOxM/wlll
yLJCE1T5eXj8+XAo096xFwMcvfJfoYWlVsuS6bP7nf6Us4ti6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIYKyVLQgJso3Va3IqcK7w3IXDPmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2
MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvMDVjYzNhODMtMWMxYS0z
MTE1LTgwNGEtNWNkMzZkOGZjNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk
ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1
Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz
ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQm4oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAj7LoV5nPCHAmRKkURj50enb7VJqLAxhw/kW8/MvrZfvZXOZMvnZe2d
UdbScPQxKFzTqzP9rQZc+f5EqRHI1TZk14EhaqRCYmfrcWY+urVfFtC/MqetpUee
/A7ZhCm+4dm89I06rMKN3mzjOrBzRedUFHmlZIe/enJt1u7SMqd6h/B7+tbLnGss
of2UBfArYiWGRbm64/FRti6j48abC7+6iApgRQF7wAXSuOrDE59tiq+1k5sBvP9O
K04Lw3p6BA7nART8n83Er1tDj7OjjZ4PRg7B+zn/UDlFW8F3SN1NaqayQmLnjY5c
wQyCWjKEO4A17CvW3LWJMnsDwd2lOJA=
-----END CERTIFICATE-----
Generated at Wed May 15 15:06:11 2024 by rpki-client on console-fra.rpki-client.org