Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b46c4cd2-ad50-39e7-9018-9704388f04e1.roa
File:                     b46c4cd2-ad50-39e7-9018-9704388f04e1.roa (raw, json)
Hash identifier:          umGDmA1nuu+PC3XSnYr3stf3I+d4SqjNks+8aK2zVzM=
Subject key identifier:   E6:54:A8:06:81:7D:56:CC:27:28:19:2F:3F:DC:2E:21:22:24:F3:78
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584535E2960E18C5FF3246B41B40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b46c4cd2-ad50-39e7-9018-9704388f04e1.roa
Signing time:             Fri 15 Mar 2024 01:00:26 +0000
ROA not before:           Fri 15 Mar 2024 01:00:26 +0000
ROA not after:            Thu 13 Jun 2024 01:00:26 +0000
asID:                     852
IP address blocks:        66.203.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:e2:96:0e:18:c5:ff:32:46:b4:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 15 01:00:26 2024 GMT
            Not After : Jun 13 01:00:26 2024 GMT
        Subject: CN=3967084a-d3d5-41aa-9063-6f6b1992e761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f2:61:87:36:da:e2:a5:a2:45:dc:40:e8:26:
                    cb:29:42:64:c8:05:3a:63:55:fa:a0:c0:ad:0c:22:
                    fb:25:f6:42:1b:f4:3f:24:f9:d6:7e:a6:1f:28:f1:
                    2c:64:0c:b1:a1:c0:b8:e1:a5:f5:44:62:15:4f:0b:
                    d2:e0:b5:7c:28:a5:32:04:fe:4a:61:a7:1e:3a:bc:
                    02:bd:c4:2a:f4:1d:4f:13:4d:88:60:9d:ec:c5:22:
                    e9:ad:20:61:fe:19:28:c0:24:fb:77:21:7d:f2:1b:
                    9e:74:a1:d1:27:cb:18:e2:7b:5c:f1:1f:ee:42:b0:
                    dd:32:03:9a:e6:a1:e1:a3:56:6a:47:ac:1e:96:1b:
                    06:69:ea:64:b8:a6:ad:5c:e5:93:2e:18:86:cf:d1:
                    88:bf:41:5f:56:ac:a0:df:21:0f:b1:19:4d:c5:f6:
                    b1:0a:9f:ba:8b:85:74:ad:e0:a5:dc:e3:88:f7:ae:
                    c7:40:10:da:40:45:42:cd:1b:05:46:8c:8f:5d:5d:
                    18:8d:5d:96:e3:7a:26:02:65:ca:b8:5f:10:0f:27:
                    96:d8:27:5c:f2:fd:39:12:26:4d:e9:e9:b9:b0:cf:
                    08:ab:80:d6:d0:56:ca:f0:59:e9:58:91:25:21:01:
                    a4:c7:9e:8b:8b:20:ab:a5:c1:46:b5:b3:1d:df:80:
                    91:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:54:A8:06:81:7D:56:CC:27:28:19:2F:3F:DC:2E:21:22:24:F3:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b46c4cd2-ad50-39e7-9018-9704388f04e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.203.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:76:5e:56:7c:8b:e4:68:cd:a1:59:73:cb:37:99:e8:2f:4c:
         73:f6:5d:c5:03:e4:ef:0f:e0:0d:d2:38:26:9f:46:6e:c2:db:
         05:b9:21:ef:25:1d:81:60:1f:76:2a:4b:28:80:e1:0a:5e:36:
         a8:63:bb:a7:ac:85:f8:db:68:bb:31:6d:45:47:21:db:4e:a6:
         61:ca:61:0c:d8:a4:0b:45:cc:62:c7:5b:ec:03:52:7c:1c:e2:
         f0:a9:69:ac:46:8d:a9:8c:b9:46:40:4f:20:cc:33:b2:b9:61:
         a0:ac:1f:2a:0a:de:d9:bf:9a:3f:85:d9:e5:2e:61:eb:33:87:
         b1:f0:19:1d:35:1a:4b:68:32:8c:89:b4:4d:cd:e9:03:bf:ba:
         7c:f6:8e:6b:dc:0b:0a:15:75:1c:80:19:ae:ec:70:67:99:55:
         52:7b:ce:2f:c1:63:ac:dd:61:46:d4:bc:f6:c8:48:3e:d2:d1:
         50:02:c4:57:ea:aa:27:f2:50:9d:74:30:8e:37:6d:e3:0e:75:
         0f:2c:9c:4f:32:fc:e7:ae:7f:39:3b:cf:67:cf:4b:c2:1f:dd:
         3e:f9:7f:df:61:58:1a:f8:e4:7e:2b:93:1d:ad:7e:9a:01:27:
         e5:85:fa:92:db:d8:13:1f:16:7c:73:a9:31:62:b6:88:c2:1e:
         e1:86:2f:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU14pYOGMX/Mka0G0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MDMxNTAxMDAyNloXDTI0MDYxMzAxMDAyNlowLzEtMCsGA1UEAxMk
Mzk2NzA4NGEtZDNkNS00MWFhLTkwNjMtNmY2YjE5OTJlNzYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPJhhzba4qWiRdxA6CbLKUJkyAU6Y1X6oMCt
DCL7JfZCG/Q/JPnWfqYfKPEsZAyxocC44aX1RGIVTwvS4LV8KKUyBP5KYaceOrwC
vcQq9B1PE02IYJ3sxSLprSBh/hkowCT7dyF98huedKHRJ8sY4ntc8R/uQrDdMgOa
5qHho1ZqR6welhsGaepkuKatXOWTLhiGz9GIv0FfVqyg3yEPsRlNxfaxCp+6i4V0
reCl3OOI967HQBDaQEVCzRsFRoyPXV0YjV2W43omAmXKuF8QDyeW2Cdc8v05EiZN
6em5sM8Iq4DW0FbK8FnpWJElIQGkx56LiyCrpcFGtbMd34CRsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOZUqAaBfVbMJygZLz/cLiEiJPN4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYjQ2YzRjZDItYWQ1MC0z
OWU3LTkwMTgtOTcwNDM4OGYwNGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQsvPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABR2XlZ8i+RozaFZc8s3megvTHP2XcUD5O8P4A3SOCafRm7C2wW5Ie8l
HYFgH3YqSyiA4QpeNqhju6eshfjbaLsxbUVHIdtOpmHKYQzYpAtFzGLHW+wDUnwc
4vCpaaxGjamMuUZATyDMM7K5YaCsHyoK3tm/mj+F2eUuYeszh7HwGR01GktoMoyJ
tE3N6QO/unz2jmvcCwoVdRyAGa7scGeZVVJ7zi/BY6zdYUbUvPbISD7S0VACxFfq
qifyUJ10MI43beMOdQ8snE8y/Oeufzk7z2fPS8If3T75f99hWBr45H4rkx2tfpoB
J+WF+pLb2BMfFnxzqTFitojCHuGGL5g=
-----END CERTIFICATE-----
Generated at Sat May 18 16:11:01 2024 by rpki-client on console-ams.rpki-client.org