Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/c9904f5f-4c5b-3c5e-b2b3-f87d7becd72a.roa
File:                     c9904f5f-4c5b-3c5e-b2b3-f87d7becd72a.roa (raw, json)
Hash identifier:          H/qBW6DY6reFPXTowaopisg/SlFTtxiYMducgL0BCEE=
Subject key identifier:   DC:C2:93:8A:02:D8:B5:5C:79:19:C6:47:22:EA:AF:2A:E9:FF:21:9D
Certificate issuer:       /CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
Certificate serial:       010D0C9F432858459E9368FA51903497A8B79E40
Authority key identifier: 3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/c9904f5f-4c5b-3c5e-b2b3-f87d7becd72a.roa
Signing time:             Sun 21 Apr 2024 13:00:35 +0000
ROA not before:           Sun 21 Apr 2024 13:00:35 +0000
ROA not after:            Sat 20 Jul 2024 13:00:35 +0000
asID:                     394310
IP address blocks:        66.179.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9e:93:68:fa:51:90:34:97:a8:b7:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
        Validity
            Not Before: Apr 21 13:00:35 2024 GMT
            Not After : Jul 20 13:00:35 2024 GMT
        Subject: CN=4d052cb7-115b-4853-ad65-ab92818f5250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a3:99:1a:b8:f8:a4:b4:43:36:50:22:a8:fc:
                    52:4b:3c:36:0f:51:fd:1e:2a:07:1c:fb:39:15:89:
                    2a:4f:fd:67:12:e8:a8:b0:ea:6f:29:0e:92:89:bd:
                    f9:c4:30:05:e6:50:8a:e0:16:11:0d:b7:7f:a0:6f:
                    aa:d5:d2:b3:de:50:c5:c5:1c:a9:ec:9d:83:a7:8a:
                    ab:ca:ad:5c:8d:69:3a:48:7b:ad:8e:77:1d:f3:14:
                    e5:51:b6:23:81:e0:6e:c4:3f:11:33:d4:2f:b0:5a:
                    b6:2b:2f:d6:bb:77:02:bf:25:4e:e2:98:cb:09:f6:
                    e5:bd:37:e7:30:47:61:e1:9b:3b:37:8e:e4:a0:ac:
                    b2:bf:19:2b:65:b9:90:a5:e0:3e:7c:96:c6:d9:8f:
                    27:eb:25:75:78:f8:3a:ea:f2:2e:c8:6b:14:3a:48:
                    0a:60:65:56:3b:9d:c1:fa:44:17:69:ad:41:76:8f:
                    8d:10:99:25:da:d7:5b:16:29:78:51:d2:77:98:f0:
                    74:52:19:00:b4:32:f0:30:ff:39:94:ea:e2:c5:5c:
                    2e:4a:38:d1:5d:06:3c:3f:39:14:de:49:7b:16:19:
                    c8:c9:0f:b1:ba:8a:3b:83:2f:29:05:2a:fc:74:67:
                    ea:f5:b4:3b:82:50:a6:52:0f:d6:b2:fa:3c:67:1f:
                    93:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C2:93:8A:02:D8:B5:5C:79:19:C6:47:22:EA:AF:2A:E9:FF:21:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/c9904f5f-4c5b-3c5e-b2b3-f87d7becd72a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl

            X509v3 Authority Key Identifier:
                keyid:3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d9:f3:92:80:7b:39:d8:3c:fe:3b:f7:c6:71:e8:51:95:9f:
         64:1e:84:5e:46:46:24:1f:23:de:ae:e0:3d:54:14:73:1a:39:
         c6:e6:e3:73:e7:d0:f3:0d:16:a2:d1:5f:c1:3b:02:de:67:d1:
         86:ae:3c:5d:4d:36:4e:ac:d6:cf:5f:c1:58:c4:8c:f7:1d:b6:
         3f:e4:6b:37:62:87:f4:b7:4f:ef:0b:98:36:f6:d1:3d:f1:61:
         da:51:8e:ca:9b:42:aa:c3:c8:c7:26:a9:1f:82:c1:81:1e:61:
         8a:3a:af:f5:ce:f9:b5:0e:6b:6d:0d:d7:49:7a:7a:83:dd:ab:
         12:46:bf:e1:5d:c6:a5:5b:e9:b0:3d:cf:cf:78:30:b3:d5:0d:
         b7:d4:cb:b5:bc:71:8d:85:96:37:bb:b4:cb:30:22:bf:90:e5:
         6a:aa:d8:f3:85:65:e5:11:3f:82:16:91:33:11:61:26:d4:19:
         9e:e0:2d:40:10:2b:81:b6:91:b8:80:ff:df:fe:13:be:e1:29:
         69:6d:34:bc:7b:31:53:08:23:39:01:43:b1:6b:39:83:9c:4b:
         31:06:18:fa:cf:ae:61:ab:a2:e2:92:29:ac:0a:1f:6e:6f:93:
         f3:25:c3:00:a4:6f:cb:f2:af:81:28:2c:9e:b8:17:9c:04:52:
         36:09:65:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWek2j6UZA0l6i3nkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDI5YzM4YmUtZGI1MS00ZDkxLWEzNjEtOTRiYTNiZmQ5
ZTlhMB4XDTI0MDQyMTEzMDAzNVoXDTI0MDcyMDEzMDAzNVowLzEtMCsGA1UEAxMk
NGQwNTJjYjctMTE1Yi00ODUzLWFkNjUtYWI5MjgxOGY1MjUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KOZGrj4pLRDNlAiqPxSSzw2D1H9HioHHPs5
FYkqT/1nEuiosOpvKQ6Sib35xDAF5lCK4BYRDbd/oG+q1dKz3lDFxRyp7J2Dp4qr
yq1cjWk6SHutjncd8xTlUbYjgeBuxD8RM9QvsFq2Ky/Wu3cCvyVO4pjLCfblvTfn
MEdh4Zs7N47koKyyvxkrZbmQpeA+fJbG2Y8n6yV1ePg66vIuyGsUOkgKYGVWO53B
+kQXaa1Bdo+NEJkl2tdbFil4UdJ3mPB0UhkAtDLwMP85lOrixVwuSjjRXQY8PzkU
3kl7FhnIyQ+xuoo7gy8pBSr8dGfq9bQ7glCmUg/Wsvo8Zx+TYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNzCk4oC2LVceRnGRyLqryrp/yGdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80Mjlj
MzhiZS1kYjUxLTRkOTEtYTM2MS05NGJhM2JmZDllOWEvYzk5MDRmNWYtNGM1Yi0z
YzVlLWIyYjMtZjg3ZDdiZWNkNzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDI5YzM4YmUtZGI1MS00ZDkxLWEz
NjEtOTRiYTNiZmQ5ZTlhLzQyOWMzOGJlLWRiNTEtNGQ5MS1hMzYxLTk0YmEzYmZk
OWU5YS5jcmwwHwYDVR0jBBgwFoAUOwreAHVyImja/ScA8cgfi8oFlzwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80MjljMzhiZS1kYjUxLTRkOTEtYTM2MS05NGJh
M2JmZDllOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQrMQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACTZ85KAeznYPP4798Zx6FGVn2QehF5GRiQfI96u4D1UFHMaOcbm43Pn
0PMNFqLRX8E7At5n0YauPF1NNk6s1s9fwVjEjPcdtj/kazdih/S3T+8LmDb20T3x
YdpRjsqbQqrDyMcmqR+CwYEeYYo6r/XO+bUOa20N10l6eoPdqxJGv+FdxqVb6bA9
z894MLPVDbfUy7W8cY2Flje7tMswIr+Q5Wqq2POFZeURP4IWkTMRYSbUGZ7gLUAQ
K4G2kbiA/9/+E77hKWltNLx7MVMIIzkBQ7FrOYOcSzEGGPrPrmGrouKSKawKH25v
k/MlwwCkb8vyr4EoLJ64F5wEUjYJZSI=
-----END CERTIFICATE-----
Generated at Sat May 18 01:55:46 2024 by rpki-client on console-ams.rpki-client.org