Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/cfe1da32-8410-369b-8311-ea32b3bd8657.roa
File:                     cfe1da32-8410-369b-8311-ea32b3bd8657.roa (raw, json)
Hash identifier:          qRHAFaiO1ORNE0dk9kJJ64Wy0DkSB5hSPV0lU3SMIbA=
Subject key identifier:   20:92:A6:83:4B:8B:B0:0E:21:B9:0B:47:81:A0:A3:71:A5:2B:AF:92
Certificate issuer:       /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial:       010D0C9F432858450EEAD1AC3B7094E58574D200
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/cfe1da32-8410-369b-8311-ea32b3bd8657.roa
Signing time:             Fri 01 Mar 2024 02:00:27 +0000
ROA not before:           Fri 01 Mar 2024 02:00:27 +0000
ROA not after:            Thu 30 May 2024 01:00:27 +0000
asID:                     559
IP address blocks:        66.180.190.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:ea:d1:ac:3b:70:94:e5:85:74:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
        Validity
            Not Before: Mar  1 02:00:27 2024 GMT
            Not After : May 30 01:00:27 2024 GMT
        Subject: CN=140c03b7-2451-4f4c-a157-8a6761568501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:97:14:dc:ea:f4:98:99:8c:01:24:66:bb:62:
                    e7:bb:62:fd:69:28:b2:3f:33:fa:dd:b9:09:15:8d:
                    e1:33:48:d0:6c:bd:cd:df:33:d7:1f:7b:ff:82:f8:
                    0d:7f:ca:e0:6b:ad:76:bc:93:81:58:03:c7:05:f5:
                    92:03:2c:6c:5f:36:ef:b2:31:12:fd:92:73:5d:44:
                    13:9e:66:1f:64:73:93:00:e7:4b:5f:c3:58:df:54:
                    ef:a5:73:1d:83:09:2e:f9:6d:fe:1d:38:19:60:6d:
                    48:4d:7c:14:d7:55:0f:76:97:20:f6:f8:64:b5:c7:
                    3a:9e:26:d1:4c:57:70:71:43:f8:d6:bb:17:c4:b5:
                    bc:47:40:34:5f:cf:c0:ee:09:d6:ad:0d:c4:16:b1:
                    51:a8:b7:4c:5f:8f:d3:da:e8:65:1e:32:2c:7c:5e:
                    72:89:16:95:cd:61:14:05:4a:64:aa:b1:31:e6:22:
                    e0:2b:64:d0:76:11:ab:14:71:5e:8e:7e:a7:27:69:
                    e6:9e:22:42:6f:97:69:ed:eb:97:c6:73:f2:df:33:
                    ac:04:0d:23:f7:64:62:ed:57:f2:1c:50:84:67:9d:
                    7e:29:0c:10:69:03:ce:e7:a3:da:33:82:22:4f:c9:
                    5d:17:1d:de:1b:2a:5f:b4:72:b8:2b:07:04:7f:c5:
                    e3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:92:A6:83:4B:8B:B0:0E:21:B9:0B:47:81:A0:A3:71:A5:2B:AF:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/cfe1da32-8410-369b-8311-ea32b3bd8657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl

            X509v3 Authority Key Identifier:
                keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.180.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:3a:1a:05:08:7c:93:c7:a5:15:1f:32:cc:0e:c2:6f:ab:46:
         ad:d4:b9:12:c4:27:b9:34:58:a7:16:d6:2e:f6:d6:8d:c2:6b:
         ba:fb:4f:f4:3f:33:ca:bf:e6:61:46:f8:84:c6:41:f8:28:13:
         56:1f:6d:e4:ed:f7:80:7d:7b:e8:27:2b:4e:74:06:c5:58:25:
         c2:fb:4a:66:59:04:83:35:51:d1:3e:b8:a5:76:e8:f1:d8:70:
         a4:ef:1a:75:05:a0:bf:f3:a1:a9:01:18:87:0c:4d:20:8a:4d:
         e4:54:80:95:96:e0:b0:69:06:df:47:f4:6d:40:a9:bd:61:5b:
         f5:81:c3:64:9d:32:50:73:ae:ee:07:3d:65:fc:f2:76:eb:b0:
         84:45:3c:e2:c2:ce:d8:49:ee:53:2d:f5:db:08:1d:49:49:ef:
         ec:ac:9f:9d:aa:84:50:a0:00:6a:99:35:50:9e:ca:38:81:0b:
         81:7c:1a:78:6c:0b:d2:c7:4f:86:2d:9f:2d:fa:7e:82:eb:df:
         53:26:0e:e7:bb:e2:71:6c:9b:88:dd:e8:ad:b4:d8:5e:aa:16:
         f1:e2:1e:54:a2:7e:4b:8e:aa:fc:53:34:90:f0:65:f1:c1:bc:
         f9:d4:93:68:02:6d:84:eb:e9:f5:ba:f8:05:f9:89:04:b3:76:
         af:9d:32:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUO6tGsO3CU5YV00gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGJmYzE2ZmUtYmYwYS00ZjNhLWE2NWUtMjE3ZDhmOGMz
ZWNkMB4XDTI0MDMwMTAyMDAyN1oXDTI0MDUzMDAxMDAyN1owLzEtMCsGA1UEAxMk
MTQwYzAzYjctMjQ1MS00ZjRjLWExNTctOGE2NzYxNTY4NTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5cU3Or0mJmMASRmu2Lnu2L9aSiyPzP63bkJ
FY3hM0jQbL3N3zPXH3v/gvgNf8rga612vJOBWAPHBfWSAyxsXzbvsjES/ZJzXUQT
nmYfZHOTAOdLX8NY31TvpXMdgwku+W3+HTgZYG1ITXwU11UPdpcg9vhktcc6nibR
TFdwcUP41rsXxLW8R0A0X8/A7gnWrQ3EFrFRqLdMX4/T2uhlHjIsfF5yiRaVzWEU
BUpkqrEx5iLgK2TQdhGrFHFejn6nJ2nmniJCb5dp7euXxnPy3zOsBA0j92Ri7Vfy
HFCEZ51+KQwQaQPO56PaM4IiT8ldFx3eGypftHK4KwcEf8XjbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCCSpoNLi7AOIbkLR4Ggo3GlK6+SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YmZj
MTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdkOGY4YzNlY2QvY2ZlMWRhMzItODQxMC0z
NjliLTgzMTEtZWEzMmIzYmQ4NjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGJmYzE2ZmUtYmYwYS00ZjNhLWE2
NWUtMjE3ZDhmOGMzZWNkLzhiZmMxNmZlLWJmMGEtNGYzYS1hNjVlLTIxN2Q4Zjhj
M2VjZC5jcmwwHwYDVR0jBBgwFoAUl/yFHXLGc9xg3OTz+hLE+ivzRnAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YmZjMTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdk
OGY4YzNlY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQrS+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD06GgUIfJPHpRUfMswOwm+rRq3UuRLEJ7k0WKcW1i721o3Ca7r7T/Q/
M8q/5mFG+ITGQfgoE1YfbeTt94B9e+gnK050BsVYJcL7SmZZBIM1UdE+uKV26PHY
cKTvGnUFoL/zoakBGIcMTSCKTeRUgJWW4LBpBt9H9G1Aqb1hW/WBw2SdMlBzru4H
PWX88nbrsIRFPOLCzthJ7lMt9dsIHUlJ7+ysn52qhFCgAGqZNVCeyjiBC4F8Gnhs
C9LHT4Ytny36foLr31MmDue74nFsm4jd6K202F6qFvHiHlSifkuOqvxTNJDwZfHB
vPnUk2gCbYTr6fW6+AX5iQSzdq+dMio=
-----END CERTIFICATE-----
Generated at Mon May 6 12:45:50 2024 by rpki-client on console-ams.rpki-client.org