Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d8781f8b-bea3-3cce-88ff-84fa5117d863.roa
File:                     d8781f8b-bea3-3cce-88ff-84fa5117d863.roa (raw, json)
Hash identifier:          VCBIsJQG2axDF5c8wnMj1yMnKtnpw9jfpSj3DmzvG0g=
Subject key identifier:   63:0B:B5:4C:F3:B1:E6:24:F2:AD:83:35:58:CB:3B:6C:FC:9C:8C:24
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F4328584589A31877C8456BA31E2EAB60
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d8781f8b-bea3-3cce-88ff-84fa5117d863.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     16509
IP address blocks:        66.178.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:18:77:c8:45:6b:a3:1e:2e:ab:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=1758f098-2818-497c-9a9d-a0f1dd0362a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8f:37:c8:1a:69:cd:34:dd:b7:9a:27:a9:73:
                    97:b0:42:10:87:7d:7d:6a:ee:da:5c:e8:ad:39:e4:
                    7c:04:05:05:03:c0:2c:5a:91:d4:2b:7c:e4:f0:57:
                    0c:df:63:f9:21:da:33:85:5f:1c:2b:4f:9b:82:28:
                    65:5a:49:17:48:ce:97:3c:40:9a:4c:53:eb:94:e8:
                    81:0e:c6:06:08:98:39:80:70:8d:c1:fd:b3:ef:24:
                    22:1b:35:75:6f:c4:05:f3:7f:44:5f:ea:70:21:ec:
                    07:9a:90:3a:98:7f:14:af:60:7c:ff:1b:51:6b:48:
                    1e:24:6c:c1:81:58:17:9d:8a:e3:09:e2:ab:e8:67:
                    3e:c1:49:2a:bc:fe:89:cf:12:d6:b1:01:3e:7d:59:
                    0e:83:49:ca:a4:a8:5d:2a:e8:5c:46:a6:5e:45:6d:
                    0c:db:bf:00:76:f7:c6:fd:9d:65:7f:f1:24:0a:4b:
                    b2:d1:4a:3e:22:91:84:0a:41:08:77:95:ce:33:48:
                    a3:dc:34:d5:03:68:a6:0c:72:e0:c4:87:7e:f1:01:
                    2d:df:ab:83:53:72:90:90:5a:38:b7:6c:1a:9e:be:
                    7d:cc:8c:0f:db:ea:c5:15:af:8f:60:7a:5f:1f:ee:
                    0a:49:3b:53:b7:3d:12:b5:28:38:73:0c:a6:1c:ff:
                    a2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0B:B5:4C:F3:B1:E6:24:F2:AD:83:35:58:CB:3B:6C:FC:9C:8C:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d8781f8b-bea3-3cce-88ff-84fa5117d863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:22:de:d4:39:14:be:6f:24:4d:b3:10:b2:87:13:e7:67:c0:
         51:d7:e1:c6:eb:89:2b:58:3e:a4:a2:9f:3e:18:25:e7:37:a7:
         43:47:ac:8e:41:25:de:12:fa:c3:ed:ce:c5:1b:45:ab:1f:e9:
         47:f7:00:43:14:b6:66:cb:46:26:44:ae:20:66:37:9e:a1:0c:
         29:52:fb:b1:4c:88:02:45:be:42:41:dd:82:ad:cb:d9:84:4a:
         d5:72:4a:d7:9c:ed:16:6d:55:7c:60:24:9e:b2:b1:27:42:c9:
         e6:12:86:79:9c:ea:6f:76:39:11:4b:44:ae:9c:cb:cc:95:86:
         f3:06:89:96:f7:02:29:81:dc:a7:e9:13:fa:c6:d9:33:5d:15:
         2c:ce:b4:35:b7:6c:2e:4e:21:f6:34:bc:a4:06:73:58:fb:08:
         fb:80:c9:8e:56:da:23:f3:7b:52:1c:7a:0a:ef:fd:e9:fd:e2:
         f8:56:2c:0d:6c:4d:4e:be:f8:38:a0:c1:33:8d:9a:4d:62:d3:
         fe:b7:fd:3a:10:f7:cf:f1:a2:a9:91:1e:ff:d3:c4:45:4d:00:
         25:32:d0:31:af:f1:5e:38:cf:b9:0f:07:dc:12:cb:99:96:9d:
         f6:da:f7:9d:fe:d1:c0:e3:ab:46:9d:10:26:80:33:37:84:f9:
         4e:88:f8:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWJoxh3yEVrox4uq2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDE3MGZjYTItNWY3NC00NDA4LThkYzktNTk3YmEwMzFj
ZmUyMB4XDTI0MDQxNDAxMDAyNFoXDTI0MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk
MTc1OGYwOTgtMjgxOC00OTdjLTlhOWQtYTBmMWRkMDM2MmEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI83yBppzTTdt5onqXOXsEIQh319au7aXOit
OeR8BAUFA8AsWpHUK3zk8FcM32P5IdozhV8cK0+bgihlWkkXSM6XPECaTFPrlOiB
DsYGCJg5gHCNwf2z7yQiGzV1b8QF839EX+pwIewHmpA6mH8Ur2B8/xtRa0geJGzB
gVgXnYrjCeKr6Gc+wUkqvP6JzxLWsQE+fVkOg0nKpKhdKuhcRqZeRW0M278AdvfG
/Z1lf/EkCkuy0Uo+IpGECkEId5XOM0ij3DTVA2imDHLgxId+8QEt36uDU3KQkFo4
t2wanr59zIwP2+rFFa+PYHpfH+4KSTtTtz0StSg4cwymHP+ibwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGMLtUzzseYk8q2DNVjLO2z8nIwkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcw
ZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdiYTAzMWNmZTIvZDg3ODFmOGItYmVhMy0z
Y2NlLTg4ZmYtODRmYTUxMTdkODYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDE3MGZjYTItNWY3NC00NDA4LThk
YzktNTk3YmEwMzFjZmUyL2QxNzBmY2EyLTVmNzQtNDQwOC04ZGM5LTU5N2JhMDMx
Y2ZlMi5jcmwwHwYDVR0jBBgwFoAU/yi6m0JreiTZpKu3kU29s28/Yp4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcwZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdi
YTAzMWNmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrKGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANYi3tQ5FL5vJE2zELKHE+dnwFHX4cbriStYPqSinz4YJec3p0NHrI5B
Jd4S+sPtzsUbRasf6Uf3AEMUtmbLRiZEriBmN56hDClS+7FMiAJFvkJB3YKty9mE
StVyStec7RZtVXxgJJ6ysSdCyeYShnmc6m92ORFLRK6cy8yVhvMGiZb3AimB3Kfp
E/rG2TNdFSzOtDW3bC5OIfY0vKQGc1j7CPuAyY5W2iPze1Icegrv/en94vhWLA1s
TU6++DigwTONmk1i0/63/ToQ98/xoqmRHv/TxEVNACUy0DGv8V44z7kPB9wSy5mW
nfba953+0cDjq0adECaAMzeE+U6I+ME=
-----END CERTIFICATE-----
Generated at Thu May 2 14:59:32 2024 by rpki-client on console-ams.rpki-client.org