Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dfc04875-93ee-3d30-adda-ed904d4663ba.roa
File:                     dfc04875-93ee-3d30-adda-ed904d4663ba.roa (raw, json)
Hash identifier:          TYf2TmMWlVlQqxZVAIM0l7+nsjo/mPmz866WjJvDq9s=
Subject key identifier:   19:B7:81:37:C6:05:83:3A:D6:CC:88:6F:99:A0:31:5A:DB:E1:0A:2C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858475EA6166B63BFB483A682E540
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dfc04875-93ee-3d30-adda-ed904d4663ba.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     1239
IP address blocks:        66.78.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:16:6b:63:bf:b4:83:a6:82:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=97d65e56-d8d0-476a-adb6-f435761cdc03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fe:5c:5f:f6:f9:1d:d6:25:25:05:26:ca:b4:
                    62:81:5d:76:75:2f:e4:79:84:d2:c2:ca:72:6c:04:
                    b5:06:1c:0e:ed:a9:c3:f2:12:5e:4b:83:36:66:f0:
                    e9:47:af:0d:1a:69:40:60:78:f1:b3:a4:6a:60:45:
                    e9:00:72:90:32:12:f7:25:ca:c0:80:a8:37:58:c6:
                    a2:b1:82:b2:28:09:38:75:b3:f0:4f:dd:b1:f6:f7:
                    14:d4:36:98:3c:80:61:68:21:d1:a1:66:20:d7:f7:
                    6a:c2:e5:43:dc:25:bd:b8:52:1a:61:22:50:fe:03:
                    63:05:87:34:d9:14:30:19:8c:6a:5e:d0:46:34:ff:
                    cd:bb:1f:52:2f:67:03:dd:ae:2c:fb:c6:32:d8:8d:
                    0d:7c:8e:0a:a1:dd:ac:45:da:1a:18:f6:89:ed:32:
                    ff:13:33:b5:4d:d9:42:7c:ee:d0:37:75:f2:5a:c1:
                    36:52:ff:d8:bc:9e:78:96:57:b2:70:c3:f0:89:63:
                    69:2f:5e:21:8d:b8:91:f0:33:16:b3:4a:12:2c:52:
                    ad:13:17:86:dd:3b:45:00:60:c3:21:11:67:d6:d8:
                    b9:65:6f:59:0e:ae:3d:52:2a:72:9c:24:e1:f5:31:
                    8e:c5:b2:0a:3b:75:8f:7e:3d:4c:40:5b:a3:69:c6:
                    aa:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B7:81:37:C6:05:83:3A:D6:CC:88:6F:99:A0:31:5A:DB:E1:0A:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dfc04875-93ee-3d30-adda-ed904d4663ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.78.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:ea:0a:da:c7:5e:31:35:5d:19:e1:b9:26:aa:1d:1f:46:55:
         99:f9:a8:75:20:d4:07:22:db:0e:e3:2e:a9:b2:c8:29:24:bf:
         34:9e:15:1b:8b:60:72:0f:20:f8:c5:77:f2:3c:9c:25:92:f7:
         28:43:8c:a9:f5:c5:1d:59:29:de:c5:13:02:6b:3c:8c:55:8b:
         05:b2:64:d4:17:92:03:44:f4:c1:2e:a8:85:dc:ff:b3:75:4d:
         1b:f0:64:aa:96:e2:df:90:9d:f8:29:cf:3a:5f:51:49:55:17:
         00:e9:88:01:ea:73:e9:81:80:b8:45:c8:89:ae:fd:d2:9f:7e:
         85:bb:ad:d3:d9:f7:a7:bd:1e:3d:ca:ea:22:28:4b:20:20:88:
         ac:19:95:6b:35:95:f4:da:bc:9d:84:45:44:1a:bd:a9:70:c1:
         fe:09:c0:32:7f:89:11:4a:7a:60:3e:6f:c5:6f:4c:cd:dc:a8:
         77:31:ff:3d:e5:1e:8c:f9:dc:1f:e6:cf:b7:9f:01:9c:58:18:
         b2:79:1e:ea:b7:ed:36:ce:b5:b8:32:52:5a:67:54:1a:aa:0d:
         0b:1f:6d:29:75:e2:4d:a6:eb:11:e7:30:60:6f:e5:6e:8b:1b:
         ad:ae:c5:72:a9:bf:ed:38:b2:11:e7:b2:ce:cd:33:76:0d:d4:
         f7:73:c5:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdephZrY7+0g6aC5UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDkyOTAxMDAzMloXDTI0MTIyODAyMDAzMlowLzEtMCsGA1UEAxMk
OTdkNjVlNTYtZDhkMC00NzZhLWFkYjYtZjQzNTc2MWNkYzAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/5cX/b5HdYlJQUmyrRigV12dS/keYTSwspy
bAS1BhwO7anD8hJeS4M2ZvDpR68NGmlAYHjxs6RqYEXpAHKQMhL3JcrAgKg3WMai
sYKyKAk4dbPwT92x9vcU1DaYPIBhaCHRoWYg1/dqwuVD3CW9uFIaYSJQ/gNjBYc0
2RQwGYxqXtBGNP/Nux9SL2cD3a4s+8Yy2I0NfI4Kod2sRdoaGPaJ7TL/EzO1TdlC
fO7QN3XyWsE2Uv/YvJ54lleycMPwiWNpL14hjbiR8DMWs0oSLFKtExeG3TtFAGDD
IRFn1ti5ZW9ZDq49UipynCTh9TGOxbIKO3WPfj1MQFujacaqkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBm3gTfGBYM61syIb5mgMVrb4QosMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZGZjMDQ4NzUtOTNlZS0z
ZDMwLWFkZGEtZWQ5MDRkNDY2M2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQk47MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMzqCtrHXjE1XRnhuSaqHR9GVZn5qHUg1Aci2w7jLqmyyCkkvzSeFRuL
YHIPIPjFd/I8nCWS9yhDjKn1xR1ZKd7FEwJrPIxViwWyZNQXkgNE9MEuqIXc/7N1
TRvwZKqW4t+QnfgpzzpfUUlVFwDpiAHqc+mBgLhFyImu/dKffoW7rdPZ96e9Hj3K
6iIoSyAgiKwZlWs1lfTavJ2ERUQavalwwf4JwDJ/iRFKemA+b8VvTM3cqHcx/z3l
Hoz53B/mz7efAZxYGLJ5Huq37TbOtbgyUlpnVBqqDQsfbSl14k2m6xHnMGBv5W6L
G62uxXKpv+04shHnss7NM3YN1PdzxeA=
-----END CERTIFICATE-----
Generated at Tue Oct 22 21:19:00 2024 by rpki-client on console-ams.rpki-client.org