Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5a4f6c8b-ca35-3056-98c3-f88b0b1b631f.roa
File:                     5a4f6c8b-ca35-3056-98c3-f88b0b1b631f.roa (raw, json)
Hash identifier:          ZIX9nYgJYcULYM/sYLSZmGVFHOUeucvIBtGfPF20DvE=
Subject key identifier:   F7:EE:00:D2:63:9D:9E:C0:94:80:C4:82:EA:F4:A3:EC:1E:AA:8E:D1
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F432858457D131DEEC39AAAC00162F800
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5a4f6c8b-ca35-3056-98c3-f88b0b1b631f.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        66.22.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:1d:ee:c3:9a:aa:c0:01:62:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=214c2ec3-7ae0-4125-ba25-8a800b33f665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a7:ce:6a:3b:7b:ab:d6:ac:f4:a3:40:95:02:
                    17:5c:39:3b:12:42:57:f3:00:2e:46:c2:29:d2:b4:
                    bb:b4:68:33:56:d9:2a:04:48:9d:9e:97:09:c3:72:
                    4c:58:d4:8d:f9:21:86:de:47:6a:96:52:e1:70:78:
                    e4:59:a3:f1:89:dd:aa:5d:65:e2:b7:09:f9:db:31:
                    c1:8e:1b:6d:29:81:7f:01:91:32:7c:4a:9e:56:6c:
                    44:fd:1b:87:09:62:44:ba:0b:94:37:75:0d:86:75:
                    cd:1a:2c:ba:e3:f4:fd:b5:fd:a8:94:79:79:46:5c:
                    ab:2d:2a:b4:b0:50:ee:5f:b5:67:3f:8f:79:41:76:
                    38:c2:d3:d0:36:10:76:3c:d3:8c:52:76:6b:a9:4e:
                    86:fb:38:f2:4f:69:de:be:59:39:56:6c:09:53:5f:
                    ad:b8:98:7f:b6:e1:b9:48:87:b5:a9:5a:ce:53:5d:
                    a4:1b:b8:fe:b5:42:e6:20:5a:29:65:eb:3c:12:60:
                    9b:59:16:77:11:2a:a9:33:3e:23:fe:27:0b:69:25:
                    4b:f6:db:5d:ec:b6:e8:98:33:13:d9:fd:a7:7f:a4:
                    9d:12:00:48:22:3c:9d:bb:92:b2:ea:39:df:e7:12:
                    9e:8f:f0:39:84:f5:19:35:64:bd:34:2a:85:10:e6:
                    1e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EE:00:D2:63:9D:9E:C0:94:80:C4:82:EA:F4:A3:EC:1E:AA:8E:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5a4f6c8b-ca35-3056-98c3-f88b0b1b631f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.22.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:b4:2b:c3:1f:6e:25:5b:52:4e:42:36:0c:86:e1:af:17:ae:
         5c:c1:0d:5c:26:a0:19:19:d8:e3:eb:b9:bd:ca:fc:2f:fa:87:
         45:13:4a:f8:ef:c6:2b:7d:bc:2c:f0:69:d5:cd:ae:14:2a:f8:
         36:32:4d:27:fc:b0:3b:db:ca:0c:90:5b:55:7c:b7:a1:36:c0:
         34:bd:77:1b:a7:31:c2:e9:5c:a8:a1:b3:fa:dd:5f:8a:3f:cd:
         75:28:dd:c4:2b:18:cc:6a:f9:ba:f9:94:a7:78:22:8f:42:9e:
         85:a9:b1:7c:c1:20:d6:f6:74:da:12:58:53:73:4e:04:3b:aa:
         19:67:94:b4:3c:da:20:03:e1:12:86:a3:5c:c9:b8:0f:71:d4:
         01:be:72:25:7e:9a:5b:d7:2a:ad:64:f1:99:c5:6f:b8:9a:38:
         6e:65:58:bf:9d:f4:56:16:13:9f:90:9c:5d:02:73:ee:5b:80:
         ec:09:c8:7a:21:8e:43:c5:d1:c1:02:a5:f5:6c:8c:33:23:39:
         6a:4d:96:42:95:69:86:26:30:0f:aa:04:79:25:60:25:71:e4:
         36:18:6f:99:39:d7:ca:41:61:40:55:f0:6d:ea:5e:51:3e:5f:
         e4:74:1c:e4:af:27:ab:f6:fc:3a:a7:58:4e:db:36:66:ff:05:
         72:dd:e5:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV9Ex3uw5qqwAFi+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3
MGE0MB4XDTI0MDQwOTEzMDAzNFoXDTI0MDcwODEzMDAzNFowLzEtMCsGA1UEAxMk
MjE0YzJlYzMtN2FlMC00MTI1LWJhMjUtOGE4MDBiMzNmNjY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKfOajt7q9as9KNAlQIXXDk7EkJX8wAuRsIp
0rS7tGgzVtkqBEidnpcJw3JMWNSN+SGG3kdqllLhcHjkWaPxid2qXWXitwn52zHB
jhttKYF/AZEyfEqeVmxE/RuHCWJEuguUN3UNhnXNGiy64/T9tf2olHl5RlyrLSq0
sFDuX7VnP495QXY4wtPQNhB2PNOMUnZrqU6G+zjyT2nevlk5VmwJU1+tuJh/tuG5
SIe1qVrOU12kG7j+tULmIFopZes8EmCbWRZ3ESqpMz4j/icLaSVL9ttd7LbomDMT
2f2nf6SdEgBIIjydu5Ky6jnf5xKej/A5hPUZNWS9NCqFEOYe4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPfuANJjnZ7AlIDEgur0o+weqo7RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi
NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvNWE0ZjZjOGItY2EzNS0z
MDU2LTk4YzMtZjg4YjBiMWI2MzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0
YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5
NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl
M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQha+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACC0K8MfbiVbUk5CNgyG4a8XrlzBDVwmoBkZ2OPrub3K/C/6h0UTSvjv
xit9vCzwadXNrhQq+DYyTSf8sDvbygyQW1V8t6E2wDS9dxunMcLpXKihs/rdX4o/
zXUo3cQrGMxq+br5lKd4Io9CnoWpsXzBINb2dNoSWFNzTgQ7qhlnlLQ82iAD4RKG
o1zJuA9x1AG+ciV+mlvXKq1k8ZnFb7iaOG5lWL+d9FYWE5+QnF0Cc+5bgOwJyHoh
jkPF0cECpfVsjDMjOWpNlkKVaYYmMA+qBHklYCVx5DYYb5k518pBYUBV8G3qXlE+
X+R0HOSvJ6v2/DqnWE7bNmb/BXLd5cs=
-----END CERTIFICATE-----
Generated at Thu May 2 21:10:59 2024 by rpki-client on console-fra.rpki-client.org