Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec/f89f35db-15c5-3c33-bdbd-0b4e71ea58b5.roa
File:                     f89f35db-15c5-3c33-bdbd-0b4e71ea58b5.roa (raw, json)
Hash identifier:          R/DQmfV4coB1zGqR2J4YcPU2gq8o1/LsSD/TthJq0YA=
Subject key identifier:   C8:98:49:72:6B:18:33:3C:F5:68:CE:C1:F3:33:AB:F3:05:E4:04:6D
Certificate issuer:       /CN=b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec
Certificate serial:       010D0C9F43285846D04535039CA07708A935E940
Authority key identifier: 32:1C:42:C8:F6:AB:B2:B1:3B:1A:04:92:EE:F2:0B:12:ED:0E:74:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec/f89f35db-15c5-3c33-bdbd-0b4e71ea58b5.roa
Signing time:             Fri 09 Aug 2024 01:00:28 +0000
ROA not before:           Fri 09 Aug 2024 01:00:28 +0000
ROA not after:            Thu 07 Nov 2024 02:00:28 +0000
asID:                     174
IP address blocks:        66.205.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d0:45:35:03:9c:a0:77:08:a9:35:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec
        Validity
            Not Before: Aug  9 01:00:28 2024 GMT
            Not After : Nov  7 02:00:28 2024 GMT
        Subject: CN=d411857c-dcfe-41af-8c23-0c232340d2f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:39:09:fd:52:43:75:bd:a5:89:12:84:04:65:
                    2d:23:f0:b9:46:2d:dd:a4:d6:84:6b:2a:ff:51:76:
                    60:c5:f9:7e:87:38:08:05:2f:95:ee:5a:56:6c:12:
                    cd:32:a4:d1:68:b0:e4:85:df:30:02:c2:1c:e9:42:
                    7b:c4:60:40:4b:0a:bd:12:d2:37:93:4b:04:23:f6:
                    04:ea:3a:03:48:c6:e8:c1:2b:04:85:97:49:3e:74:
                    9f:89:06:7a:93:64:d3:d1:bb:2c:ee:83:4e:87:32:
                    48:52:0a:f5:af:29:d3:a5:06:ef:e0:60:20:6e:90:
                    18:13:42:4b:6d:4f:2d:11:00:fb:1f:10:82:7d:f2:
                    1d:f5:93:90:38:6e:52:f8:21:55:76:90:a1:e1:7c:
                    df:c9:51:1f:ae:ad:49:11:37:3d:0e:d1:d7:e8:79:
                    3b:21:fc:55:56:37:28:0f:22:ec:ad:6a:89:cb:c2:
                    95:d3:a5:69:86:3a:1e:5b:ba:ed:74:7a:e8:ce:e5:
                    eb:49:b0:73:5f:e1:62:8c:99:bd:a1:85:ba:11:f8:
                    48:4e:e3:a8:58:c5:bd:69:ba:1c:9b:c3:a1:2a:17:
                    9b:c9:de:12:ed:0f:70:0f:7e:c8:39:e8:34:ff:bd:
                    52:bd:b8:b1:4f:9a:c5:10:51:30:22:ee:19:6d:6f:
                    36:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:98:49:72:6B:18:33:3C:F5:68:CE:C1:F3:33:AB:F3:05:E4:04:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec/f89f35db-15c5-3c33-bdbd-0b4e71ea58b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec.crl

            X509v3 Authority Key Identifier:
                keyid:32:1C:42:C8:F6:AB:B2:B1:3B:1A:04:92:EE:F2:0B:12:ED:0E:74:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:2b:6f:9c:94:a1:94:0c:a1:e1:47:42:2c:b9:81:6c:bf:f9:
         d2:56:75:04:cf:6a:2d:d0:c4:aa:4c:9a:16:56:73:9f:5d:c4:
         cb:1b:79:4a:66:0d:b6:e2:3b:16:41:c5:88:c0:6b:be:35:99:
         12:c4:e0:92:1d:b3:1f:c4:3a:36:ad:81:2f:8c:b8:08:62:81:
         e0:dd:0f:75:49:7f:a2:ca:f6:18:2c:46:9b:10:10:40:a7:bb:
         e3:16:5c:11:d6:34:86:c9:91:7e:c4:68:c9:65:9c:40:07:df:
         75:47:9c:c4:bc:86:fa:ad:d5:e2:cc:be:1c:7f:f4:3a:05:83:
         c8:43:3f:3c:78:5c:76:6b:57:87:7d:22:a6:d9:d4:48:4e:bf:
         cc:6a:49:51:8c:af:de:2c:fc:d2:45:68:44:e3:68:e1:1d:e4:
         bf:cd:1b:5b:c3:14:31:77:84:ff:20:38:97:e4:80:f4:11:b9:
         9d:f1:be:4c:99:8a:1b:f1:59:80:8b:1e:c9:1b:9b:c5:2b:0f:
         e6:70:73:5e:07:ec:ef:df:c3:55:60:6c:4a:f8:17:32:2c:2e:
         d0:b8:35:e8:b8:ae:ce:74:0e:a9:96:76:eb:e6:63:01:34:fa:
         e7:c8:81:62:c9:4e:40:36:71:04:88:0f:54:0b:b5:91:ac:ad:
         e8:9e:89:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbQRTUDnKB3CKk16UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU4YmRkZDItYjljMC00ZTBhLWE3Y2MtZTRmNGNiMWI2
MGVjMB4XDTI0MDgwOTAxMDAyOFoXDTI0MTEwNzAyMDAyOFowLzEtMCsGA1UEAxMk
ZDQxMTg1N2MtZGNmZS00MWFmLThjMjMtMGMyMzIzNDBkMmY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDkJ/VJDdb2liRKEBGUtI/C5Ri3dpNaEayr/
UXZgxfl+hzgIBS+V7lpWbBLNMqTRaLDkhd8wAsIc6UJ7xGBASwq9EtI3k0sEI/YE
6joDSMbowSsEhZdJPnSfiQZ6k2TT0bss7oNOhzJIUgr1rynTpQbv4GAgbpAYE0JL
bU8tEQD7HxCCffId9ZOQOG5S+CFVdpCh4XzfyVEfrq1JETc9DtHX6Hk7IfxVVjco
DyLsrWqJy8KV06VphjoeW7rtdHrozuXrSbBzX+FijJm9oYW6EfhITuOoWMW9aboc
m8OhKhebyd4S7Q9wD37IOeg0/71SvbixT5rFEFEwIu4ZbW82LQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMiYSXJrGDM89WjOwfMzq/MF5ARtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNThi
ZGRkMi1iOWMwLTRlMGEtYTdjYy1lNGY0Y2IxYjYwZWMvZjg5ZjM1ZGItMTVjNS0z
YzMzLWJkYmQtMGI0ZTcxZWE1OGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjU4YmRkZDItYjljMC00ZTBhLWE3
Y2MtZTRmNGNiMWI2MGVjL2I1OGJkZGQyLWI5YzAtNGUwYS1hN2NjLWU0ZjRjYjFi
NjBlYy5jcmwwHwYDVR0jBBgwFoAUMhxCyParsrE7GgSS7vILEu0OdNMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iNThiZGRkMi1iOWMwLTRlMGEtYTdjYy1lNGY0
Y2IxYjYwZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQs36MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIgrb5yUoZQMoeFHQiy5gWy/+dJWdQTPai3QxKpMmhZWc59dxMsbeUpm
DbbiOxZBxYjAa741mRLE4JIdsx/EOjatgS+MuAhigeDdD3VJf6LK9hgsRpsQEECn
u+MWXBHWNIbJkX7EaMllnEAH33VHnMS8hvqt1eLMvhx/9DoFg8hDPzx4XHZrV4d9
IqbZ1EhOv8xqSVGMr94s/NJFaETjaOEd5L/NG1vDFDF3hP8gOJfkgPQRuZ3xvkyZ
ihvxWYCLHskbm8UrD+Zwc14H7O/fw1VgbEr4FzIsLtC4Nei4rs50DqmWduvmYwE0
+ufIgWLJTkA2cQSID1QLtZGsreieiWQ=
-----END CERTIFICATE-----
Generated at Tue Oct 22 21:19:20 2024 by rpki-client on console-ams.rpki-client.org