Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/87aa8841-48a1-3816-bf49-bb7cb689b2c1.roa
File:                     87aa8841-48a1-3816-bf49-bb7cb689b2c1.roa (raw, json)
Hash identifier:          GOjRO8LJIaNzJyuJICESgaL1NZYOnuoos3BPm65Jty0=
Subject key identifier:   EB:0C:F8:15:84:8B:66:9F:35:B7:3D:96:AA:19:77:DD:4A:26:EE:DB
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F43285844EED00925344BF5F7EF52DF80
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/87aa8841-48a1-3816-bf49-bb7cb689b2c1.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     54858
IP address blocks:        66.109.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:d0:09:25:34:4b:f5:f7:ef:52:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=6c4d451e-0fca-4cd1-9434-c5d1f47799d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:39:44:d0:56:f2:4d:76:9e:3e:9c:9f:ad:83:
                    7f:5d:bb:b2:6a:b5:aa:73:c5:92:49:7b:8d:28:51:
                    b9:5d:f4:ed:4c:58:75:29:f9:b3:eb:59:6f:1a:73:
                    2f:f0:b7:d2:7a:26:68:81:88:04:a7:d9:7b:56:2a:
                    83:f0:41:5c:4c:d6:23:be:70:af:b8:c8:67:2f:ad:
                    2e:32:a9:57:51:41:62:42:82:49:9f:15:a1:8b:e9:
                    8e:80:19:13:b0:8e:0b:ea:33:06:b3:fb:37:c4:bc:
                    e4:30:9a:72:e2:b0:a4:22:9d:8c:ea:c8:fa:fc:f7:
                    6a:0a:f8:e1:5a:88:cd:83:e5:f4:bc:b2:5f:7a:95:
                    b1:d6:10:df:9c:99:68:62:6f:b7:1a:5f:01:f0:b4:
                    47:a3:75:85:f0:09:18:21:2f:a9:46:10:96:03:35:
                    2f:2e:26:25:96:c8:71:88:49:48:ed:ab:8e:af:76:
                    a5:c1:d4:3c:fd:c2:89:54:5a:d0:a8:8b:2a:5f:5f:
                    39:bb:cd:9f:95:e8:1f:60:74:ba:de:b5:3e:9e:68:
                    f3:9f:27:c8:c5:eb:40:3e:e0:28:49:d5:ed:5c:c5:
                    cb:4f:84:cf:9b:ee:05:40:91:3f:81:c6:5b:1e:eb:
                    e7:b2:88:ae:f2:a2:de:8b:f6:eb:50:c9:41:a1:7f:
                    43:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0C:F8:15:84:8B:66:9F:35:B7:3D:96:AA:19:77:DD:4A:26:EE:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/87aa8841-48a1-3816-bf49-bb7cb689b2c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.109.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:7b:5b:28:41:10:e8:f4:43:58:67:08:b1:f5:09:4a:80:7a:
         68:92:64:cf:4f:f2:e1:74:f2:b4:f9:c6:86:89:c2:03:6d:a0:
         82:2c:a8:83:59:2d:0c:49:e6:95:fa:f4:c9:b1:22:d5:77:5a:
         32:61:35:57:f0:eb:ff:c6:f4:a9:46:bf:5b:87:79:ec:32:5c:
         19:41:a7:42:5b:aa:7c:20:c3:61:a8:8e:92:26:a6:0b:9c:10:
         d5:99:22:f4:fc:d6:36:7d:aa:04:f4:eb:27:5e:8b:12:5c:88:
         7a:40:46:80:e9:fb:05:62:16:d5:f8:e6:8c:18:cc:89:75:67:
         ea:c2:89:26:d2:be:f2:f8:d1:ca:1b:b5:6c:95:10:c8:49:b9:
         70:85:e5:02:9f:d2:e7:a5:18:3f:c6:11:99:d6:a1:07:b2:31:
         2b:5d:ed:17:e7:0a:34:54:97:3b:ca:17:a7:30:47:6a:9d:ab:
         26:f7:f7:10:8b:8b:31:82:04:07:78:e9:33:79:f5:b8:63:c1:
         1f:21:a3:45:be:d8:1d:10:2a:fe:f2:6b:38:5f:29:80:b6:92:
         96:9b:c6:1d:5c:1c:53:41:5e:aa:70:cb:9d:f5:d6:d3:11:48:
         5c:47:75:ba:88:4e:73:12:0c:b0:85:8e:2e:24:b0:ea:4a:b2:
         e1:b1:cf:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETu0AklNEv19+9S34AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI0MDIxODE0MDAzMFoXDTI0MDUxODEzMDAzMFowLzEtMCsGA1UEAxMk
NmM0ZDQ1MWUtMGZjYS00Y2QxLTk0MzQtYzVkMWY0Nzc5OWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozlE0FbyTXaePpyfrYN/XbuyarWqc8WSSXuN
KFG5XfTtTFh1Kfmz61lvGnMv8LfSeiZogYgEp9l7ViqD8EFcTNYjvnCvuMhnL60u
MqlXUUFiQoJJnxWhi+mOgBkTsI4L6jMGs/s3xLzkMJpy4rCkIp2M6sj6/PdqCvjh
WojNg+X0vLJfepWx1hDfnJloYm+3Gl8B8LRHo3WF8AkYIS+pRhCWAzUvLiYllshx
iElI7auOr3alwdQ8/cKJVFrQqIsqX185u82flegfYHS63rU+nmjznyfIxetAPuAo
SdXtXMXLT4TPm+4FQJE/gcZbHuvnsoiu8qLei/brUMlBoX9DMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOsM+BWEi2afNbc9lqoZd91KJu7bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvODdhYTg4NDEtNDhhMS0z
ODE2LWJmNDktYmI3Y2I2ODliMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQm1gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHd7WyhBEOj0Q1hnCLH1CUqAemiSZM9P8uF08rT5xoaJwgNtoIIsqINZ
LQxJ5pX69MmxItV3WjJhNVfw6//G9KlGv1uHeewyXBlBp0Jbqnwgw2GojpImpguc
ENWZIvT81jZ9qgT06ydeixJciHpARoDp+wViFtX45owYzIl1Z+rCiSbSvvL40cob
tWyVEMhJuXCF5QKf0uelGD/GEZnWoQeyMStd7RfnCjRUlzvKF6cwR2qdqyb39xCL
izGCBAd46TN59bhjwR8ho0W+2B0QKv7yazhfKYC2kpabxh1cHFNBXqpwy5311tMR
SFxHdbqITnMSDLCFji4ksOpKsuGxz7Q=
-----END CERTIFICATE-----
Generated at Thu May 2 15:00:02 2024 by rpki-client on console-ams.rpki-client.org