Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/541af175-265a-3096-8295-96504805d06d.roa
File:                     541af175-265a-3096-8295-96504805d06d.roa (raw, json)
Hash identifier:          XEEWcEDKiNXLQsgN+s3ioOuKy4/9w9Af0+An+W+cTfI=
Subject key identifier:   6B:9D:D0:19:A0:67:2A:B1:93:EA:56:69:80:88:17:40:62:29:43:56
Certificate issuer:       /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Certificate serial:       010D0C9F4328584566BDBD9983AA6B770A6F7BC0
Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/541af175-265a-3096-8295-96504805d06d.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     62537
IP address blocks:        66.85.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:bd:99:83:aa:6b:77:0a:6f:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=d17aea17-6ab1-4417-8b3f-81358623f149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b9:b1:26:90:42:38:99:5f:eb:8a:31:aa:d8:
                    5d:9a:4b:8e:26:3d:7c:47:80:95:44:85:76:7c:f8:
                    3b:5f:59:5d:ae:98:db:51:8f:8e:9d:f0:c5:d4:92:
                    63:87:d7:b5:28:e1:15:a0:89:41:58:6a:d4:ba:7d:
                    26:8f:e7:94:84:36:82:1c:4a:dc:30:02:95:3f:a6:
                    92:dc:a2:0d:76:5e:a3:12:f6:4b:27:c5:25:8d:fe:
                    ad:e4:3c:d5:98:53:07:e2:29:d8:26:74:8d:e8:f2:
                    ee:0a:df:58:7a:ac:95:ac:c3:5b:09:a1:82:77:29:
                    b3:ba:84:37:72:21:00:86:ec:bf:7b:81:e7:b7:00:
                    de:a6:f1:bb:73:b5:23:e0:d1:7e:87:1d:99:90:69:
                    54:52:9e:e3:39:98:03:25:79:1c:4f:f7:24:d2:c9:
                    62:e5:4c:21:43:f8:6a:c5:ab:47:b4:d3:7b:20:c1:
                    a0:30:64:de:e6:0c:f5:d6:2e:8c:12:cf:4d:22:da:
                    1f:8b:cf:67:cd:e1:f7:9f:3b:0b:60:b5:d6:f3:b2:
                    05:23:74:48:9c:01:23:b1:2d:91:e9:ec:60:d2:d3:
                    68:3a:d6:41:f3:1a:1c:ff:39:83:de:30:f1:0b:60:
                    06:01:65:c0:08:78:04:6b:5b:9a:4a:c5:06:ed:07:
                    e1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9D:D0:19:A0:67:2A:B1:93:EA:56:69:80:88:17:40:62:29:43:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/541af175-265a-3096-8295-96504805d06d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl

            X509v3 Authority Key Identifier:
                keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:ed:7b:d6:2b:b0:56:f8:b2:db:25:fb:5b:55:6b:0c:0e:d7:
         6c:e5:bf:08:b0:7e:d2:83:8b:24:60:52:c5:ba:b9:96:58:a0:
         21:45:9e:b6:a9:11:a1:ed:41:27:ae:e6:df:76:d8:f9:00:c2:
         df:73:e4:19:d2:4d:cf:fa:b8:b9:39:c7:3c:fe:b5:b2:41:6d:
         a5:85:9f:b5:76:9f:a5:f4:68:0f:24:f0:8f:43:f3:fd:4c:05:
         4c:35:8e:3a:09:74:e8:64:9d:ce:db:7d:8c:ba:73:0a:e1:88:
         04:05:4c:05:e3:41:68:19:27:50:bd:80:e4:a6:5f:dd:36:48:
         1f:f3:84:ec:49:d7:28:ac:b1:35:4a:fc:d2:fd:8e:d0:8e:5f:
         f7:3f:c7:63:6a:be:4d:7b:23:78:02:7f:f7:92:e2:81:d2:2a:
         f2:7b:8e:34:fa:4d:49:2e:c3:57:d7:c3:2b:3a:84:42:4c:3a:
         74:f3:13:bb:56:3c:0f:77:5c:30:eb:5f:3f:5e:1c:f2:44:a8:
         65:77:4e:7e:df:2b:43:52:af:0d:e7:0a:4d:aa:8b:75:cd:9c:
         77:53:89:3c:10:5d:ad:96:a2:97:95:00:5f:c3:44:83:31:07:
         42:69:19:ac:85:cb:a0:51:e4:46:24:55:03:ef:f2:fa:5a:3c:
         e9:59:75:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVmvb2Zg6prdwpve8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGY3Y2E3OWEtZjhmNS00MDhhLTg2ZmItNDcyZDYzZWQx
NTZmMB4XDTI0MDQwMTEzMDAzNloXDTI0MDYzMDEzMDAzNlowLzEtMCsGA1UEAxMk
ZDE3YWVhMTctNmFiMS00NDE3LThiM2YtODEzNTg2MjNmMTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAormxJpBCOJlf64oxqthdmkuOJj18R4CVRIV2
fPg7X1ldrpjbUY+OnfDF1JJjh9e1KOEVoIlBWGrUun0mj+eUhDaCHErcMAKVP6aS
3KINdl6jEvZLJ8Uljf6t5DzVmFMH4inYJnSN6PLuCt9YeqyVrMNbCaGCdymzuoQ3
ciEAhuy/e4HntwDepvG7c7Uj4NF+hx2ZkGlUUp7jOZgDJXkcT/ck0sli5UwhQ/hq
xatHtNN7IMGgMGTe5gz11i6MEs9NItofi89nzeH3nzsLYLXW87IFI3RInAEjsS2R
6exg0tNoOtZB8xoc/zmD3jDxC2AGAWXACHgEa1uaSsUG7QfhxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGud0BmgZyqxk+pWaYCIF0BiKUNWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjdj
YTc5YS1mOGY1LTQwOGEtODZmYi00NzJkNjNlZDE1NmYvNTQxYWYxNzUtMjY1YS0z
MDk2LTgyOTUtOTY1MDQ4MDVkMDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGY3Y2E3OWEtZjhmNS00MDhhLTg2
ZmItNDcyZDYzZWQxNTZmL2RmN2NhNzlhLWY4ZjUtNDA4YS04NmZiLTQ3MmQ2M2Vk
MTU2Zi5jcmwwHwYDVR0jBBgwFoAUzSXSHbTlO8LOT0VcD3Q2TcqiRZ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjdjYTc5YS1mOGY1LTQwOGEtODZmYi00NzJk
NjNlZDE1NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlU0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABzte9YrsFb4stsl+1tVawwO12zlvwiwftKDiyRgUsW6uZZYoCFFnrap
EaHtQSeu5t922PkAwt9z5BnSTc/6uLk5xzz+tbJBbaWFn7V2n6X0aA8k8I9D8/1M
BUw1jjoJdOhknc7bfYy6cwrhiAQFTAXjQWgZJ1C9gOSmX902SB/zhOxJ1yissTVK
/NL9jtCOX/c/x2Nqvk17I3gCf/eS4oHSKvJ7jjT6TUkuw1fXwys6hEJMOnTzE7tW
PA93XDDrXz9eHPJEqGV3Tn7fK0NSrw3nCk2qi3XNnHdTiTwQXa2WopeVAF/DRIMx
B0JpGayFy6BR5EYkVQPv8vpaPOlZdZg=
-----END CERTIFICATE-----
Generated at Sun May 5 06:01:24 2024 by rpki-client on console-fra.rpki-client.org