Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/23d6c5ae-3503-330f-83b1-2d4c439d8079.roa
File:                     23d6c5ae-3503-330f-83b1-2d4c439d8079.roa (raw, json)
Hash identifier:          K4MSrGMLZMt15c0AWDE8CzIM2TaUZ2JOPRfdxvuOm+A=
Subject key identifier:   5B:39:82:12:F2:B3:6E:25:B6:1F:2C:FB:32:E4:FE:47:40:4C:4C:9E
Certificate issuer:       /CN=2fe89f6f-530f-4fd6-8c9f-68c4478b3a40
Certificate serial:       010D0C9F432858478CB693D2E0BA6712E7F91E00
Authority key identifier: EB:C9:0D:BE:3E:5C:11:0A:A1:CA:4A:85:23:5E:B1:30:D8:A6:CA:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/23d6c5ae-3503-330f-83b1-2d4c439d8079.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     16509
IP address blocks:        66.45.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:93:d2:e0:ba:67:12:e7:f9:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe89f6f-530f-4fd6-8c9f-68c4478b3a40
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=90ab7109-16c6-43ff-abd8-829f62e8a95f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:30:be:09:53:46:c0:fd:84:9e:a0:a1:e9:73:
                    c6:83:95:3f:5a:12:69:0c:87:83:f4:72:ba:9d:fb:
                    50:cd:fd:dc:af:3c:84:56:3d:ac:87:26:d6:15:84:
                    55:05:4a:fd:ce:14:90:d7:ff:93:45:55:3c:65:d7:
                    26:57:1d:ce:1a:48:38:c6:26:86:3b:bf:9a:1b:9c:
                    a8:8f:29:1d:b2:b1:91:91:da:ce:c2:8e:f8:07:a5:
                    5b:b3:46:ec:5d:5f:99:43:8c:5c:bf:35:a5:bb:70:
                    0b:6f:cc:43:b9:74:a3:67:b8:56:96:27:6f:9c:ca:
                    46:c8:ac:a5:fa:94:2f:db:8c:c6:94:c1:c3:c4:6e:
                    f6:0e:31:6a:c2:a3:fe:6d:c3:11:a5:73:ef:24:f4:
                    a5:78:40:06:dd:5f:55:bd:07:17:02:4f:93:93:f7:
                    0f:ab:f8:89:dc:4d:82:3a:e4:da:ca:62:8c:51:17:
                    d8:cb:b2:23:0a:76:aa:23:86:34:26:59:4f:10:de:
                    f7:80:9a:28:24:c9:79:64:0e:4f:d4:88:f9:99:be:
                    7e:cc:bf:dc:f2:03:a7:3f:02:14:78:46:e6:dc:6a:
                    f4:9e:b8:ab:d0:6f:e7:51:9a:c7:5d:7c:47:fb:c4:
                    af:fd:1e:80:ff:17:16:24:19:b6:1e:13:76:13:0e:
                    1a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:39:82:12:F2:B3:6E:25:B6:1F:2C:FB:32:E4:FE:47:40:4C:4C:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/23d6c5ae-3503-330f-83b1-2d4c439d8079.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.crl

            X509v3 Authority Key Identifier:
                keyid:EB:C9:0D:BE:3E:5C:11:0A:A1:CA:4A:85:23:5E:B1:30:D8:A6:CA:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:53:11:d1:8e:0e:41:72:9f:7d:f2:ac:dd:c1:33:f0:b4:ba:
         20:89:a5:c8:bb:40:f7:56:bf:54:a8:9e:78:87:35:9a:87:3a:
         67:4c:30:c5:8a:f8:66:a3:d2:b7:3e:b1:3e:05:40:37:24:b1:
         04:a4:85:cb:20:2d:56:ac:d1:78:b7:23:a8:aa:55:a3:39:19:
         5f:10:9a:02:a8:9e:30:6d:42:ff:e3:7c:6b:03:38:cf:4e:6c:
         7b:6a:a6:52:d3:33:63:b6:b9:10:42:b2:51:18:45:4c:24:87:
         5a:0c:ca:12:69:be:1b:a3:40:cc:9a:57:a2:85:28:25:1f:8d:
         82:ca:3d:c7:81:0d:cf:97:b5:26:c8:5c:e7:68:3b:e9:9f:2c:
         a4:ba:72:6e:31:8d:b7:49:9d:c4:f3:9f:2f:5f:57:ff:ef:52:
         91:75:22:21:67:7b:5e:3c:f9:54:14:31:a7:7b:fd:92:b6:c9:
         01:48:4b:79:86:6c:79:03:64:dd:c8:dd:11:43:17:b1:83:d9:
         b8:b0:21:fc:32:a3:76:d5:7c:87:79:49:34:af:55:a4:12:dc:
         18:8e:34:f6:19:ce:1d:39:cb:fb:ed:bc:49:5f:f4:58:6c:d0:
         6f:f4:b1:05:7b:46:64:61:79:b1:c2:5f:56:bb:d7:fb:99:47:
         56:9a:f2:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeMtpPS4LpnEuf5HgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmZlODlmNmYtNTMwZi00ZmQ2LThjOWYtNjhjNDQ3OGIz
YTQwMB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk
OTBhYjcxMDktMTZjNi00M2ZmLWFiZDgtODI5ZjYyZThhOTVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDC+CVNGwP2EnqCh6XPGg5U/WhJpDIeD9HK6
nftQzf3crzyEVj2shybWFYRVBUr9zhSQ1/+TRVU8ZdcmVx3OGkg4xiaGO7+aG5yo
jykdsrGRkdrOwo74B6Vbs0bsXV+ZQ4xcvzWlu3ALb8xDuXSjZ7hWlidvnMpGyKyl
+pQv24zGlMHDxG72DjFqwqP+bcMRpXPvJPSleEAG3V9VvQcXAk+Tk/cPq/iJ3E2C
OuTaymKMURfYy7IjCnaqI4Y0JllPEN73gJooJMl5ZA5P1Ij5mb5+zL/c8gOnPwIU
eEbm3Gr0nrir0G/nUZrHXXxH+8Sv/R6A/xcWJBm2HhN2Ew4axQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFs5ghLys24lth8s+zLk/kdATEyeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZmU4
OWY2Zi01MzBmLTRmZDYtOGM5Zi02OGM0NDc4YjNhNDAvMjNkNmM1YWUtMzUwMy0z
MzBmLTgzYjEtMmQ0YzQzOWQ4MDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmZlODlmNmYtNTMwZi00ZmQ2LThj
OWYtNjhjNDQ3OGIzYTQwLzJmZTg5ZjZmLTUzMGYtNGZkNi04YzlmLTY4YzQ0Nzhi
M2E0MC5jcmwwHwYDVR0jBBgwFoAU68kNvj5cEQqhykqFI16xMNimyscwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yZmU4OWY2Zi01MzBmLTRmZDYtOGM5Zi02OGM0
NDc4YjNhNDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQi0IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADhTEdGODkFyn33yrN3BM/C0uiCJpci7QPdWv1SonniHNZqHOmdMMMWK
+Gaj0rc+sT4FQDcksQSkhcsgLVas0Xi3I6iqVaM5GV8QmgKonjBtQv/jfGsDOM9O
bHtqplLTM2O2uRBCslEYRUwkh1oMyhJpvhujQMyaV6KFKCUfjYLKPceBDc+XtSbI
XOdoO+mfLKS6cm4xjbdJncTzny9fV//vUpF1IiFne148+VQUMad7/ZK2yQFIS3mG
bHkDZN3I3RFDF7GD2biwIfwyo3bVfId5STSvVaQS3BiONPYZzh05y/vtvElf9Fhs
0G/0sQV7RmRhebHCX1a71/uZR1aa8nU=
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:27 2024 by rpki-client on console-ams.rpki-client.org