Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42/f1a94dda-f220-3073-b4a9-f61ce74f2305.roa
File:                     f1a94dda-f220-3073-b4a9-f61ce74f2305.roa (raw, json)
Hash identifier:          u2Fmj6nAuafJPtrnqlbExVzM53hvnVFjiO0Y5JYNz8I=
Subject key identifier:   B2:1F:63:55:4C:DC:51:78:02:EC:0F:C3:62:7B:E0:CC:35:D5:98:FA
Certificate issuer:       /CN=37bfcea0-cd68-469f-9e84-ccc3f1f40b42
Certificate serial:       010D0C9F432858474FC7011BFEA9FB62D5F55380
Authority key identifier: 2B:91:ED:DC:2E:8C:FC:19:63:EA:4E:59:69:E8:3A:E9:AE:89:AB:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42/f1a94dda-f220-3073-b4a9-f61ce74f2305.roa
Signing time:             Mon 23 Sep 2024 17:09:47 +0000
ROA not before:           Mon 23 Sep 2024 17:09:47 +0000
ROA not after:            Sun 22 Dec 2024 18:09:47 +0000
asID:                     31989
IP address blocks:        66.179.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42/37bfcea0-cd68-469f-9e84-ccc3f1f40b42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42/37bfcea0-cd68-469f-9e84-ccc3f1f40b42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:c7:01:1b:fe:a9:fb:62:d5:f5:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37bfcea0-cd68-469f-9e84-ccc3f1f40b42
        Validity
            Not Before: Sep 23 17:09:47 2024 GMT
            Not After : Dec 22 18:09:47 2024 GMT
        Subject: CN=ba991703-c6b7-4ef7-9864-b91629a0cdeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fc:de:32:a2:04:1c:02:15:db:2d:31:ed:9f:
                    cb:5a:fb:83:fb:f7:11:52:9f:0f:22:84:d1:00:fb:
                    cf:ce:52:db:c5:60:17:a6:01:f3:a3:27:95:c1:29:
                    a7:ea:e6:5e:5f:53:ba:b5:42:83:f0:89:74:85:36:
                    7f:09:c3:06:89:6d:33:24:15:ea:6f:99:08:83:11:
                    dd:70:89:cf:63:f4:15:38:a1:27:f3:03:b8:0d:62:
                    bf:81:f5:b3:f3:e9:b4:38:c7:3c:42:58:f7:b2:52:
                    85:8f:27:f7:14:ec:7d:c8:ba:38:65:30:9d:50:73:
                    a9:c0:cc:e1:02:23:2e:a7:ef:fd:5c:84:27:0f:83:
                    3c:1b:c5:c4:e3:32:47:22:4c:c1:fe:a6:81:c0:1b:
                    02:34:58:23:1a:db:e8:69:9c:34:ff:39:91:ce:52:
                    da:c9:0e:57:41:be:b5:3f:6f:d8:cf:62:e8:43:4d:
                    36:c2:27:34:b6:d1:6c:f0:e2:db:10:d5:14:d9:a0:
                    fb:84:ef:3e:30:d9:00:51:74:e6:1f:b0:94:f7:90:
                    e2:4b:56:e3:89:37:ff:2e:93:79:62:d4:b4:00:c4:
                    97:04:42:a0:c4:77:a2:1a:0c:c7:7e:6f:f0:fe:1a:
                    7f:0d:8d:b6:4f:2c:c6:37:5e:f0:cc:c5:70:ce:fd:
                    41:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:1F:63:55:4C:DC:51:78:02:EC:0F:C3:62:7B:E0:CC:35:D5:98:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42/f1a94dda-f220-3073-b4a9-f61ce74f2305.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42/37bfcea0-cd68-469f-9e84-ccc3f1f40b42.crl

            X509v3 Authority Key Identifier:
                keyid:2B:91:ED:DC:2E:8C:FC:19:63:EA:4E:59:69:E8:3A:E9:AE:89:AB:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:d7:23:a0:94:8d:12:76:2f:a2:16:45:6a:18:a9:f3:cd:6c:
         ae:42:48:b2:e2:ce:d3:61:b9:5a:a3:16:25:f1:af:c2:20:2c:
         2f:a6:3b:7e:65:2f:e0:14:d8:1c:e8:8f:06:f7:0f:56:a6:44:
         6a:74:93:17:31:f2:ed:5a:45:3a:fa:21:50:e2:ed:e4:39:e5:
         fa:ef:90:a6:87:a3:cd:30:9d:e9:58:17:f4:0b:89:f9:35:79:
         ef:81:d8:e2:1b:92:69:01:a6:ca:45:19:a4:bd:9a:c7:b8:06:
         d7:cd:1c:c5:3c:1f:f1:8e:bd:01:c2:75:3f:e1:f2:cc:38:d4:
         56:66:6c:5b:18:82:0a:f9:20:70:66:8f:b0:dc:cc:bd:ac:21:
         ab:b7:7b:30:5e:3a:ac:a1:8e:3f:86:7c:69:41:8a:22:13:2e:
         11:c9:da:c9:2d:18:56:04:58:3a:29:88:9b:8f:e8:ce:be:6c:
         1d:d1:db:7e:a2:92:24:cd:fe:89:30:54:f4:d3:5c:f1:c7:47:
         e5:0e:95:ea:d5:d1:c5:07:15:91:fd:34:53:a0:7a:12:ac:61:
         09:0b:80:42:b9:8d:75:98:06:d6:e7:50:36:e4:79:27:a2:e8:
         33:f9:16:7b:53:b0:2b:2a:04:b4:1e:84:d6:98:de:8f:91:47:
         d2:a9:bb:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdPxwEb/qn7YtX1U4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzdiZmNlYTAtY2Q2OC00NjlmLTllODQtY2NjM2YxZjQw
YjQyMB4XDTI0MDkyMzE3MDk0N1oXDTI0MTIyMjE4MDk0N1owLzEtMCsGA1UEAxMk
YmE5OTE3MDMtYzZiNy00ZWY3LTk4NjQtYjkxNjI5YTBjZGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfzeMqIEHAIV2y0x7Z/LWvuD+/cRUp8PIoTR
APvPzlLbxWAXpgHzoyeVwSmn6uZeX1O6tUKD8Il0hTZ/CcMGiW0zJBXqb5kIgxHd
cInPY/QVOKEn8wO4DWK/gfWz8+m0OMc8Qlj3slKFjyf3FOx9yLo4ZTCdUHOpwMzh
AiMup+/9XIQnD4M8G8XE4zJHIkzB/qaBwBsCNFgjGtvoaZw0/zmRzlLayQ5XQb61
P2/Yz2LoQ002wic0ttFs8OLbENUU2aD7hO8+MNkAUXTmH7CU95DiS1bjiTf/LpN5
YtS0AMSXBEKgxHeiGgzHfm/w/hp/DY22TyzGN17wzMVwzv1B/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLIfY1VM3FF4AuwPw2J74Mw11Zj6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zN2Jm
Y2VhMC1jZDY4LTQ2OWYtOWU4NC1jY2MzZjFmNDBiNDIvZjFhOTRkZGEtZjIyMC0z
MDczLWI0YTktZjYxY2U3NGYyMzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzdiZmNlYTAtY2Q2OC00NjlmLTll
ODQtY2NjM2YxZjQwYjQyLzM3YmZjZWEwLWNkNjgtNDY5Zi05ZTg0LWNjYzNmMWY0
MGI0Mi5jcmwwHwYDVR0jBBgwFoAUK5Ht3C6M/Blj6k5Zaeg66a6Jq7gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zN2JmY2VhMC1jZDY4LTQ2OWYtOWU4NC1jY2Mz
ZjFmNDBiNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQrNEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACrXI6CUjRJ2L6IWRWoYqfPNbK5CSLLiztNhuVqjFiXxr8IgLC+mO35l
L+AU2Bzojwb3D1amRGp0kxcx8u1aRTr6IVDi7eQ55frvkKaHo80wnelYF/QLifk1
ee+B2OIbkmkBpspFGaS9mse4BtfNHMU8H/GOvQHCdT/h8sw41FZmbFsYggr5IHBm
j7DczL2sIau3ezBeOqyhjj+GfGlBiiITLhHJ2sktGFYEWDopiJuP6M6+bB3R236i
kiTN/okwVPTTXPHHR+UOlerV0cUHFZH9NFOgehKsYQkLgEK5jXWYBtbnUDbkeSei
6DP5FntTsCsqBLQehNaY3o+RR9Kpu3c=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:27 2024 by rpki-client on console-ams.rpki-client.org