Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/be06885a-4b98-309e-9449-a3394506a19d.roa
File:                     be06885a-4b98-309e-9449-a3394506a19d.roa (raw, json)
Hash identifier:          dnPa8BzhDTXlmZLZLebQ78hmafNUuDZWeBuFZcNTbDc=
Subject key identifier:   E6:2C:27:1E:3A:94:F6:E3:DA:0D:53:CB:28:6A:05:50:E5:3E:2C:03
Certificate issuer:       /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
Certificate serial:       010D0C9F432858471D8FC27D9386F95D4014FD00
Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/be06885a-4b98-309e-9449-a3394506a19d.roa
Signing time:             Thu 05 Sep 2024 17:28:03 +0000
ROA not before:           Thu 05 Sep 2024 17:28:03 +0000
ROA not after:            Wed 04 Dec 2024 18:28:03 +0000
asID:                     400610
IP address blocks:        66.219.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1d:8f:c2:7d:93:86:f9:5d:40:14:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
        Validity
            Not Before: Sep  5 17:28:03 2024 GMT
            Not After : Dec  4 18:28:03 2024 GMT
        Subject: CN=10b393ea-c656-40f3-bf93-1a78507de8ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d3:7b:f8:b0:df:fb:20:4f:3c:4b:86:2f:13:
                    07:4c:2d:83:83:1e:35:76:dc:65:3b:d9:89:45:ff:
                    19:9a:83:e6:44:5d:aa:41:cb:c7:da:ae:4e:fa:3e:
                    69:ae:b9:15:d0:64:70:06:2f:3b:f9:43:a2:29:68:
                    a1:4a:32:28:fb:7d:46:d4:da:26:d0:05:64:ee:c5:
                    15:23:04:52:30:65:98:48:7b:96:6c:a9:22:36:5e:
                    65:66:70:14:ba:54:54:84:ea:df:a6:a1:57:2f:77:
                    cf:57:14:ef:76:b0:22:96:5c:49:b2:9a:be:74:f6:
                    d6:dd:e7:f3:93:ec:7e:32:8e:78:09:84:54:92:03:
                    39:c3:3b:4f:0a:d1:22:cf:ce:56:47:ab:2e:18:a8:
                    cf:70:ce:91:23:d7:82:73:4f:d6:73:d8:8c:6e:cb:
                    09:19:eb:9b:c2:ec:6c:fc:2b:10:43:2c:2f:fa:28:
                    ba:47:bb:ab:db:fd:fa:03:c5:69:3a:b0:19:a8:25:
                    df:36:9c:77:22:6c:be:51:17:38:50:1c:28:50:aa:
                    96:75:d0:c9:33:92:db:bf:56:9a:3d:7e:8a:73:58:
                    e4:34:0b:ed:65:5b:ac:89:81:37:4b:b2:e1:8b:66:
                    ae:f5:a5:18:75:29:3f:6b:07:90:e4:f8:21:34:81:
                    e8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2C:27:1E:3A:94:F6:E3:DA:0D:53:CB:28:6A:05:50:E5:3E:2C:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/be06885a-4b98-309e-9449-a3394506a19d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl

            X509v3 Authority Key Identifier:
                keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.219.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:a6:c3:67:4d:34:40:9b:10:0f:57:61:61:bc:ab:6e:bb:4d:
         50:13:56:29:e2:7e:39:20:0e:42:ed:ac:c9:be:53:95:12:77:
         b8:54:7f:36:de:09:ac:46:26:a5:7f:c2:17:71:46:9e:9e:dd:
         73:09:a4:3f:ad:f1:cd:87:74:70:78:9c:54:22:f8:8c:f8:21:
         d5:34:8a:e2:90:8c:76:cc:8d:ad:0d:ce:78:25:a0:05:4f:00:
         04:0a:84:94:7a:a4:ac:57:16:60:17:72:c8:00:e2:eb:00:97:
         96:52:e3:19:a9:9f:5d:f8:2a:d9:43:23:09:33:7d:ae:c8:d5:
         7e:2c:5c:ae:2e:ca:5f:b8:9e:1d:e0:48:40:03:80:62:05:b9:
         32:72:05:c7:42:25:d2:e6:65:fc:18:ea:5f:2d:53:2d:d6:64:
         6c:1f:df:3c:4c:b3:bd:80:08:a9:94:17:b8:43:18:6c:48:02:
         06:98:b3:5f:54:87:16:43:53:23:02:cf:e3:46:af:6d:ea:12:
         47:3f:f1:6b:81:4c:9d:0b:49:ec:84:5c:fe:0d:31:82:15:5e:
         ad:2b:cf:4e:ab:d5:fa:7e:6a:c6:57:b3:c1:f9:81:16:a8:e1:
         e3:ce:fc:73:a5:b2:9b:dc:88:66:60:31:80:f1:0e:a0:33:cf:
         09:9e:f6:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcdj8J9k4b5XUAU/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjMzNTc3ZGItYjUzNi00YWFmLWI5YTEtNWJjYmM1OThm
MmUzMB4XDTI0MDkwNTE3MjgwM1oXDTI0MTIwNDE4MjgwM1owLzEtMCsGA1UEAxMk
MTBiMzkzZWEtYzY1Ni00MGYzLWJmOTMtMWE3ODUwN2RlOGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtN7+LDf+yBPPEuGLxMHTC2Dgx41dtxlO9mJ
Rf8ZmoPmRF2qQcvH2q5O+j5prrkV0GRwBi87+UOiKWihSjIo+31G1Nom0AVk7sUV
IwRSMGWYSHuWbKkiNl5lZnAUulRUhOrfpqFXL3fPVxTvdrAillxJspq+dPbW3efz
k+x+Mo54CYRUkgM5wztPCtEiz85WR6suGKjPcM6RI9eCc0/Wc9iMbssJGeubwuxs
/CsQQywv+ii6R7ur2/36A8VpOrAZqCXfNpx3Imy+URc4UBwoUKqWddDJM5Lbv1aa
PX6Kc1jkNAvtZVusiYE3S7Lhi2au9aUYdSk/aweQ5PghNIHozwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOYsJx46lPbj2g1TyyhqBVDlPiwDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MzM1
NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNiYzU5OGYyZTMvYmUwNjg4NWEtNGI5OC0z
MDllLTk0NDktYTMzOTQ1MDZhMTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjMzNTc3ZGItYjUzNi00YWFmLWI5
YTEtNWJjYmM1OThmMmUzLzYzMzU3N2RiLWI1MzYtNGFhZi1iOWExLTViY2JjNTk4
ZjJlMy5jcmwwHwYDVR0jBBgwFoAU5vj77JhgiioREWa6kIHl53qrn50wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MzM1NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNi
YzU5OGYyZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtt0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGKmw2dNNECbEA9XYWG8q267TVATVinifjkgDkLtrMm+U5USd7hUfzbe
CaxGJqV/whdxRp6e3XMJpD+t8c2HdHB4nFQi+Iz4IdU0iuKQjHbMja0NzngloAVP
AAQKhJR6pKxXFmAXcsgA4usAl5ZS4xmpn134KtlDIwkzfa7I1X4sXK4uyl+4nh3g
SEADgGIFuTJyBcdCJdLmZfwY6l8tUy3WZGwf3zxMs72ACKmUF7hDGGxIAgaYs19U
hxZDUyMCz+NGr23qEkc/8WuBTJ0LSeyEXP4NMYIVXq0rz06r1fp+asZXs8H5gRao
4ePO/HOlspvciGZgMYDxDqAzzwme9nw=
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:36:12 2024 by rpki-client on console-fra.rpki-client.org