Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/103f91ab-12ba-38da-ab98-144bafb20e59.roa
File:                     103f91ab-12ba-38da-ab98-144bafb20e59.roa (raw, json)
Hash identifier:          BPB5RX2HQzZ3jtqP49HyVr/hbPuAMwpwTeUzWjg/1B8=
Subject key identifier:   31:78:BF:0C:5E:C3:79:8D:D1:B1:78:CB:2E:5A:A5:84:9D:90:6E:7E
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F43285847670623988178C67CD5D22780
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/103f91ab-12ba-38da-ab98-144bafb20e59.roa
Signing time:             Wed 02 Oct 2024 01:00:31 +0000
ROA not before:           Wed 02 Oct 2024 01:00:31 +0000
ROA not after:            Tue 31 Dec 2024 02:00:31 +0000
asID:                     13576
IP address blocks:        66.231.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:67:06:23:98:81:78:c6:7c:d5:d2:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Oct  2 01:00:31 2024 GMT
            Not After : Dec 31 02:00:31 2024 GMT
        Subject: CN=478db59b-54e1-4dba-b5df-281908a8816c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:54:73:42:8d:df:7b:b3:30:f6:4d:5e:a8:9d:
                    8c:e2:61:4f:db:08:36:11:b7:9f:e8:21:e0:46:95:
                    96:04:43:19:f7:26:08:dd:0e:55:db:c9:8c:b5:b0:
                    85:da:96:95:7b:78:e4:1d:e5:42:99:9e:4c:e1:bd:
                    78:53:4e:9c:98:37:6f:51:41:df:8c:30:f0:eb:b3:
                    44:86:1f:ee:72:8b:a6:68:de:4a:86:e8:57:86:3c:
                    6e:b2:ac:65:a3:7b:ce:b4:a1:ac:0b:7e:2d:a2:55:
                    e0:6b:9f:ef:e3:47:4f:09:dc:5b:ad:3a:a8:af:06:
                    b3:78:f0:79:e9:17:1e:75:34:45:66:c9:f5:fa:8e:
                    a2:40:bc:5b:de:7f:e8:28:b2:2e:07:3d:b6:40:0a:
                    36:a8:a4:5a:2e:63:2c:d1:aa:d0:cc:23:9a:f4:ec:
                    7c:5e:b4:9e:29:0f:4a:73:5a:02:ce:f1:a3:b1:7b:
                    29:d9:53:d9:54:99:44:7b:41:38:07:29:87:20:6d:
                    6c:30:ea:7a:ef:54:c4:15:0f:b9:e8:43:cf:30:5c:
                    50:46:5f:3b:3f:69:8f:35:e3:f8:ba:47:1b:62:f7:
                    f6:04:11:76:28:41:f0:62:b5:bf:ea:d0:cf:ef:20:
                    f4:bd:82:4f:a9:8b:21:c1:f2:76:dd:5b:4c:61:03:
                    da:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:78:BF:0C:5E:C3:79:8D:D1:B1:78:CB:2E:5A:A5:84:9D:90:6E:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/103f91ab-12ba-38da-ab98-144bafb20e59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:51:3f:9a:70:3b:aa:00:83:54:45:85:73:e2:00:a8:0e:21:
         41:18:72:5c:0c:42:eb:a2:ee:91:f6:8b:9d:2a:41:f7:57:41:
         04:30:98:b6:4f:31:c1:23:8e:0b:f0:91:b1:87:44:e6:ef:b4:
         53:45:d6:d1:5f:36:10:a4:19:3d:79:1d:d3:0d:16:fd:27:ce:
         f3:64:f3:f1:05:94:07:f8:75:19:a4:df:fb:2b:39:33:35:fb:
         60:5e:53:ee:c2:70:64:81:6d:19:46:48:87:65:4f:e2:f0:74:
         f9:5c:17:42:3a:8f:a3:02:90:a2:49:a0:fb:3f:dc:19:21:9e:
         39:16:d9:29:e9:b6:79:7c:c1:ec:58:e1:3d:bf:ed:c5:e5:14:
         10:cd:c8:44:83:94:22:bb:75:64:1e:ed:ba:6c:78:33:bf:df:
         35:1f:db:06:b0:69:f1:5b:93:33:72:f1:7b:0a:04:39:a4:fd:
         56:73:db:c8:66:8b:53:f0:60:58:ee:30:61:52:8c:29:29:00:
         fd:86:7b:d5:b6:c1:b6:11:b3:f4:5b:e7:b3:32:b9:dd:49:8c:
         24:8f:9c:fd:c2:f1:29:c9:ee:5e:58:2c:0c:44:e5:b8:39:f8:
         fd:d6:09:82:bf:1c:8f:bf:0a:8e:f5:75:53:2f:d3:2b:f4:3f:
         51:cc:c9:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdnBiOYgXjGfNXSJ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI0MTAwMjAxMDAzMVoXDTI0MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk
NDc4ZGI1OWItNTRlMS00ZGJhLWI1ZGYtMjgxOTA4YTg4MTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVRzQo3fe7Mw9k1eqJ2M4mFP2wg2Ebef6CHg
RpWWBEMZ9yYI3Q5V28mMtbCF2paVe3jkHeVCmZ5M4b14U06cmDdvUUHfjDDw67NE
hh/ucoumaN5KhuhXhjxusqxlo3vOtKGsC34tolXga5/v40dPCdxbrTqorwazePB5
6RcedTRFZsn1+o6iQLxb3n/oKLIuBz22QAo2qKRaLmMs0arQzCOa9Ox8XrSeKQ9K
c1oCzvGjsXsp2VPZVJlEe0E4BymHIG1sMOp671TEFQ+56EPPMFxQRl87P2mPNeP4
ukcbYvf2BBF2KEHwYrW/6tDP7yD0vYJPqYshwfJ23VtMYQPaQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDF4vwxew3mN0bF4yy5apYSdkG5+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMTAzZjkxYWItMTJiYS0z
OGRhLWFiOTgtMTQ0YmFmYjIwZTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQucLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFRP5pwO6oAg1RFhXPiAKgOIUEYclwMQuui7pH2i50qQfdXQQQwmLZP
McEjjgvwkbGHRObvtFNF1tFfNhCkGT15HdMNFv0nzvNk8/EFlAf4dRmk3/srOTM1
+2BeU+7CcGSBbRlGSIdlT+LwdPlcF0I6j6MCkKJJoPs/3BkhnjkW2Snptnl8wexY
4T2/7cXlFBDNyESDlCK7dWQe7bpseDO/3zUf2wawafFbkzNy8XsKBDmk/VZz28hm
i1PwYFjuMGFSjCkpAP2Ge9W2wbYRs/Rb57Myud1JjCSPnP3C8SnJ7l5YLAxE5bg5
+P3WCYK/HI+/Co71dVMv0yv0P1HMybE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:13 2024 by rpki-client on console-fra.rpki-client.org