Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/2f20042a-7cf2-3c73-98ad-bc3e5167c5a0.roa
File:                     2f20042a-7cf2-3c73-98ad-bc3e5167c5a0.roa (raw, json)
Hash identifier:          WeBI8mpbceCOOpx8QsjJvjuVZ1pexEv7mZWDebMzWT4=
Subject key identifier:   09:2E:01:9D:BC:85:F6:BF:80:1F:8E:47:F7:48:9A:17:F5:5E:5B:55
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F432858487A208C18862CB9C1AA1B6BC0
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/2f20042a-7cf2-3c73-98ad-bc3e5167c5a0.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     13445
IP address blocks:        66.163.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:8c:18:86:2c:b9:c1:aa:1b:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=810bb841-29c4-4d04-98d4-5e1feecdf7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d6:b2:f4:b3:9f:0c:41:32:d0:4a:77:53:73:
                    9b:2f:43:99:63:27:00:56:15:bd:2f:4e:1e:24:d2:
                    11:6f:c7:86:d1:03:8b:18:a8:71:47:72:71:6c:2a:
                    c9:a6:78:19:bc:50:6c:5d:fb:88:06:b5:18:0c:ec:
                    26:b5:31:76:74:f2:c3:74:cc:ef:36:5b:85:d3:df:
                    31:66:54:58:23:05:c3:76:a3:f4:79:99:cd:93:22:
                    ca:3e:9a:5c:be:7e:07:d7:3d:d9:31:5a:bb:6c:b9:
                    4c:ab:c6:b1:40:81:80:c8:a5:0b:0e:6a:68:88:ed:
                    fd:0a:51:0f:a0:16:38:8d:26:7b:99:0a:d5:a7:4d:
                    b7:af:9a:69:75:cb:67:64:03:84:46:31:d7:54:18:
                    d1:d2:9e:db:2c:11:17:67:66:fb:be:06:58:0a:9e:
                    42:50:e2:0f:84:b3:ea:d6:d1:e1:44:a4:8b:82:af:
                    7c:22:f2:1f:d5:0c:b6:9c:5a:7f:24:25:c7:44:6e:
                    ef:19:83:1c:b7:d7:6f:15:ef:f6:47:80:b9:2c:5e:
                    02:68:4b:b2:cf:74:e0:ab:84:fb:6d:07:c4:72:c0:
                    26:71:a2:d8:92:03:f8:f7:b7:c0:1d:7d:f4:6a:c5:
                    e5:3c:cf:ba:dd:7a:51:46:9f:85:07:74:4b:26:a2:
                    2f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2E:01:9D:BC:85:F6:BF:80:1F:8E:47:F7:48:9A:17:F5:5E:5B:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/2f20042a-7cf2-3c73-98ad-bc3e5167c5a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:01:02:e7:c7:41:11:15:a4:54:17:ed:13:15:48:55:1b:7e:
         7e:cb:7d:1b:b0:d2:32:01:2b:cd:e5:b9:fb:86:4e:68:bc:bf:
         ca:45:1d:37:45:18:11:3d:ab:59:42:b8:d2:36:77:03:7a:f3:
         90:c3:88:f2:9e:56:6a:79:f8:22:cd:26:8d:89:c2:23:8c:e4:
         95:d4:7d:cd:b1:1e:a7:be:f5:a3:ae:53:e6:c5:6f:25:4e:bd:
         59:6a:f3:4c:f1:c5:5c:0f:f2:b1:e4:a0:76:08:21:ff:a6:f3:
         72:37:77:91:0a:52:74:0e:0e:18:06:dc:53:c4:d8:92:c7:ec:
         c9:8e:e1:71:b9:b5:3f:97:0b:8c:b1:c5:6e:a7:b4:b0:b3:2f:
         9b:15:2b:9b:ac:95:5e:80:2f:62:25:f9:21:f5:0a:1e:f3:96:
         67:9d:9a:c5:64:e1:b4:f8:80:ad:fa:3f:a3:58:f7:be:0a:ae:
         7b:7a:1a:f8:03:25:84:01:89:dd:59:f9:91:22:f5:c2:01:cf:
         b6:eb:c0:cd:25:06:33:90:91:f6:0a:c8:bf:ed:61:47:68:bd:
         e5:ae:15:4d:b3:4b:8e:b7:1e:fe:f2:41:c2:2b:2d:7d:16:0b:
         bb:9d:fc:e0:55:fe:e5:79:d9:16:f6:38:c5:40:b3:5c:d0:04:
         ca:61:09:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IIwYhiy5waoba8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5
ZGRmMB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
ODEwYmI4NDEtMjljNC00ZDA0LTk4ZDQtNWUxZmVlY2RmN2VkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59ay9LOfDEEy0Ep3U3ObL0OZYycAVhW9L04e
JNIRb8eG0QOLGKhxR3JxbCrJpngZvFBsXfuIBrUYDOwmtTF2dPLDdMzvNluF098x
ZlRYIwXDdqP0eZnNkyLKPppcvn4H1z3ZMVq7bLlMq8axQIGAyKULDmpoiO39ClEP
oBY4jSZ7mQrVp023r5ppdctnZAOERjHXVBjR0p7bLBEXZ2b7vgZYCp5CUOIPhLPq
1tHhRKSLgq98IvIf1Qy2nFp/JCXHRG7vGYMct9dvFe/2R4C5LF4CaEuyz3Tgq4T7
bQfEcsAmcaLYkgP497fAHX30asXlPM+63XpRRp+FB3RLJqIvWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAkuAZ28hfa/gB+OR/dImhf1XltVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk
MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvMmYyMDA0MmEtN2NmMi0z
YzczLTk4YWQtYmMzZTUxNjdjNWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy
NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3
OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3
MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqM0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFgBAufHQREVpFQX7RMVSFUbfn7LfRuw0jIBK83lufuGTmi8v8pFHTdF
GBE9q1lCuNI2dwN685DDiPKeVmp5+CLNJo2JwiOM5JXUfc2xHqe+9aOuU+bFbyVO
vVlq80zxxVwP8rHkoHYIIf+m83I3d5EKUnQODhgG3FPE2JLH7MmO4XG5tT+XC4yx
xW6ntLCzL5sVK5uslV6AL2Il+SH1Ch7zlmedmsVk4bT4gK36P6NY974Krnt6GvgD
JYQBid1Z+ZEi9cIBz7brwM0lBjOQkfYKyL/tYUdoveWuFU2zS463Hv7yQcIrLX0W
C7ud/OBV/uV52Rb2OMVAs1zQBMphCVc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:53 2025 by rpki-client