Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/582e1428-9190-35a6-b731-502824801cd6.roa
File:                     582e1428-9190-35a6-b731-502824801cd6.roa (raw, json)
Hash identifier:          nUhZlo38jaHuCuA6qcgQvy9NfYFPT0KCBW2KQsmp7tk=
Subject key identifier:   89:32:EF:70:64:38:3A:FA:C0:B7:B3:46:62:E4:18:F6:3C:64:04:48
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F8957905BACACC1D983DB6C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/582e1428-9190-35a6-b731-502824801cd6.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     54288
IP address blocks:        66.160.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:79:05:ba:ca:cc:1d:98:3d:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=401482ea-8b8e-4efd-ab9f-c630bd8acacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5b:0c:29:08:78:30:d1:f1:37:48:52:4c:46:
                    87:56:e1:ed:42:b1:15:76:d3:49:50:70:09:19:8d:
                    10:98:99:bc:81:bb:ca:11:e5:c1:c2:f3:53:0f:35:
                    ea:b5:45:5e:23:d2:7b:b6:2d:2e:3b:8f:ed:0f:7e:
                    2d:20:ae:8e:5a:20:65:85:43:2d:90:ac:15:35:66:
                    53:7a:22:91:30:9d:46:aa:bf:a8:36:bd:68:b7:28:
                    69:a9:f2:e4:08:6b:20:c0:8c:e4:10:a8:92:0f:fc:
                    4c:03:eb:59:56:2f:0b:69:98:05:c7:8b:58:20:b0:
                    61:54:21:a7:38:2d:28:4e:b9:10:f2:28:89:d0:45:
                    6e:ba:50:96:8d:52:07:b5:82:09:7f:5f:4d:fd:be:
                    37:04:47:40:18:c3:bb:33:c8:6e:8e:eb:7b:0c:3a:
                    06:18:d2:e2:a6:59:cc:ed:6c:e7:85:f8:84:48:a1:
                    1b:1e:49:51:76:ad:7a:1b:e8:31:67:a0:49:8d:f9:
                    72:ca:70:3f:28:fa:e3:ca:0b:49:a9:00:6d:de:0e:
                    da:1b:5a:be:78:34:33:90:28:b5:da:bc:1c:9d:c1:
                    6d:e0:55:18:0f:ab:de:8d:98:b9:65:ea:41:a1:80:
                    0c:a0:6e:04:b1:05:b7:13:b8:c8:59:ae:98:50:f6:
                    96:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:32:EF:70:64:38:3A:FA:C0:B7:B3:46:62:E4:18:F6:3C:64:04:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/582e1428-9190-35a6-b731-502824801cd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.160.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:40:00:49:09:2e:0e:4b:a7:9a:62:a8:6c:e5:55:09:0f:8f:
         1b:04:22:ec:e2:e7:37:ee:f4:64:f7:a0:72:53:8c:e9:9b:24:
         c0:9d:62:cd:28:f9:d8:be:aa:22:b8:ea:8e:48:f0:0f:53:c0:
         bf:4c:a8:24:2d:fe:b8:fe:09:79:f1:ec:c4:d2:c4:d6:40:5f:
         c9:9f:65:f4:82:fa:af:99:53:69:37:1b:65:84:31:27:0c:36:
         9f:41:f9:55:04:ff:1f:70:0e:ce:8b:88:70:a4:37:cd:6b:a7:
         4b:53:4c:db:1e:d1:df:8e:f4:2c:7e:ee:c3:4b:74:1a:58:62:
         42:f3:3e:6a:20:66:20:f8:fd:5c:df:d1:fa:b0:b6:f8:1c:73:
         24:48:5e:a8:f5:e5:b6:e7:a3:e2:cc:41:82:5a:ae:09:8c:9b:
         bd:0b:e0:08:a6:ad:7f:c8:0b:55:3b:80:5c:39:3f:5b:6f:f6:
         6e:11:c7:b4:84:9f:08:15:b5:67:9f:79:f2:dd:3d:fa:39:f4:
         fd:0c:0a:c6:26:b6:35:35:41:0a:0a:15:b1:6d:5c:4c:09:78:
         48:73:36:14:5d:f4:04:4f:8d:d2:65:82:ac:eb:d5:f1:a1:ee:
         bd:e1:31:0a:a8:aa:32:8a:96:0e:bc:77:b6:fe:61:74:b7:e4:
         f3:c1:d0:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET4lXkFusrMHZg9tsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDIyMjAyMDAyN1oXDTI0MDUyMjAxMDAyN1owLzEtMCsGA1UEAxMk
NDAxNDgyZWEtOGI4ZS00ZWZkLWFiOWYtYzYzMGJkOGFjYWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFsMKQh4MNHxN0hSTEaHVuHtQrEVdtNJUHAJ
GY0QmJm8gbvKEeXBwvNTDzXqtUVeI9J7ti0uO4/tD34tIK6OWiBlhUMtkKwVNWZT
eiKRMJ1Gqr+oNr1otyhpqfLkCGsgwIzkEKiSD/xMA+tZVi8LaZgFx4tYILBhVCGn
OC0oTrkQ8iiJ0EVuulCWjVIHtYIJf19N/b43BEdAGMO7M8hujut7DDoGGNLiplnM
7WznhfiESKEbHklRdq16G+gxZ6BJjflyynA/KPrjygtJqQBt3g7aG1q+eDQzkCi1
2rwcncFt4FUYD6vejZi5ZepBoYAMoG4EsQW3E7jIWa6YUPaWBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIky73BkODr6wLezRmLkGPY8ZARIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTgyZTE0MjgtOTE5MC0z
NWE2LWI3MzEtNTAyODI0ODAxY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqChMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAERAAEkJLg5Lp5piqGzlVQkPjxsEIuzi5zfu9GT3oHJTjOmbJMCdYs0o
+di+qiK46o5I8A9TwL9MqCQt/rj+CXnx7MTSxNZAX8mfZfSC+q+ZU2k3G2WEMScM
Np9B+VUE/x9wDs6LiHCkN81rp0tTTNse0d+O9Cx+7sNLdBpYYkLzPmogZiD4/Vzf
0fqwtvgccyRIXqj15bbno+LMQYJargmMm70L4AimrX/IC1U7gFw5P1tv9m4Rx7SE
nwgVtWefefLdPfo59P0MCsYmtjU1QQoKFbFtXEwJeEhzNhRd9ARPjdJlgqzr1fGh
7r3hMQqoqjKKlg68d7b+YXS35PPB0Ig=
-----END CERTIFICATE-----
Generated at Mon May 6 20:28:38 2024 by rpki-client on console-fra.rpki-client.org