Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8deb922b-0e17-33e6-8899-02af35ac4053.roa
File:                     8deb922b-0e17-33e6-8899-02af35ac4053.roa (raw, json)
Hash identifier:          9p65wJ5pk/AiyLWwOSkK2D0kooSOUn0ab/cgTReBeaM=
Subject key identifier:   8B:62:49:9C:C8:96:6A:A5:61:52:D2:C7:7D:3E:EF:29:28:C9:B6:F1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B354D6963423822D07500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8deb922b-0e17-33e6-8899-02af35ac4053.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     54934
IP address blocks:        216.66.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:35:4d:69:63:42:38:22:d0:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=10122f1f-170f-4cae-9d85-d125084df048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6a:df:b2:35:d2:fa:31:86:0f:d2:16:66:93:
                    8f:54:9c:0f:15:9e:62:42:29:5c:04:b9:47:fc:ed:
                    5c:63:bd:c5:da:0d:74:71:94:e1:b0:a4:8f:81:c5:
                    fb:7b:7c:b7:70:d9:ac:ae:e9:a6:89:b4:78:b7:bc:
                    19:21:27:30:7f:2d:9e:38:4a:57:93:26:a5:ea:2b:
                    76:fe:9f:9c:66:76:6f:a2:ca:71:fb:ce:19:c2:14:
                    9c:f5:16:d7:5f:e0:5a:a7:41:43:a4:4c:ab:d0:e1:
                    59:0e:82:66:13:31:0d:3a:20:73:c9:05:dd:ee:06:
                    85:7b:95:9b:8c:f1:85:8c:3e:8e:c5:c5:e2:ba:a7:
                    0e:08:6d:09:17:a7:d5:e1:f4:94:13:e5:16:7b:bb:
                    9f:34:ca:ee:2a:9f:da:98:0b:1b:5a:ca:2c:cf:d6:
                    93:1b:6c:9b:12:2a:68:b2:6b:0a:35:78:6e:fd:90:
                    76:3b:0f:b4:dc:96:0c:fa:41:8d:42:df:ee:4f:73:
                    a3:20:f2:36:0b:69:b7:86:ac:36:dd:e7:5b:12:be:
                    ba:b8:0d:44:d0:eb:6a:8c:6a:22:7a:3c:d3:d0:9f:
                    46:91:6a:4c:0d:04:d6:dd:85:2f:04:16:b1:98:d4:
                    73:95:25:7f:a4:ac:02:c0:34:9f:f3:c0:4e:93:7e:
                    0a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:62:49:9C:C8:96:6A:A5:61:52:D2:C7:7D:3E:EF:29:28:C9:B6:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8deb922b-0e17-33e6-8899-02af35ac4053.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:12:75:58:07:3b:47:53:f8:2e:3b:2a:26:55:e4:34:d5:65:
         00:c6:f9:f6:01:ed:8d:74:c2:7a:82:3c:00:16:b7:28:54:76:
         c1:98:77:16:18:0e:65:e7:ab:c2:d2:31:03:e6:4b:cd:11:88:
         4f:68:e2:b7:f7:a2:34:b2:b3:07:09:cb:50:4f:6f:7c:d8:c8:
         1a:b1:d7:ff:fa:bf:04:72:73:a2:4a:ab:e7:08:3c:7b:9a:d0:
         aa:25:0a:56:29:1f:30:25:9f:f7:19:92:c3:07:1d:95:46:80:
         7b:70:b7:41:42:24:09:cc:fa:32:71:7c:c4:9c:2a:ff:91:ba:
         6a:49:84:44:e1:c6:45:01:b6:c0:e6:58:be:83:6a:01:c2:dc:
         4e:7a:1b:4b:cb:12:08:12:b6:65:dc:62:e9:7e:27:fc:7d:b9:
         ce:cf:20:d9:a4:d3:8a:79:27:2a:92:15:a9:e9:bc:45:ec:e7:
         d6:76:dc:11:4c:d0:3c:ba:40:6d:67:03:88:b0:54:9a:da:68:
         32:b1:29:b4:06:33:d2:44:72:6b:5d:58:a0:fa:91:22:23:12:
         47:42:49:73:ee:f0:f0:d3:6f:c6:28:4d:47:08:d7:2c:3b:68:
         91:56:e0:2b:7f:fa:58:50:66:a1:f0:f1:45:06:33:a3:ad:4d:
         f5:d2:ec:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc6WzVNaWNCOCLQdQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
MTAxMjJmMWYtMTcwZi00Y2FlLTlkODUtZDEyNTA4NGRmMDQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWrfsjXS+jGGD9IWZpOPVJwPFZ5iQilcBLlH
/O1cY73F2g10cZThsKSPgcX7e3y3cNmsrummibR4t7wZIScwfy2eOEpXkyal6it2
/p+cZnZvospx+84ZwhSc9RbXX+Bap0FDpEyr0OFZDoJmEzENOiBzyQXd7gaFe5Wb
jPGFjD6OxcXiuqcOCG0JF6fV4fSUE+UWe7ufNMruKp/amAsbWsosz9aTG2ybEipo
smsKNXhu/ZB2Ow+03JYM+kGNQt/uT3OjIPI2C2m3hqw23edbEr66uA1E0OtqjGoi
ejzT0J9GkWpMDQTW3YUvBBaxmNRzlSV/pKwCwDSf88BOk34KYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFItiSZzIlmqlYVLSx30+7ykoybbxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGRlYjkyMmItMGUxNy0z
M2U2LTg4OTktMDJhZjM1YWM0MDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EI3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKASdVgHO0dT+C47KiZV5DTVZQDG+fYB7Y10wnqCPAAWtyhUdsGYdxYY
DmXnq8LSMQPmS80RiE9o4rf3ojSyswcJy1BPb3zYyBqx1//6vwRyc6JKq+cIPHua
0KolClYpHzAln/cZksMHHZVGgHtwt0FCJAnM+jJxfMScKv+RumpJhEThxkUBtsDm
WL6DagHC3E56G0vLEggStmXcYul+J/x9uc7PINmk04p5JyqSFanpvEXs59Z23BFM
0Dy6QG1nA4iwVJraaDKxKbQGM9JEcmtdWKD6kSIjEkdCSXPu8PDTb8YoTUcI1yw7
aJFW4Ct/+lhQZqHw8UUGM6OtTfXS7Nk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:37 2024 by rpki-client on console-fra.rpki-client.org