Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e63f42e1-13bd-33c0-b30a-4c3a6bcc6e4e.roa
File:                     e63f42e1-13bd-33c0-b30a-4c3a6bcc6e4e.roa (raw, json)
Hash identifier:          tvsAu6CtO0RNS6NdNk9oonxSs1nJP6hDyp2PJwBBlrI=
Subject key identifier:   D6:40:3C:ED:31:DA:B8:C4:0F:B2:BE:66:9F:38:08:CA:A6:FF:E3:1E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F89567E05B04D4C8C3D5FFC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e63f42e1-13bd-33c0-b30a-4c3a6bcc6e4e.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     36103
IP address blocks:        66.220.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:67:e0:5b:04:d4:c8:c3:d5:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=bf9f88d3-da9b-4cc5-98a7-c62aeda2f2ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7e:b4:e7:17:8e:7f:0f:ae:eb:01:42:f2:ec:
                    a9:bb:34:b9:87:90:c0:3e:be:13:24:c2:28:45:f5:
                    00:a7:f5:92:4e:da:9a:25:3f:04:99:f5:58:13:a0:
                    d2:65:ef:e8:42:7f:45:cf:48:33:4d:e5:9f:c7:63:
                    b3:1b:5b:c5:3f:bd:c5:07:74:e8:1f:af:9d:cb:15:
                    b2:77:ac:63:78:11:44:6c:42:fb:ba:da:78:11:fb:
                    2c:8a:19:b6:eb:27:50:c9:a1:0a:3d:1a:b4:25:5b:
                    24:7d:d1:bb:92:9a:0e:21:e4:8c:84:19:53:a9:d3:
                    78:93:94:da:20:4b:3b:e7:66:50:97:04:99:83:0c:
                    00:ee:12:92:ec:39:0f:df:02:c4:f2:bc:89:f5:7c:
                    6a:5b:3f:9f:36:e6:71:42:90:3e:ad:8a:5a:3b:ff:
                    36:d8:3c:2d:e9:db:b2:69:72:31:19:ac:e0:c8:5f:
                    c2:93:48:d6:fa:16:4f:45:6f:8d:31:0a:86:b2:58:
                    ed:67:0d:83:ac:99:2e:3c:ef:c7:ec:12:6f:31:09:
                    cd:68:e5:fa:72:45:33:74:41:e7:b4:e6:6a:ff:dc:
                    4b:7c:08:de:0b:15:6b:77:02:ce:44:11:cb:0a:f6:
                    d0:e6:0f:9d:76:f1:51:be:13:99:2c:70:12:28:c2:
                    9e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:40:3C:ED:31:DA:B8:C4:0F:B2:BE:66:9F:38:08:CA:A6:FF:E3:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e63f42e1-13bd-33c0-b30a-4c3a6bcc6e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.220.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d0:e5:33:78:e8:2e:3f:fc:89:1e:59:2e:34:b8:cc:c0:57:
         29:dd:f4:3f:85:d0:b3:16:6d:47:76:74:fd:21:1c:23:bd:78:
         c6:cc:37:35:7a:30:9b:02:36:56:84:8d:9d:12:f5:68:42:5e:
         d5:77:da:7d:78:05:bb:8e:6c:6c:14:48:67:5c:ba:76:ce:2b:
         64:be:f2:21:96:00:bf:b9:1c:ab:dc:5a:c9:b4:53:90:7a:94:
         f8:c6:c6:f7:7d:cb:a2:ca:ff:c0:82:e1:c6:2d:a3:9b:95:4f:
         b9:1c:0f:d2:9c:a2:0f:b7:d9:6f:10:53:0c:54:85:cb:b5:f4:
         aa:6d:af:7f:e5:16:37:ec:30:bb:5c:be:d7:48:91:ce:ae:ee:
         99:43:1e:cf:e5:95:1a:98:db:27:a5:ca:15:76:23:a6:b4:2b:
         a6:9a:d5:90:07:c4:88:b1:09:b8:3a:2f:38:da:14:fc:bf:1c:
         af:3b:53:4d:6c:ec:a1:b8:8e:d0:25:41:29:01:cf:b3:6c:bf:
         7f:85:66:1a:cb:13:96:3a:65:55:d8:4c:b5:fe:c8:d2:15:80:
         b4:bb:eb:bb:7e:70:36:4e:98:21:c7:ae:57:38:9f:ae:a6:ea:
         e4:e0:5a:d1:29:4f:a0:d6:ed:85:df:1f:ee:0b:5b:7a:1f:b8:
         b2:96:a1:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET4lWfgWwTUyMPV/8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDIyMjAyMDAyN1oXDTI0MDUyMjAxMDAyN1owLzEtMCsGA1UEAxMk
YmY5Zjg4ZDMtZGE5Yi00Y2M1LTk4YTctYzYyYWVkYTJmMmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH605xeOfw+u6wFC8uypuzS5h5DAPr4TJMIo
RfUAp/WSTtqaJT8EmfVYE6DSZe/oQn9Fz0gzTeWfx2OzG1vFP73FB3ToH6+dyxWy
d6xjeBFEbEL7utp4Efssihm26ydQyaEKPRq0JVskfdG7kpoOIeSMhBlTqdN4k5Ta
IEs752ZQlwSZgwwA7hKS7DkP3wLE8ryJ9XxqWz+fNuZxQpA+rYpaO/822Dwt6duy
aXIxGazgyF/Ck0jW+hZPRW+NMQqGsljtZw2DrJkuPO/H7BJvMQnNaOX6ckUzdEHn
tOZq/9xLfAjeCxVrdwLORBHLCvbQ5g+ddvFRvhOZLHASKMKeNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNZAPO0x2rjED7K+Zp84CMqm/+MeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTYzZjQyZTEtMTNiZC0z
M2MwLWIzMGEtNGMzYTZiY2M2ZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtwbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABfQ5TN46C4//IkeWS40uMzAVynd9D+F0LMWbUd2dP0hHCO9eMbMNzV6
MJsCNlaEjZ0S9WhCXtV32n14BbuObGwUSGdcunbOK2S+8iGWAL+5HKvcWsm0U5B6
lPjGxvd9y6LK/8CC4cYto5uVT7kcD9Kcog+32W8QUwxUhcu19Kptr3/lFjfsMLtc
vtdIkc6u7plDHs/llRqY2yelyhV2I6a0K6aa1ZAHxIixCbg6LzjaFPy/HK87U01s
7KG4jtAlQSkBz7Nsv3+FZhrLE5Y6ZVXYTLX+yNIVgLS767t+cDZOmCHHrlc4n66m
6uTgWtEpT6DW7YXfH+4LW3ofuLKWoSA=
-----END CERTIFICATE-----
Generated at Mon May 6 12:02:19 2024 by rpki-client on console-fra.rpki-client.org