Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1/b9c23f12-fd16-324d-8dd8-27625535fe4e.roa
File:                     b9c23f12-fd16-324d-8dd8-27625535fe4e.roa (raw, json)
Hash identifier:          ABEIyNxMz4yHVDOVZ74MoAR1t5WYCj48xk71H9Neft0=
Subject key identifier:   4D:A4:D3:E8:4C:B6:F1:5F:80:AB:71:D0:61:C2:9B:4B:D5:42:BC:8A
Certificate issuer:       /CN=9b363682-90e4-4356-b229-137b0af7add1
Certificate serial:       010D0C9F432858479D76BA06B2B960D4B8976080
Authority key identifier: B8:C2:54:40:4B:0D:00:73:64:D1:35:7E:B7:FF:4C:73:D0:29:A0:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1/b9c23f12-fd16-324d-8dd8-27625535fe4e.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     19782
IP address blocks:        66.205.160.0/20 maxlen: 24
                          66.254.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1/9b363682-90e4-4356-b229-137b0af7add1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1/9b363682-90e4-4356-b229-137b0af7add1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:ba:06:b2:b9:60:d4:b8:97:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b363682-90e4-4356-b229-137b0af7add1
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=e7d40ff9-c702-4ea5-ab61-03dbed34ec61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b6:f4:66:d6:2c:cb:cb:5c:5a:09:25:43:fb:
                    04:aa:1b:2a:a4:59:56:d1:87:05:39:68:36:c3:d3:
                    57:ed:76:3c:cb:cd:f6:d7:5e:cf:93:3e:63:2a:89:
                    ca:ed:26:be:4a:e8:5b:c3:2c:b9:4d:56:01:10:a2:
                    08:d7:46:3d:ce:ce:48:63:a1:b1:30:1a:3d:ce:a6:
                    14:49:77:c5:47:fe:04:42:0d:0d:1f:89:98:e3:41:
                    60:93:7a:9d:b1:6d:5d:dd:f5:f6:65:e6:62:0c:6e:
                    27:71:72:da:80:30:95:fe:ce:94:92:87:35:dc:2f:
                    66:27:d8:5c:9a:6f:1e:69:ef:9e:a5:85:20:5e:bb:
                    76:9a:17:e0:84:ec:34:81:48:62:69:e6:a2:b2:3d:
                    1e:fc:e2:54:41:c3:8e:ed:a8:93:d6:64:2f:c4:ca:
                    56:72:86:13:26:da:42:27:cc:63:12:bf:a4:5a:84:
                    b3:6a:bd:57:4c:4c:c0:03:49:bf:57:f1:b1:ea:f3:
                    90:b1:90:e6:8d:89:fa:10:57:2f:3f:99:07:d1:bf:
                    7c:42:25:3e:f7:82:21:0b:96:e6:e6:a8:b3:e5:7b:
                    16:2b:e1:e4:32:ad:b8:dc:69:2e:f6:37:0b:fd:a0:
                    e2:1f:de:52:e9:5b:e5:78:76:e7:75:8d:35:e0:01:
                    ba:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A4:D3:E8:4C:B6:F1:5F:80:AB:71:D0:61:C2:9B:4B:D5:42:BC:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1/b9c23f12-fd16-324d-8dd8-27625535fe4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1/9b363682-90e4-4356-b229-137b0af7add1.crl

            X509v3 Authority Key Identifier:
                keyid:B8:C2:54:40:4B:0D:00:73:64:D1:35:7E:B7:FF:4C:73:D0:29:A0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.160.0/20
                  66.254.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:dc:7e:d0:77:25:bc:f9:d7:c1:e6:4b:c7:0b:db:50:0c:32:
         84:f9:f5:24:89:4f:27:98:b3:10:05:aa:be:f3:90:8e:05:09:
         67:82:d0:67:50:23:d0:17:10:66:0f:6b:4e:01:b5:61:1c:60:
         0a:45:98:6d:c7:8e:05:bb:5c:52:0f:a8:86:14:e9:2a:15:1f:
         ac:fd:aa:32:b9:f4:ac:fb:72:9c:c8:73:f1:b6:f9:89:be:6e:
         b4:cb:06:88:ff:5a:e7:f8:65:9a:79:fe:91:59:ab:90:f0:61:
         b4:43:16:7d:2e:9e:cd:71:ad:07:89:1c:00:3f:fc:25:ed:47:
         1c:ab:79:46:55:ad:bf:69:f3:7a:a6:cd:56:2f:87:a0:43:d6:
         65:6a:2c:fa:6c:9b:a2:d0:05:f6:b4:3c:08:31:09:10:c9:4d:
         90:83:78:24:66:ae:4c:73:ba:e4:79:98:df:f6:d2:4c:1a:34:
         d9:d9:29:27:9f:f0:73:4b:11:24:d2:e0:e8:50:9c:d9:b4:b9:
         cc:d7:cc:2c:4e:c8:fd:ed:67:bf:1a:ae:b3:79:c1:a9:ef:98:
         7d:44:3b:9a:11:e8:25:c3:f8:17:88:a9:07:3c:43:bd:c2:08:
         92:a7:a5:a6:98:35:e0:52:4f:78:ea:a1:29:a9:44:4d:df:be:
         47:c3:f0:25
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEeddroGsrlg1LiXYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWIzNjM2ODItOTBlNC00MzU2LWIyMjktMTM3YjBhZjdh
ZGQxMB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
ZTdkNDBmZjktYzcwMi00ZWE1LWFiNjEtMDNkYmVkMzRlYzYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7b0ZtYsy8tcWgklQ/sEqhsqpFlW0YcFOWg2
w9NX7XY8y832117Pkz5jKonK7Sa+Suhbwyy5TVYBEKII10Y9zs5IY6GxMBo9zqYU
SXfFR/4EQg0NH4mY40Fgk3qdsW1d3fX2ZeZiDG4ncXLagDCV/s6Ukoc13C9mJ9hc
mm8eae+epYUgXrt2mhfghOw0gUhiaeaisj0e/OJUQcOO7aiT1mQvxMpWcoYTJtpC
J8xjEr+kWoSzar1XTEzAA0m/V/Gx6vOQsZDmjYn6EFcvP5kH0b98QiU+94IhC5bm
5qiz5XsWK+HkMq243Gku9jcL/aDiH95S6VvleHbndY014AG6eQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFE2k0+hMtvFfgKtx0GHCm0vVQryKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YjM2
MzY4Mi05MGU0LTQzNTYtYjIyOS0xMzdiMGFmN2FkZDEvYjljMjNmMTItZmQxNi0z
MjRkLThkZDgtMjc2MjU1MzVmZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWIzNjM2ODItOTBlNC00MzU2LWIy
MjktMTM3YjBhZjdhZGQxLzliMzYzNjgyLTkwZTQtNDM1Ni1iMjI5LTEzN2IwYWY3
YWRkMS5jcmwwHwYDVR0jBBgwFoAUuMJUQEsNAHNk0TV+t/9Mc9ApoAkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85YjM2MzY4Mi05MGU0LTQzNTYtYjIyOS0xMzdi
MGFmN2FkZDEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEQs2gAwQF
Qv7gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADHcftB3Jbz518HmS8cL21AMMoT59SSJTyeYsxAFqr7zkI4F
CWeC0GdQI9AXEGYPa04BtWEcYApFmG3HjgW7XFIPqIYU6SoVH6z9qjK59Kz7cpzI
c/G2+Ym+brTLBoj/Wuf4ZZp5/pFZq5DwYbRDFn0uns1xrQeJHAA//CXtRxyreUZV
rb9p83qmzVYvh6BD1mVqLPpsm6LQBfa0PAgxCRDJTZCDeCRmrkxzuuR5mN/20kwa
NNnZKSef8HNLESTS4OhQnNm0uczXzCxOyP3tZ78arrN5wanvmH1EO5oR6CXD+BeI
qQc8Q73CCJKnpaaYNeBST3jqoSmpRE3fvkfD8CU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:14 2024 by rpki-client on console-ams.rpki-client.org