Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/25001385-197b-32c6-85bb-280e83510152.roa
File:                     25001385-197b-32c6-85bb-280e83510152.roa (raw, json)
Hash identifier:          j3tkaFFMNf0Cb0zhNvDw1bQMxLK6F7E7pnNqhmc1o20=
Subject key identifier:   D4:80:34:C5:25:68:80:EF:F8:4F:A5:87:D5:D1:29:1E:09:44:76:B6
Certificate issuer:       /CN=0a2d75f1-8f4b-49d3-9661-209643086151
Certificate serial:       010D0C9F432858477660FDEB94FB6B3D1E5E6560
Authority key identifier: 0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/25001385-197b-32c6-85bb-280e83510152.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     63031
IP address blocks:        66.118.48.0/22 maxlen: 24
                          66.187.196.0/22 maxlen: 24
                          130.51.152.0/22 maxlen: 24
                          162.251.112.0/22 maxlen: 24
                          172.110.188.0/22 maxlen: 24
                          192.251.238.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:60:fd:eb:94:fb:6b:3d:1e:5e:65:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a2d75f1-8f4b-49d3-9661-209643086151
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=f2e1c024-9705-4864-ac64-375a89f85f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b1:3b:c8:31:77:90:bc:b9:ac:ea:e1:65:d6:
                    24:e4:18:cf:25:60:6c:d8:c7:a0:b4:ac:a9:9f:f6:
                    08:20:43:ca:5e:94:2d:79:6e:bf:3a:b9:2f:43:b2:
                    ac:7d:51:16:be:7b:f8:67:1c:d4:41:05:57:91:37:
                    36:a1:ac:04:94:65:6e:b6:a1:88:b9:da:62:9b:4c:
                    b3:d8:7b:1d:14:28:3c:5f:9e:f0:cf:a4:7f:27:ca:
                    76:fd:78:b7:40:d1:7f:ed:ba:c7:dd:8c:4f:64:cd:
                    ad:f9:09:00:a0:84:d7:35:d1:4f:5e:da:a1:85:7d:
                    59:7a:58:ce:71:c8:3a:b1:ee:02:e7:6e:37:c5:ac:
                    8d:9f:4c:c9:82:53:ab:76:21:99:36:66:50:f9:f4:
                    c9:fe:7d:c2:e0:55:1f:04:20:08:44:49:a7:db:71:
                    5b:5a:31:bc:f2:c3:62:af:96:31:e0:6e:ca:49:fb:
                    e7:a0:82:75:c9:a3:2d:14:94:3c:6d:cb:98:42:3e:
                    3b:37:7f:8b:5b:b8:2b:e9:93:dc:2d:ac:8d:12:ec:
                    a6:32:ae:f2:c1:3c:47:01:77:af:c8:d6:68:49:43:
                    d5:2b:06:ba:b9:ec:3d:90:34:9f:76:0d:31:02:32:
                    ec:d6:8a:0d:c0:b0:e4:75:c9:9f:09:d5:eb:cf:dc:
                    10:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:80:34:C5:25:68:80:EF:F8:4F:A5:87:D5:D1:29:1E:09:44:76:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/25001385-197b-32c6-85bb-280e83510152.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl

            X509v3 Authority Key Identifier:
                keyid:0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.48.0/22
                  66.187.196.0/22
                  130.51.152.0/22
                  162.251.112.0/22
                  172.110.188.0/22
                  192.251.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:32:84:f1:0e:43:55:c6:23:71:04:d3:b5:33:d6:c5:ea:e3:
         86:e6:68:e6:c3:2c:0e:02:a5:7a:c2:81:8c:f2:6b:62:03:05:
         84:1d:0f:8c:24:6e:ca:1e:4f:de:c3:1b:91:37:35:ad:36:90:
         ed:eb:37:ac:b5:21:b0:53:50:c7:f8:e9:6d:a5:93:8e:00:65:
         fa:08:59:11:17:1f:f2:56:02:8f:75:c4:8c:23:60:12:f8:31:
         95:54:b2:41:e6:75:4c:74:37:2e:d4:6d:16:0c:44:a5:96:79:
         3a:fc:2c:b5:1c:80:67:7f:5c:37:95:75:ef:b8:b1:b9:bd:4a:
         39:25:f7:69:f1:ed:ff:70:b2:b5:64:23:6f:b3:2c:b3:58:37:
         14:7d:bb:48:58:a9:61:6e:08:0d:4f:41:d2:eb:64:f6:d7:52:
         68:a7:2d:35:e6:6d:ce:8b:12:ce:57:e9:9f:b3:5a:5b:38:11:
         7b:88:33:86:c0:11:31:48:7b:24:9c:57:a7:50:93:b2:48:44:
         c4:89:79:d3:73:a3:4f:0b:42:0c:1d:1f:70:06:4d:43:38:e6:
         88:dc:ed:40:58:42:ff:94:99:15:48:14:d9:af:36:8c:88:c4:
         b7:f5:92:a0:e7:ed:ef:ad:0b:cf:e7:08:8b:e4:96:54:96:cb:
         d5:f9:0b:86
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEd2YP3rlPtrPR5eZWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGEyZDc1ZjEtOGY0Yi00OWQzLTk2NjEtMjA5NjQzMDg2
MTUxMB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk
ZjJlMWMwMjQtOTcwNS00ODY0LWFjNjQtMzc1YTg5Zjg1ZjZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbE7yDF3kLy5rOrhZdYk5BjPJWBs2MegtKyp
n/YIIEPKXpQteW6/OrkvQ7KsfVEWvnv4ZxzUQQVXkTc2oawElGVutqGIudpim0yz
2HsdFCg8X57wz6R/J8p2/Xi3QNF/7brH3YxPZM2t+QkAoITXNdFPXtqhhX1ZeljO
ccg6se4C5243xayNn0zJglOrdiGZNmZQ+fTJ/n3C4FUfBCAIREmn23FbWjG88sNi
r5Yx4G7KSfvnoIJ1yaMtFJQ8bcuYQj47N3+LW7gr6ZPcLayNEuymMq7ywTxHAXev
yNZoSUPVKwa6uew9kDSfdg0xAjLs1ooNwLDkdcmfCdXrz9wQJwIDAQABo4IDczCC
A28wHQYDVR0OBBYEFNSANMUlaIDv+E+lh9XRKR4JRHa2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTJk
NzVmMS04ZjRiLTQ5ZDMtOTY2MS0yMDk2NDMwODYxNTEvMjUwMDEzODUtMTk3Yi0z
MmM2LTg1YmItMjgwZTgzNTEwMTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGEyZDc1ZjEtOGY0Yi00OWQzLTk2
NjEtMjA5NjQzMDg2MTUxLzBhMmQ3NWYxLThmNGItNDlkMy05NjYxLTIwOTY0MzA4
NjE1MS5jcmwwHwYDVR0jBBgwFoAUDbM8/J5AXR7QSu6z+vGosBd4TH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTJkNzVmMS04ZjRiLTQ5ZDMtOTY2MS0yMDk2
NDMwODYxNTEuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCQnYwAwQC
QrvEAwQCgjOYAwQCovtwAwQCrG68AwQBwPvuMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIMyhPEOQ1XGI3EE
07Uz1sXq44bmaObDLA4CpXrCgYzya2IDBYQdD4wkbsoeT97DG5E3Na02kO3rN6y1
IbBTUMf46W2lk44AZfoIWREXH/JWAo91xIwjYBL4MZVUskHmdUx0Ny7UbRYMRKWW
eTr8LLUcgGd/XDeVde+4sbm9Sjkl92nx7f9wsrVkI2+zLLNYNxR9u0hYqWFuCA1P
QdLrZPbXUminLTXmbc6LEs5X6Z+zWls4EXuIM4bAETFIeyScV6dQk7JIRMSJedNz
o08LQgwdH3AGTUM45ojc7UBYQv+UmRVIFNmvNoyIxLf1kqDn7e+tC8/nCIvkllSW
y9X5C4Y=
-----END CERTIFICATE-----
Generated at Mon Nov 25 06:06:12 2024 by rpki-client on console-fra.rpki-client.org