Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/166cddb3-cad7-3408-8375-ccc8b82b542e.roa
File:                     166cddb3-cad7-3408-8375-ccc8b82b542e.roa (raw, json)
Hash identifier:          qr7b8K76Gh5sRsZ9CRDamEbjFlLIqJMU27bZmrdqCJg=
Subject key identifier:   E1:D0:2E:90:12:02:16:35:C2:15:03:E4:3C:3C:B7:9E:C3:BD:90:87
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5CEEE7811AB37480BA800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/166cddb3-cad7-3408-8375-ccc8b82b542e.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        24.98.220.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:ce:ee:78:11:ab:37:48:0b:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=072795dc-28d9-47fa-9dc7-970020c3f5bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0c:e0:b8:03:60:53:29:6f:21:a0:5e:cc:f3:
                    3f:09:1b:fe:1e:cf:f0:26:bf:63:f6:9f:33:d0:36:
                    29:10:6f:1a:db:7b:88:96:da:6f:4b:57:62:ae:ef:
                    9d:46:3c:d2:4b:85:b9:95:76:91:d5:d0:99:63:6b:
                    36:6d:ee:a4:ff:09:ad:99:5e:93:e3:80:a1:f1:da:
                    bf:81:92:ae:4b:47:cf:15:be:d5:59:5c:52:35:fe:
                    33:34:58:31:84:c1:d0:ce:99:2c:80:fd:51:0b:15:
                    c8:07:70:9b:bd:81:e7:0b:8c:f6:80:1a:da:e5:54:
                    1f:72:62:dc:4b:9f:a0:0c:26:d5:f9:ff:a6:a7:5a:
                    33:7f:1f:c7:61:f2:a9:d1:81:cc:d9:8a:a7:a6:99:
                    d3:49:ec:59:bd:63:97:c9:a6:d8:21:09:ec:60:f8:
                    d1:b0:be:7f:fd:b8:a1:17:13:9f:43:09:03:18:33:
                    da:48:0c:b2:02:78:96:b9:b8:b9:06:73:eb:a2:95:
                    11:3f:69:ff:01:f8:16:ea:23:54:ff:30:1f:cf:9e:
                    d8:37:b4:db:89:d3:5f:9c:7c:81:c4:40:7e:04:88:
                    71:2f:97:ef:e0:c5:8b:a4:b8:47:fb:64:1c:21:21:
                    c6:50:e7:40:94:99:9c:1e:1d:6c:2d:c5:23:83:3f:
                    5a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D0:2E:90:12:02:16:35:C2:15:03:E4:3C:3C:B7:9E:C3:BD:90:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/166cddb3-cad7-3408-8375-ccc8b82b542e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.98.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d8:9d:6a:b0:23:42:4b:c2:2c:0f:96:09:eb:8a:cf:94:c8:
         e0:05:cd:49:90:71:5b:a4:10:0d:1c:5a:4f:dc:1a:77:00:97:
         0e:c0:fe:c5:95:a6:f2:49:52:5a:8f:4b:8d:8c:6f:92:ce:97:
         28:39:8f:cc:84:58:de:f3:c0:46:d1:e2:40:05:64:40:aa:73:
         62:df:d3:c8:a0:a8:1f:f2:5f:28:dc:0f:d3:a9:4c:1c:6f:e8:
         b2:a8:37:90:7d:89:6f:a1:09:51:56:d7:e1:88:e8:a6:f6:b4:
         dc:1b:cf:8d:c3:f6:e2:cc:e4:03:45:9a:6a:90:ed:0c:bf:9c:
         fe:f8:10:23:8a:3c:a7:26:9b:5d:14:40:09:7f:d7:9b:e0:23:
         28:45:f2:51:3e:2c:ff:16:5f:34:6b:94:c9:ba:d4:dc:28:0c:
         ce:7f:db:09:52:85:97:d5:9d:88:95:2d:3f:aa:f2:08:0b:4b:
         ce:50:d2:b1:c8:86:44:6d:cf:63:fd:5b:3f:14:fc:6c:3d:43:
         18:51:3f:91:c2:ab:c0:3b:d6:53:54:e9:b9:22:d3:2d:48:18:
         d2:87:dc:84:c5:02:8a:af:ed:55:b0:7b:cc:7c:15:a7:ea:49:
         35:ab:ab:5d:ee:41:33:0d:b4:29:b8:2b:e2:e8:e3:23:35:83:
         9c:0d:48:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5c7ueBGrN0gLqAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk
MDcyNzk1ZGMtMjhkOS00N2ZhLTlkYzctOTcwMDIwYzNmNWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAzguANgUylvIaBezPM/CRv+Hs/wJr9j9p8z
0DYpEG8a23uIltpvS1diru+dRjzSS4W5lXaR1dCZY2s2be6k/wmtmV6T44Ch8dq/
gZKuS0fPFb7VWVxSNf4zNFgxhMHQzpksgP1RCxXIB3CbvYHnC4z2gBra5VQfcmLc
S5+gDCbV+f+mp1ozfx/HYfKp0YHM2YqnppnTSexZvWOXyabYIQnsYPjRsL5//bih
FxOfQwkDGDPaSAyyAniWubi5BnPropURP2n/AfgW6iNU/zAfz57YN7TbidNfnHyB
xEB+BIhxL5fv4MWLpLhH+2QcISHGUOdAlJmcHh1sLcUjgz9alwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOHQLpASAhY1whUD5Dw8t57DvZCHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTY2Y2RkYjMtY2FkNy0z
NDA4LTgzNzUtY2NjOGI4MmI1NDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGGLcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGPYnWqwI0JLwiwPlgnris+UyOAFzUmQcVukEA0cWk/cGncAlw7A/sWV
pvJJUlqPS42Mb5LOlyg5j8yEWN7zwEbR4kAFZECqc2Lf08igqB/yXyjcD9OpTBxv
6LKoN5B9iW+hCVFW1+GI6Kb2tNwbz43D9uLM5ANFmmqQ7Qy/nP74ECOKPKcmm10U
QAl/15vgIyhF8lE+LP8WXzRrlMm61NwoDM5/2wlShZfVnYiVLT+q8ggLS85Q0rHI
hkRtz2P9Wz8U/Gw9QxhRP5HCq8A71lNU6bki0y1IGNKH3ITFAoqv7VWwe8x8Fafq
STWrq13uQTMNtCm4K+Lo4yM1g5wNSJw=
-----END CERTIFICATE-----
Generated at Sun Dec 22 03:53:35 2024 by rpki-client on console-ams.rpki-client.org