Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/88d09cd1-551f-39a3-b6e6-dbc014ff8bcf.roa
File:                     88d09cd1-551f-39a3-b6e6-dbc014ff8bcf.roa (raw, json)
Hash identifier:          wGgdenPBm8/2QE80dtxqprT7saVed53MpO/ttdpvcbU=
Subject key identifier:   80:D4:56:C2:98:28:9C:C8:B4:AC:9B:57:4A:36:5F:EE:21:43:AE:A6
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1730EB69934
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/88d09cd1-551f-39a3-b6e6-dbc014ff8bcf.roa
Signing time:             Thu 02 Jul 2020 08:48:34 +0000
ROA not before:           Tue 30 Jul 2019 04:00:00 +0000
ROA not after:            Mon 30 Jul 2029 04:00:00 +0000
asID:                     14618
IP address blocks:        72.167.168.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:0e:b6:99:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Jul 30 04:00:00 2019 GMT
            Not After : Jul 30 04:00:00 2029 GMT
        Subject: CN=53c2466b-6e2a-445c-bfd5-1875d4ca3395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3c:3d:a0:77:ca:17:78:9f:b6:1a:91:05:ce:
                    b1:49:fe:19:78:5a:b8:54:c2:0d:60:b5:22:f5:3d:
                    73:3f:ec:30:45:30:84:21:f9:66:b3:04:13:81:a5:
                    15:3a:f0:84:0a:c7:39:21:db:61:39:4e:ac:10:91:
                    73:d3:15:a9:2a:a1:13:15:19:a6:97:73:80:32:25:
                    41:a9:fa:15:b0:93:04:f1:cd:03:0b:77:8d:91:4c:
                    ff:f4:13:89:b0:d0:2e:71:45:08:a7:b0:fc:f1:2c:
                    bb:e6:f9:38:22:7e:92:59:50:e3:6d:d4:31:5f:de:
                    cf:d7:50:98:d0:e7:66:ba:2b:75:56:0e:85:d1:5d:
                    d1:e9:69:bf:e2:5e:5c:8f:8a:e4:c0:96:84:3b:5a:
                    53:65:7b:49:94:11:ad:a9:0a:bf:e5:80:bd:83:43:
                    97:0d:b7:63:ad:3a:67:02:18:97:28:0e:e5:50:0c:
                    cd:94:7b:25:07:ed:2f:ee:44:da:51:6b:d0:29:1e:
                    fb:26:75:8b:14:75:1a:e7:1e:6c:07:70:9a:b0:dd:
                    9d:cf:4d:91:64:f5:80:53:ce:b2:c1:2e:01:fb:4c:
                    49:29:95:b8:4c:19:8a:2a:a5:79:b7:26:e4:3c:66:
                    dc:0e:1c:de:b4:09:28:14:97:29:8d:7f:f9:fc:20:
                    6e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D4:56:C2:98:28:9C:C8:B4:AC:9B:57:4A:36:5F:EE:21:43:AE:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/88d09cd1-551f-39a3-b6e6-dbc014ff8bcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.167.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:2b:5a:1d:73:c5:ae:df:66:6e:1d:e5:13:71:68:33:83:60:
         f7:6f:13:f6:6e:2c:3b:6e:35:41:fd:ab:30:4f:1b:ba:9a:5f:
         e5:94:89:bf:e2:16:1b:d4:6e:fd:34:e2:38:c1:b9:d3:cb:05:
         8c:ad:27:29:de:5c:60:4c:58:53:b4:88:81:09:69:4b:e1:54:
         a8:1b:b9:8b:1c:76:b3:b4:2a:36:0d:fb:48:ad:f8:eb:3c:15:
         89:09:dc:8b:3a:87:ae:7f:e7:5c:d9:1c:c1:dc:7a:d0:3d:df:
         11:8f:f6:fb:52:ae:23:97:e8:ef:ff:2f:da:0d:34:58:7d:d1:
         78:dc:d4:44:37:2d:80:41:fa:9d:db:99:76:f3:5a:2c:0e:eb:
         bf:1c:76:36:db:e6:76:00:31:d7:af:6e:83:11:e3:b9:5c:76:
         af:9d:6d:40:71:2c:8b:e7:e9:07:bd:0c:df:5f:3f:63:be:a7:
         3f:36:5d:cd:43:f1:13:b1:44:f7:7d:b6:ac:15:fd:39:57:20:
         04:0f:95:1d:b2:73:25:6c:45:3c:64:a4:b8:b5:a5:0c:f8:74:
         45:bf:3e:2e:e9:92:c7:db:5f:85:68:2c:8e:e2:a3:de:d7:de:
         e0:10:f6:51:39:24:19:8c:53:4c:57:28:44:3f:7a:6c:ef:53:
         17:37:f4:c5
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcw62mTQwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNjZjEz
ZjAeFw0xOTA3MzAwNDAwMDBaFw0yOTA3MzAwNDAwMDBaMC8xLTArBgNVBAMTJDUz
YzI0NjZiLTZlMmEtNDQ1Yy1iZmQ1LTE4NzVkNGNhMzM5NTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALk8PaB3yhd4n7YakQXOsUn+GXhauFTCDWC1IvU9
cz/sMEUwhCH5ZrMEE4GlFTrwhArHOSHbYTlOrBCRc9MVqSqhExUZppdzgDIlQan6
FbCTBPHNAwt3jZFM//QTibDQLnFFCKew/PEsu+b5OCJ+kllQ423UMV/ez9dQmNDn
ZrordVYOhdFd0elpv+JeXI+K5MCWhDtaU2V7SZQRrakKv+WAvYNDlw23Y606ZwIY
lygO5VAMzZR7JQftL+5E2lFr0Cke+yZ1ixR1GucebAdwmrDdnc9NkWT1gFPOssEu
AftMSSmVuEwZiiqlebcm5Dxm3A4c3rQJKBSXKY1/+fwgbosCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSA1FbCmCicyLSsm1dKNl/uIUOupjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNl
ODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2NmMTNmLzg4ZDA5Y2QxLTU1MWYtMzlh
My1iNmU2LWRiYzAxNGZmOGJjZi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzllZDVjZTgwLTIyNGUtNDZhYi05NGYx
LTFhZmNlOGNjZjEzZi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2Yx
M2YuY3JsMB8GA1UdIwQYMBaAFDgdn6a6fMGoRK4J/loAlp07/OEPMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4
Y2NmMTNmLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA0inqDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAEitaHXPFrt9mbh3lE3FoM4Ng928T9m4sO241Qf2rME8buppf5ZSJv+IWG9Ru
/TTiOMG508sFjK0nKd5cYExYU7SIgQlpS+FUqBu5ixx2s7QqNg37SK346zwViQnc
izqHrn/nXNkcwdx60D3fEY/2+1KuI5fo7/8v2g00WH3ReNzURDctgEH6nduZdvNa
LA7rvxx2NtvmdgAx169ugxHjuVx2r51tQHEsi+fpB70M318/Y76nPzZdzUPxE7FE
9322rBX9OVcgBA+VHbJzJWxFPGSkuLWlDPh0Rb8+LumSx9tfhWgsjuKj3tfe4BD2
UTkkGYxTTFcoRD96bO9TFzf0xQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:04 2024 by rpki-client on console-ams.rpki-client.org