Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f3e77d2e-b2c9-3bcd-9ca1-1d89366c5ed8.roa
File:                     f3e77d2e-b2c9-3bcd-9ca1-1d89366c5ed8.roa (raw, json)
Hash identifier:          TYQ4P3uf6Q1Ly5lOFUDaAsc4SeQj+Lmesvj7X+cZE5M=
Subject key identifier:   EF:ED:AE:63:D7:B8:0C:3C:30:A6:10:7D:6C:72:A4:B2:B9:81:85:01
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847CFD4DD30EC4FEB4F88EB86C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f3e77d2e-b2c9-3bcd-9ca1-1d89366c5ed8.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     18779
IP address blocks:        166.88.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:dd:30:ec:4f:eb:4f:88:eb:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=1d73a7cb-1d00-4ff7-abfd-125227793843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:48:3b:09:11:09:6c:63:80:ba:18:57:8e:da:
                    26:ea:28:65:89:72:24:ce:56:f9:17:65:0d:f8:5f:
                    6b:d5:6b:ba:ad:f7:82:17:6a:ee:d4:8c:40:d7:93:
                    5a:a3:7b:77:a5:32:48:66:0b:76:92:bd:a4:aa:59:
                    58:8d:fe:49:88:01:89:9d:bd:84:6f:f4:0e:ef:62:
                    fd:b6:ad:12:d7:b2:6d:7f:ce:ac:17:f3:51:6a:8e:
                    16:9e:2e:24:9d:90:d9:21:e7:a3:8b:ab:f7:6d:06:
                    65:3a:61:bc:d5:02:09:90:96:40:e5:5a:31:f2:53:
                    50:3f:c4:43:03:17:65:f7:4e:ce:a0:45:67:f8:0e:
                    fe:e3:55:68:f9:09:b9:f2:79:d1:ec:97:72:58:bf:
                    76:c4:44:1a:52:55:01:9f:be:9c:d0:d9:9d:0a:22:
                    55:ae:c7:98:e8:c1:c4:a3:e7:67:2f:7d:60:a8:b2:
                    2a:87:92:23:2e:f1:60:67:20:eb:b5:a7:d2:c6:fd:
                    e5:a6:81:00:f8:11:a4:19:55:2d:81:49:29:6a:0f:
                    f4:59:1f:ca:7a:97:26:9c:3d:6f:64:06:0e:79:28:
                    d3:12:0b:06:88:22:fe:95:09:09:37:fb:d5:88:f2:
                    88:aa:67:0e:cc:b2:26:5b:17:01:ff:c1:50:88:6d:
                    94:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:ED:AE:63:D7:B8:0C:3C:30:A6:10:7D:6C:72:A4:B2:B9:81:85:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f3e77d2e-b2c9-3bcd-9ca1-1d89366c5ed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:85:d7:c2:b7:21:5c:8c:56:dd:fd:92:66:93:69:7f:84:8e:
         28:04:3f:f1:0e:d5:b4:5e:57:fc:21:9a:56:89:a0:c8:95:06:
         01:75:e6:22:73:9c:60:87:bc:b3:2a:cb:17:8f:83:8b:5d:c4:
         b1:08:5a:d1:fb:af:61:39:2b:c2:b5:ab:16:1d:c6:d0:31:35:
         48:4c:d7:49:15:cd:e9:d8:f6:42:48:ff:1a:ca:39:28:b0:6d:
         a7:29:fa:3a:29:10:28:87:61:fa:4e:a3:26:07:7a:e3:5c:e6:
         6c:ac:11:a4:3c:6d:53:d0:6e:c4:69:03:c2:4a:93:e0:6c:3d:
         57:ac:11:de:67:04:72:96:69:cb:24:0b:f5:a0:05:d1:a1:ae:
         f8:02:0a:be:49:f8:66:89:9b:ed:30:ed:08:13:c1:07:9f:b3:
         28:f0:e9:2e:84:78:26:ce:7a:d8:bc:42:e0:35:9d:49:79:36:
         d6:d1:85:3c:96:a0:f6:60:2f:ae:77:12:93:c7:bc:56:c6:b9:
         57:36:61:dc:6c:56:28:f7:e7:c9:79:04:30:23:31:74:26:28:
         dc:8a:e5:31:1e:1e:aa:93:0a:3e:fb:78:72:1d:6f:f9:ea:d8:
         44:b5:ef:f4:88:86:d7:a1:e7:10:bd:d0:34:47:bc:3f:f2:0a:
         2d:bf:d2:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP1N0w7E/rT4jrhsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MTEwODE0MDAzOVoXDTI1MDIwNjE0MDAzOVowLzEtMCsGA1UEAxMk
MWQ3M2E3Y2ItMWQwMC00ZmY3LWFiZmQtMTI1MjI3NzkzODQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykg7CREJbGOAuhhXjtom6ihliXIkzlb5F2UN
+F9r1Wu6rfeCF2ru1IxA15Nao3t3pTJIZgt2kr2kqllYjf5JiAGJnb2Eb/QO72L9
tq0S17Jtf86sF/NRao4Wni4knZDZIeeji6v3bQZlOmG81QIJkJZA5Vox8lNQP8RD
Axdl907OoEVn+A7+41Vo+Qm58nnR7JdyWL92xEQaUlUBn76c0NmdCiJVrseY6MHE
o+dnL31gqLIqh5IjLvFgZyDrtafSxv3lpoEA+BGkGVUtgUkpag/0WR/KepcmnD1v
ZAYOeSjTEgsGiCL+lQkJN/vViPKIqmcOzLImWxcB/8FQiG2U8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO/trmPXuAw8MKYQfWxypLK5gYUBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjNlNzdkMmUtYjJjOS0z
YmNkLTljYTEtMWQ4OTM2NmM1ZWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplghMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAACF18K3IVyMVt39kmaTaX+EjigEP/EO1bReV/whmlaJoMiVBgF15iJz
nGCHvLMqyxePg4tdxLEIWtH7r2E5K8K1qxYdxtAxNUhM10kVzenY9kJI/xrKOSiw
bacp+jopECiHYfpOoyYHeuNc5mysEaQ8bVPQbsRpA8JKk+BsPVesEd5nBHKWacsk
C/WgBdGhrvgCCr5J+GaJm+0w7QgTwQefsyjw6S6EeCbOeti8QuA1nUl5NtbRhTyW
oPZgL653EpPHvFbGuVc2YdxsVij358l5BDAjMXQmKNyK5TEeHqqTCj77eHIdb/nq
2ES17/SIhteh5xC90DRHvD/yCi2/0lg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:39 2024 by rpki-client on console-ams.rpki-client.org