Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a7d6264a-5ef8-3c58-b023-be42241ad77a.roa
File:                     a7d6264a-5ef8-3c58-b023-be42241ad77a.roa (raw, json)
Hash identifier:          vkYhaUAttJwz3CPAATD3y2+adEzFnIqLtK+umU3mpGE=
Subject key identifier:   98:13:1D:0E:29:8C:23:33:30:4A:6D:A3:31:41:3E:BF:04:1B:38:4C
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F43285847AB6C08B440C519A2A0693370
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a7d6264a-5ef8-3c58-b023-be42241ad77a.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     18013
IP address blocks:        198.44.160.0/24 maxlen: 24
                          198.44.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:08:b4:40:c5:19:a2:a0:69:33:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=12b84ba7-389c-4ad3-9719-c0894fe91acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d9:04:2f:a4:0a:f8:13:ce:11:fb:2b:1d:8a:
                    dc:88:a8:b5:e7:67:a5:b3:65:c3:a2:92:09:45:07:
                    0f:4a:42:4e:11:d8:b9:ac:69:2f:30:cd:12:b0:51:
                    7f:64:a7:04:37:79:09:77:92:a9:ea:22:1a:9d:e4:
                    17:95:25:08:3a:0f:81:90:8d:aa:49:b1:78:50:8a:
                    33:51:cc:37:03:20:51:a7:87:cf:92:94:85:86:25:
                    b2:f8:f8:aa:5e:7f:20:99:dc:ec:c7:0b:5f:06:e4:
                    97:17:b4:96:4b:e3:cb:f0:59:f2:e9:87:b3:be:7c:
                    48:4f:4f:20:f4:a8:f3:a2:9c:52:26:09:66:a5:d4:
                    7d:58:f0:9f:ab:7e:f3:f7:49:a1:a4:a5:10:ef:c9:
                    04:dc:e1:e4:ea:31:65:95:4c:61:03:76:a5:b9:55:
                    e1:47:d9:60:fd:37:89:a7:7d:e8:22:7e:1f:6c:4e:
                    9f:a0:85:4c:a2:d5:8e:c4:3b:a4:07:e3:03:7d:fc:
                    42:d8:1a:bb:95:ee:1e:14:06:ed:1c:29:07:8c:a0:
                    fd:d5:94:7e:9e:72:31:86:7e:d4:29:50:cc:cd:86:
                    ca:96:a4:86:33:91:25:f8:c4:f5:a6:ef:fd:45:db:
                    cb:da:66:16:80:36:5b:58:ea:70:e3:1e:01:4f:9e:
                    1c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:13:1D:0E:29:8C:23:33:30:4A:6D:A3:31:41:3E:BF:04:1B:38:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a7d6264a-5ef8-3c58-b023-be42241ad77a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.44.160.0/24
                  198.44.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:3e:22:e6:e6:5f:3d:8d:fd:30:00:91:7e:03:36:1c:b3:78:
         ef:c1:1b:46:19:1e:be:db:d9:cd:c3:fa:d1:c6:fe:28:d4:c1:
         4c:91:7a:c9:f7:27:75:29:9d:57:c9:84:0d:ba:d3:e0:e2:3f:
         a5:25:0a:b9:73:90:b3:41:e2:ea:fe:d2:a6:99:80:5c:1a:39:
         74:3a:51:4c:8f:d2:17:31:5d:63:e7:f3:8f:00:10:3e:65:14:
         78:b1:0d:54:09:d9:53:98:7c:e6:48:3d:fb:6f:9d:db:dc:9e:
         97:22:fe:27:da:76:f4:18:e5:52:8f:d2:3b:8c:c7:68:fb:38:
         c6:a7:9d:73:90:48:d3:1e:f7:3b:95:a5:ff:02:81:b9:8f:4e:
         94:e7:c0:4e:b5:16:7a:5c:96:ab:73:96:76:62:a0:7a:3f:6e:
         bb:76:90:fb:67:86:64:5f:58:85:1c:df:ba:92:29:a7:9c:63:
         b9:67:21:a3:a8:ae:fd:4c:62:4d:8a:ac:b5:cc:74:90:5c:4b:
         ab:f3:f2:d9:da:95:5a:65:cd:86:d7:53:cc:63:8b:d5:f4:7d:
         80:5c:0e:c7:1c:3a:e3:76:fa:e8:1a:2a:6d:d1:89:d3:44:fd:
         15:66:c6:c6:f9:bc:04:0e:5d:0a:c3:c1:a2:6b:69:6f:fc:16:
         0d:f1:eb:97
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEerbAi0QMUZoqBpM3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz
ZjgyMB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk
MTJiODRiYTctMzg5Yy00YWQzLTk3MTktYzA4OTRmZTkxYWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNkEL6QK+BPOEfsrHYrciKi152els2XDopIJ
RQcPSkJOEdi5rGkvMM0SsFF/ZKcEN3kJd5Kp6iIaneQXlSUIOg+BkI2qSbF4UIoz
Ucw3AyBRp4fPkpSFhiWy+PiqXn8gmdzsxwtfBuSXF7SWS+PL8Fny6YezvnxIT08g
9KjzopxSJglmpdR9WPCfq37z90mhpKUQ78kE3OHk6jFllUxhA3aluVXhR9lg/TeJ
p33oIn4fbE6foIVMotWOxDukB+MDffxC2Bq7le4eFAbtHCkHjKD91ZR+nnIxhn7U
KVDMzYbKlqSGM5El+MT1pu/9RdvL2mYWgDZbWOpw4x4BT54c5wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFJgTHQ4pjCMzMEptozFBPr8EGzhMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0
OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYTdkNjI2NGEtNWVmOC0z
YzU4LWIwMjMtYmU0MjI0MWFkNzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk
ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj
M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm
NjYwYzNmODIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxiygAwQA
xiylMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAAU+IubmXz2N/TAAkX4DNhyzeO/BG0YZHr7b2c3D+tHG/ijU
wUyResn3J3UpnVfJhA260+DiP6UlCrlzkLNB4ur+0qaZgFwaOXQ6UUyP0hcxXWPn
848AED5lFHixDVQJ2VOYfOZIPftvndvcnpci/ifadvQY5VKP0juMx2j7OMannXOQ
SNMe9zuVpf8CgbmPTpTnwE61FnpclqtzlnZioHo/brt2kPtnhmRfWIUc37qSKaec
Y7lnIaOorv1MYk2KrLXMdJBcS6vz8tnalVplzYbXU8xji9X0fYBcDsccOuN2+uga
Km3RidNE/RVmxsb5vAQOXQrDwaJraW/8Fg3x65c=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:29 2024 by rpki-client on console-fra.rpki-client.org