Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/3f18e022-7ff7-3353-bf86-55fe45b8ac33.roa
File:                     3f18e022-7ff7-3353-bf86-55fe45b8ac33.roa (raw, json)
Hash identifier:          AlkPOCd1ZKXO7PJed5W0NIrKC5eKQkWSn3eLkErp/as=
Subject key identifier:   94:4B:DB:E7:6E:50:EC:39:19:90:2A:E3:06:18:09:DA:AF:6F:E1:77
Certificate issuer:       /CN=b493bda5-0caa-4a42-8d7a-d94d27b079ea
Certificate serial:       010D0C9F43285847D404940DF0E11AE201843700
Authority key identifier: 41:03:7A:0E:B7:0C:51:C0:85:17:D3:8C:50:A7:12:96:E7:39:58:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/3f18e022-7ff7-3353-bf86-55fe45b8ac33.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     40353
IP address blocks:        162.252.165.0/24 maxlen: 24
                          162.252.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/b493bda5-0caa-4a42-8d7a-d94d27b079ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/b493bda5-0caa-4a42-8d7a-d94d27b079ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:94:0d:f0:e1:1a:e2:01:84:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b493bda5-0caa-4a42-8d7a-d94d27b079ea
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=48b0d2fa-d99a-4fff-8ffe-6d297a8ca7d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:96:64:2b:76:92:31:63:02:90:fe:f3:ed:81:
                    01:8c:fe:d5:7d:39:4c:89:8c:c8:71:35:95:ea:43:
                    40:33:fc:a7:4e:e1:96:b9:97:77:c8:b5:e6:39:c0:
                    c5:51:53:70:6b:42:33:fd:e2:57:21:03:58:bf:15:
                    86:cd:b8:37:32:e6:13:30:d7:7d:a3:8d:3c:78:89:
                    30:6b:ea:3b:31:62:1b:5d:fa:d1:e0:d3:33:32:6d:
                    bd:f5:3c:ef:f0:aa:7c:68:57:86:e1:90:59:12:6c:
                    e1:ea:87:a8:ba:b1:54:47:71:c4:94:59:31:e4:fc:
                    51:0a:8d:13:5b:24:12:89:8f:00:eb:a6:e0:64:fa:
                    53:cf:92:38:d4:c1:46:26:1d:45:20:50:66:45:37:
                    aa:15:b9:48:95:1d:b9:43:be:2c:0a:58:36:d9:d2:
                    13:e3:01:f7:96:c9:c3:df:a7:33:0d:6e:04:c5:e2:
                    41:cf:ad:4c:f1:58:45:66:b7:2c:fe:ec:97:b5:b3:
                    92:2c:01:cc:02:4c:ed:f9:5b:c3:56:c9:81:57:aa:
                    e5:d5:0e:db:ac:d1:bd:75:60:8b:f2:32:cc:f1:e3:
                    0b:05:c0:3a:4d:40:ac:9d:09:4b:5a:fe:69:90:d0:
                    5d:fa:03:69:44:11:4b:b8:25:8e:47:87:9d:94:a8:
                    31:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4B:DB:E7:6E:50:EC:39:19:90:2A:E3:06:18:09:DA:AF:6F:E1:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/3f18e022-7ff7-3353-bf86-55fe45b8ac33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/b493bda5-0caa-4a42-8d7a-d94d27b079ea.crl

            X509v3 Authority Key Identifier:
                keyid:41:03:7A:0E:B7:0C:51:C0:85:17:D3:8C:50:A7:12:96:E7:39:58:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.165.0-162.252.166.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:cc:ca:01:ea:05:65:93:83:89:00:40:b5:a3:8f:cf:6d:24:
         cf:0e:d0:bf:60:c9:f5:32:60:c4:4f:49:13:34:15:7f:ca:fc:
         4d:b6:8b:80:49:1c:dc:ce:c8:81:aa:a5:54:27:91:72:da:a9:
         12:81:03:a1:fe:cd:ea:47:19:7e:cf:6e:f9:49:61:09:cd:ef:
         57:0d:c3:16:39:4b:71:46:39:82:48:66:41:81:73:3e:ca:ef:
         38:fb:90:0b:45:28:9e:ec:23:03:1b:d9:60:a1:09:95:6a:23:
         29:27:9d:e3:6c:04:c7:31:ef:c2:7b:d6:f3:a3:ce:0b:f4:c5:
         fd:a2:27:a4:ad:91:a7:32:c6:2f:b9:9e:48:34:07:09:26:43:
         d6:ad:58:01:1f:fb:b3:2e:ae:fb:ef:ed:5c:ea:11:41:ef:2a:
         d6:67:40:3b:80:66:33:bc:8f:8f:08:ac:4f:22:65:41:b2:62:
         74:f4:5b:9a:ae:48:76:35:70:37:1a:f2:36:f2:87:89:a9:fc:
         95:bb:2c:39:37:79:ec:4e:91:92:dc:8b:71:2e:96:67:a2:02:
         71:59:23:7b:f2:85:11:0b:62:a9:e1:9f:57:6a:9f:ac:d8:4a:
         50:d7:98:1b:8c:3b:47:85:fc:34:7a:85:05:61:fc:11:0c:8b:
         5e:1e:7c:8c
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEfUBJQN8OEa4gGENwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQ5M2JkYTUtMGNhYS00YTQyLThkN2EtZDk0ZDI3YjA3
OWVhMB4XDTI0MTExMDAyMDAyN1oXDTI1MDIwODAyMDAyN1owLzEtMCsGA1UEAxMk
NDhiMGQyZmEtZDk5YS00ZmZmLThmZmUtNmQyOTdhOGNhN2QyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJZkK3aSMWMCkP7z7YEBjP7VfTlMiYzIcTWV
6kNAM/ynTuGWuZd3yLXmOcDFUVNwa0Iz/eJXIQNYvxWGzbg3MuYTMNd9o408eIkw
a+o7MWIbXfrR4NMzMm299Tzv8Kp8aFeG4ZBZEmzh6oeourFUR3HElFkx5PxRCo0T
WyQSiY8A66bgZPpTz5I41MFGJh1FIFBmRTeqFblIlR25Q74sClg22dIT4wH3lsnD
36czDW4ExeJBz61M8VhFZrcs/uyXtbOSLAHMAkzt+VvDVsmBV6rl1Q7brNG9dWCL
8jLM8eMLBcA6TUCsnQlLWv5pkNBd+gNpRBFLuCWOR4edlKgxzwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFJRL2+duUOw5GZAq4wYYCdqvb+F3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNDkz
YmRhNS0wY2FhLTRhNDItOGQ3YS1kOTRkMjdiMDc5ZWEvM2YxOGUwMjItN2ZmNy0z
MzUzLWJmODYtNTVmZTQ1YjhhYzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjQ5M2JkYTUtMGNhYS00YTQyLThk
N2EtZDk0ZDI3YjA3OWVhL2I0OTNiZGE1LTBjYWEtNGE0Mi04ZDdhLWQ5NGQyN2Iw
NzllYS5jcmwwHwYDVR0jBBgwFoAUQQN6DrcMUcCFF9OMUKcSluc5WOkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNDkzYmRhNS0wY2FhLTRhNDItOGQ3YS1kOTRk
MjdiMDc5ZWEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACi/KUD
BACi/KYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAe8zKAeoFZZODiQBAtaOPz20kzw7Qv2DJ9TJgxE9JEzQV
f8r8TbaLgEkc3M7IgaqlVCeRctqpEoEDof7N6kcZfs9u+UlhCc3vVw3DFjlLcUY5
gkhmQYFzPsrvOPuQC0UonuwjAxvZYKEJlWojKSed42wExzHvwnvW86POC/TF/aIn
pK2RpzLGL7meSDQHCSZD1q1YAR/7sy6u++/tXOoRQe8q1mdAO4BmM7yPjwisTyJl
QbJidPRbmq5IdjVwNxryNvKHian8lbssOTd57E6RktyLcS6WZ6ICcVkje/KFEQti
qeGfV2qfrNhKUNeYG4w7R4X8NHqFBWH8EQyLXh58jA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:05 2024 by rpki-client on console-fra.rpki-client.org