Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/274940e5-0730-372f-bdea-bc5ac690921e.roa
File:                     274940e5-0730-372f-bdea-bc5ac690921e.roa (raw, json)
Hash identifier:          8LpGYOq0knBrFcK2gSYzvfjY7+TWZQtAok1GlCaiTkM=
Subject key identifier:   31:6C:70:10:4C:25:A8:FF:B1:C9:20:4D:67:43:B1:24:91:54:77:1A
Certificate issuer:       /CN=324a8cbd-4953-435c-bace-07af1279e9bc
Certificate serial:       010D0C9F43285847872136194981D98E8FA21440
Authority key identifier: B9:51:8D:60:2D:87:3E:B0:5F:09:28:22:A7:33:96:C6:4B:25:3E:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/274940e5-0730-372f-bdea-bc5ac690921e.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     398025
IP address blocks:        67.219.0.0/20 maxlen: 20
                          69.1.224.0/19 maxlen: 19
                          161.82.64.0/18 maxlen: 18
                          170.103.64.0/18 maxlen: 18
                          204.63.0.0/20 maxlen: 20
                          207.29.224.0/19 maxlen: 19
                          208.100.192.0/18 maxlen: 18
                          216.128.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:36:19:49:81:d9:8e:8f:a2:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324a8cbd-4953-435c-bace-07af1279e9bc
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=c09f0452-cb01-4c7d-9d39-9e8f5a9b1082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d8:59:f8:e9:b6:74:f0:53:f3:cc:99:92:b4:
                    fa:85:ec:b4:d0:e4:5c:04:3f:e1:c5:6d:06:dd:35:
                    5b:1f:c4:45:7f:33:a5:7e:a2:d1:f9:09:45:b7:a6:
                    54:8f:26:4c:eb:a1:c2:17:66:2d:b3:ea:c0:ff:a5:
                    6c:cc:9e:74:b4:5d:90:93:7f:a7:a4:e8:d9:91:e5:
                    d5:9d:ff:b9:e1:ad:ec:94:bf:1d:09:c7:b0:ba:32:
                    68:b4:63:ed:19:a6:84:73:0e:65:70:a8:a6:6d:f6:
                    8b:b7:8b:9d:72:87:92:1b:ea:8e:60:fe:31:d1:d3:
                    81:94:af:06:26:72:56:97:34:c4:55:59:86:47:65:
                    7b:e7:2a:a4:8b:b3:c3:16:86:55:34:30:77:1e:12:
                    56:eb:23:1f:31:54:07:b6:7f:ba:89:ca:85:3c:cb:
                    4c:05:c8:de:38:0b:44:5d:3a:1f:26:dd:79:88:55:
                    e2:1f:12:a9:ba:e8:06:35:c6:b8:f4:7b:6f:4e:23:
                    01:ad:8b:cb:30:8d:89:85:2d:62:df:c0:ed:f2:1e:
                    7d:8f:bf:13:d6:f2:da:e4:a5:5c:9b:b5:17:0f:3b:
                    6f:a2:3a:2e:06:91:58:93:02:ff:78:2e:36:c9:0d:
                    cb:63:c7:e6:76:8e:87:92:d3:3b:0a:d5:bc:dd:d4:
                    97:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6C:70:10:4C:25:A8:FF:B1:C9:20:4D:67:43:B1:24:91:54:77:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/274940e5-0730-372f-bdea-bc5ac690921e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.crl

            X509v3 Authority Key Identifier:
                keyid:B9:51:8D:60:2D:87:3E:B0:5F:09:28:22:A7:33:96:C6:4B:25:3E:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.0.0/20
                  69.1.224.0/19
                  161.82.64.0/18
                  170.103.64.0/18
                  204.63.0.0/20
                  207.29.224.0/19
                  208.100.192.0/18
                  216.128.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:c2:19:b5:fd:2b:4a:2b:27:05:87:57:a8:c4:a8:e9:dd:57:
         10:c9:23:b6:d6:da:e6:00:52:b0:ac:2a:69:ab:2b:dd:c4:1b:
         e9:be:7e:70:73:d7:bb:4f:5f:b8:65:cd:d8:94:57:2a:22:95:
         28:66:cf:ac:e0:fc:31:b7:b7:34:97:b0:77:b9:e0:99:42:1d:
         75:52:da:14:0f:c4:bc:3c:89:41:e9:c1:cb:94:fb:ba:71:3b:
         8e:9b:01:dd:f7:96:50:9a:df:c7:dd:b7:4f:ea:d0:f0:7f:d7:
         f4:28:a0:0d:03:9d:db:6a:f5:4c:1b:e2:e8:58:5a:7e:e2:0a:
         79:8d:ab:8a:f5:51:6f:5d:5a:fd:12:4c:9c:53:4f:69:f5:ca:
         5a:05:ff:a5:6a:95:43:ed:97:57:a9:98:cf:72:41:88:01:99:
         91:11:b4:97:df:df:d6:93:44:ae:a8:6f:24:b7:ce:df:66:b5:
         81:b1:cb:f8:e1:ca:68:14:3d:ce:66:bd:28:32:77:73:b7:23:
         79:86:ab:ca:7f:ef:b1:0f:dd:4a:f3:5d:3c:8c:a8:eb:59:28:
         39:dd:a5:59:5f:14:e0:a0:70:b7:62:59:02:69:26:c7:73:d4:
         aa:8e:89:f5:5c:dc:60:d3:34:3a:45:40:cf:21:9f:0c:e5:ef:
         f6:b5:c2:ba
-----BEGIN CERTIFICATE-----
MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEeHITYZSYHZjo+iFEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzI0YThjYmQtNDk1My00MzVjLWJhY2UtMDdhZjEyNzll
OWJjMB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk
YzA5ZjA0NTItY2IwMS00YzdkLTlkMzktOWU4ZjVhOWIxMDgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9hZ+Om2dPBT88yZkrT6hey00ORcBD/hxW0G
3TVbH8RFfzOlfqLR+QlFt6ZUjyZM66HCF2Yts+rA/6VszJ50tF2Qk3+npOjZkeXV
nf+54a3slL8dCcewujJotGPtGaaEcw5lcKimbfaLt4udcoeSG+qOYP4x0dOBlK8G
JnJWlzTEVVmGR2V75yqki7PDFoZVNDB3HhJW6yMfMVQHtn+6icqFPMtMBcjeOAtE
XTofJt15iFXiHxKpuugGNca49HtvTiMBrYvLMI2JhS1i38Dt8h59j78T1vLa5KVc
m7UXDztvojouBpFYkwL/eC42yQ3LY8fmdo6HktM7CtW83dSXBwIDAQABo4IDfzCC
A3swHQYDVR0OBBYEFDFscBBMJaj/sckgTWdDsSSRVHcaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjRh
OGNiZC00OTUzLTQzNWMtYmFjZS0wN2FmMTI3OWU5YmMvMjc0OTQwZTUtMDczMC0z
NzJmLWJkZWEtYmM1YWM2OTA5MjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzI0YThjYmQtNDk1My00MzVjLWJh
Y2UtMDdhZjEyNzllOWJjLzMyNGE4Y2JkLTQ5NTMtNDM1Yy1iYWNlLTA3YWYxMjc5
ZTliYy5jcmwwHwYDVR0jBBgwFoAUuVGNYC2HPrBfCSgipzOWxkslPtAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjRhOGNiZC00OTUzLTQzNWMtYmFjZS0wN2Fm
MTI3OWU5YmMuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQEQ9sAAwQF
RQHgAwQGoVJAAwQGqmdAAwQEzD8AAwQFzx3gAwQG0GTAAwQF2IBAMFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
AKvCGbX9K0orJwWHV6jEqOndVxDJI7bW2uYAUrCsKmmrK93EG+m+fnBz17tPX7hl
zdiUVyoilShmz6zg/DG3tzSXsHe54JlCHXVS2hQPxLw8iUHpwcuU+7pxO46bAd33
llCa38fdt0/q0PB/1/QooA0Dndtq9Uwb4uhYWn7iCnmNq4r1UW9dWv0STJxTT2n1
yloF/6VqlUPtl1epmM9yQYgBmZERtJff39aTRK6obyS3zt9mtYGxy/jhymgUPc5m
vSgyd3O3I3mGq8p/77EP3UrzXTyMqOtZKDndpVlfFOCgcLdiWQJpJsdz1KqOifVc
3GDTNDpFQM8hnwzl7/a1wro=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:05 2024 by rpki-client on console-ams.rpki-client.org