Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/9cd6624e-86f9-3575-8e6b-484b03a1d6fc.roa
File:                     9cd6624e-86f9-3575-8e6b-484b03a1d6fc.roa (raw, json)
Hash identifier:          uMCNXaGv56EbfmdtL5n/X5osZYDZ/CLk/J4L+RwUM/8=
Subject key identifier:   39:B4:3C:2E:8B:64:40:34:FB:81:B7:92:B7:5E:95:C9:9C:EC:D1:29
Certificate issuer:       /CN=336db060-273c-4da7-88b6-6f47c8830474
Certificate serial:       010D0C9F43285847E094B9BBBC2AA760E2F0C440
Authority key identifier: 75:8C:5C:A3:D0:83:73:A0:2B:3B:9C:DF:74:59:F1:87:A2:69:14:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/9cd6624e-86f9-3575-8e6b-484b03a1d6fc.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     398663
IP address blocks:        157.160.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/336db060-273c-4da7-88b6-6f47c8830474.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/336db060-273c-4da7-88b6-6f47c8830474.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:b9:bb:bc:2a:a7:60:e2:f0:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=336db060-273c-4da7-88b6-6f47c8830474
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=763a5aac-1c6a-4a36-8ee4-15da897772b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:77:98:c3:0a:72:0a:5e:0c:ec:94:43:b1:ee:
                    fa:c8:f0:3e:ea:61:fe:f1:f9:cc:cb:cf:de:cf:bf:
                    cd:f2:88:a4:01:2a:64:25:69:eb:7c:5c:01:58:ed:
                    f8:6a:3d:18:2f:2d:4b:af:3a:59:0a:33:6b:d3:b1:
                    30:fc:20:eb:a2:73:7c:51:47:c5:28:0b:a5:55:63:
                    f1:7d:bd:95:ac:0c:11:ad:f0:c0:f7:a7:fc:f6:84:
                    c5:39:f8:cb:4b:3c:a6:b3:7a:4c:0e:97:58:82:65:
                    b1:09:88:2c:a7:b1:f6:08:b8:84:70:73:72:5e:11:
                    77:33:e9:c3:76:db:68:81:58:e3:87:80:5e:3e:1e:
                    c0:04:ce:21:9a:e0:e7:4d:cb:11:d5:be:81:c4:18:
                    eb:38:01:a1:57:3e:9b:44:a8:4a:03:24:fc:bd:82:
                    e5:54:57:fa:39:63:7d:6a:10:ce:d3:e5:d9:01:3f:
                    cc:34:43:19:a9:5b:d8:04:9c:b8:5a:80:9f:50:8d:
                    4c:a3:27:12:63:53:32:90:13:7b:8f:72:69:85:a6:
                    6d:88:bb:4a:c7:60:46:14:38:b5:f0:89:07:0e:13:
                    38:b0:fa:6d:b3:8b:6a:c8:06:81:5d:e5:17:94:c7:
                    a9:e9:78:6c:e5:2e:9a:81:1e:db:df:84:a0:de:77:
                    f8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B4:3C:2E:8B:64:40:34:FB:81:B7:92:B7:5E:95:C9:9C:EC:D1:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/9cd6624e-86f9-3575-8e6b-484b03a1d6fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/336db060-273c-4da7-88b6-6f47c8830474.crl

            X509v3 Authority Key Identifier:
                keyid:75:8C:5C:A3:D0:83:73:A0:2B:3B:9C:DF:74:59:F1:87:A2:69:14:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.160.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:37:a2:bf:09:87:6d:05:c0:00:73:0e:07:c1:1c:72:8c:43:
         04:5d:53:71:b4:8b:29:e5:f4:62:9d:03:08:6c:3c:98:f2:c1:
         fc:62:23:72:11:c5:f7:29:a3:c5:2a:32:46:4e:6c:9b:ea:60:
         a7:be:6d:e6:6c:cb:e3:bc:11:17:48:a9:9c:3f:97:50:98:7c:
         10:f9:1f:5f:1a:f3:15:34:c3:f6:eb:7e:a7:c7:34:c9:40:c3:
         d0:ad:c9:7b:c7:ad:06:6c:91:d2:9e:ff:1c:03:61:ba:02:36:
         25:8d:5d:6e:92:7e:63:ca:c5:df:ee:a6:ca:57:56:22:d8:4b:
         f1:5e:85:84:7f:3f:68:42:94:cb:3d:10:99:20:d0:41:da:5a:
         f8:f8:4f:d2:3d:29:cd:23:7f:4f:ed:93:69:17:af:b1:08:1a:
         28:23:3f:72:9d:03:09:9a:ed:d8:1b:57:8c:4b:0b:06:c4:e8:
         95:59:bd:1e:40:9d:90:9b:2e:e9:68:da:8d:63:7d:83:e4:aa:
         26:b5:df:60:6f:f1:4b:e1:19:52:0d:75:4e:9b:63:5f:0c:d6:
         c2:58:9a:d9:9d:b9:52:6d:11:11:f0:e4:a5:16:a6:35:4b:47:
         20:0e:22:31:08:b0:2e:a2:32:37:d7:cf:d3:f4:8c:21:0d:69:
         af:94:e9:9b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfglLm7vCqnYOLwxEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzM2ZGIwNjAtMjczYy00ZGE3LTg4YjYtNmY0N2M4ODMw
NDc0MB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk
NzYzYTVhYWMtMWM2YS00YTM2LThlZTQtMTVkYTg5Nzc3MmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HeYwwpyCl4M7JRDse76yPA+6mH+8fnMy8/e
z7/N8oikASpkJWnrfFwBWO34aj0YLy1LrzpZCjNr07Ew/CDronN8UUfFKAulVWPx
fb2VrAwRrfDA96f89oTFOfjLSzyms3pMDpdYgmWxCYgsp7H2CLiEcHNyXhF3M+nD
dttogVjjh4BePh7ABM4hmuDnTcsR1b6BxBjrOAGhVz6bRKhKAyT8vYLlVFf6OWN9
ahDO0+XZAT/MNEMZqVvYBJy4WoCfUI1MoycSY1MykBN7j3JphaZtiLtKx2BGFDi1
8IkHDhM4sPpts4tqyAaBXeUXlMep6Xhs5S6agR7b34Sg3nf4SQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDm0PC6LZEA0+4G3krdelcmc7NEpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zMzZk
YjA2MC0yNzNjLTRkYTctODhiNi02ZjQ3Yzg4MzA0NzQvOWNkNjYyNGUtODZmOS0z
NTc1LThlNmItNDg0YjAzYTFkNmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzM2ZGIwNjAtMjczYy00ZGE3LTg4
YjYtNmY0N2M4ODMwNDc0LzMzNmRiMDYwLTI3M2MtNGRhNy04OGI2LTZmNDdjODgz
MDQ3NC5jcmwwHwYDVR0jBBgwFoAUdYxco9CDc6ArO5zfdFnxh6JpFIIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zMzZkYjA2MC0yNzNjLTRkYTctODhiNi02ZjQ3
Yzg4MzA0NzQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnaAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAEzeivwmHbQXAAHMOB8EccoxDBF1TcbSLKeX0Yp0DCGw8mPLB/GIjchHF
9ymjxSoyRk5sm+pgp75t5mzL47wRF0ipnD+XUJh8EPkfXxrzFTTD9ut+p8c0yUDD
0K3Je8etBmyR0p7/HANhugI2JY1dbpJ+Y8rF3+6myldWIthL8V6FhH8/aEKUyz0Q
mSDQQdpa+PhP0j0pzSN/T+2TaRevsQgaKCM/cp0DCZrt2BtXjEsLBsTolVm9HkCd
kJsu6WjajWN9g+SqJrXfYG/xS+EZUg11TptjXwzWwlia2Z25Um0REfDkpRamNUtH
IA4iMQiwLqIyN9fP0/SMIQ1pr5Tpmw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org