Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/332fa762-088d-3c09-87f9-4c48f0caba62.roa
File:                     332fa762-088d-3c09-87f9-4c48f0caba62.roa (raw, json)
Hash identifier:          8IxQae7pM0PmijZDCIERbhqM80gKBGfDresm9OB13Zc=
Subject key identifier:   47:44:3A:13:99:2E:A9:09:07:85:98:AE:10:94:33:E0:97:E3:19:3B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474420BE3ECE0BB05230765600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/332fa762-088d-3c09-87f9-4c48f0caba62.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     701
IP address blocks:        209.118.130.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:be:3e:ce:0b:b0:52:30:76:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=1db276c1-fed4-42b4-a56d-78ab331ae98b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:34:d1:fd:5f:6c:b6:da:7f:3d:94:69:41:e8:
                    8e:b0:df:39:39:b0:d1:3a:93:e0:7d:a6:94:b1:0b:
                    a5:a6:a5:e0:04:48:93:ca:92:e9:68:f6:b4:9a:06:
                    39:23:de:58:27:44:0e:cd:09:7b:a5:80:ad:8c:34:
                    b9:95:50:a0:a9:7c:0f:f9:09:a0:1a:ea:00:9a:12:
                    ec:53:10:53:27:25:36:5e:5a:75:46:dc:19:4f:27:
                    c8:00:30:d5:ad:30:6c:d1:e3:8c:43:37:95:88:4f:
                    aa:84:11:67:19:7a:ab:79:a4:86:23:8c:39:36:65:
                    4e:02:47:80:0d:d5:58:e8:9a:d7:7d:c0:76:4d:18:
                    f5:ca:3f:73:5c:9e:a0:3f:aa:41:28:30:23:ed:6c:
                    55:7e:af:6e:c0:c6:cf:d0:07:85:3e:06:c7:73:00:
                    e3:67:d9:a2:90:45:a4:01:5f:56:fb:16:1d:74:aa:
                    c5:39:5c:ff:7c:99:53:6a:e1:2a:3b:61:c3:8c:35:
                    e9:d8:78:da:18:3d:a7:ae:c3:cb:94:d2:85:c2:33:
                    64:0e:51:0f:91:5f:69:05:2a:94:79:db:40:d1:d7:
                    b0:8c:06:05:87:77:1e:28:8f:6f:64:dd:ec:93:2e:
                    6f:a4:a0:2e:fb:3b:8a:e4:61:0d:bb:54:bb:de:3d:
                    10:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:44:3A:13:99:2E:A9:09:07:85:98:AE:10:94:33:E0:97:E3:19:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/332fa762-088d-3c09-87f9-4c48f0caba62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.118.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:90:68:e5:4d:66:d6:ac:5d:7b:33:88:43:c8:9a:5f:4c:05:
         40:1f:20:8f:8e:b7:0d:51:66:c0:6c:a8:83:6b:a8:a3:54:55:
         ee:d6:16:37:79:cf:98:a2:16:1a:b6:01:ed:c4:a0:5e:8a:72:
         58:47:e7:29:06:56:32:18:b4:93:e2:1e:80:1d:4d:e4:83:ec:
         1d:fa:2c:9a:df:ae:4f:ff:67:e5:9f:dd:22:d5:95:c4:67:86:
         89:65:de:ff:62:2b:c8:a2:ca:da:51:bb:eb:57:18:8e:ba:07:
         99:be:f0:60:47:e3:4e:07:1e:24:0e:55:53:df:7f:20:11:87:
         be:36:b8:2f:39:0b:55:3a:17:13:ae:f9:7e:4f:8f:dd:4b:01:
         dc:d9:b0:9a:64:95:d2:5c:88:a0:70:db:f2:96:df:f3:de:2c:
         fc:bb:9f:53:f5:9f:19:a2:b7:cd:51:02:1d:f6:61:2f:54:37:
         75:fe:49:3e:46:c6:da:11:68:b0:52:08:8c:76:dd:cf:db:1d:
         07:87:28:e6:a3:02:99:4f:b2:93:89:a8:78:21:bd:68:b7:42:
         a0:ec:52:e1:fa:d9:ea:12:2e:a1:fd:1b:bb:82:96:35:b9:c1:
         79:2d:59:80:38:e9:36:cb:77:9f:f1:48:32:42:18:b4:48:94:
         89:d6:45:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdEIL4+zguwUjB2VgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkxOTEzMDA0MloXDTI0MTIxODE0MDA0MlowLzEtMCsGA1UEAxMk
MWRiMjc2YzEtZmVkNC00MmI0LWE1NmQtNzhhYjMzMWFlOThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDTR/V9sttp/PZRpQeiOsN85ObDROpPgfaaU
sQulpqXgBEiTypLpaPa0mgY5I95YJ0QOzQl7pYCtjDS5lVCgqXwP+QmgGuoAmhLs
UxBTJyU2Xlp1RtwZTyfIADDVrTBs0eOMQzeViE+qhBFnGXqreaSGI4w5NmVOAkeA
DdVY6JrXfcB2TRj1yj9zXJ6gP6pBKDAj7WxVfq9uwMbP0AeFPgbHcwDjZ9mikEWk
AV9W+xYddKrFOVz/fJlTauEqO2HDjDXp2HjaGD2nrsPLlNKFwjNkDlEPkV9pBSqU
edtA0dewjAYFh3ceKI9vZN3sky5vpKAu+zuK5GENu1S73j0QXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEdEOhOZLqkJB4WYrhCUM+CX4xk7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzMyZmE3NjItMDg4ZC0z
YzA5LTg3ZjktNGM0OGYwY2FiYTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0XaCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJaQaOVNZtasXXsziEPIml9MBUAfII+Otw1RZsBsqINrqKNUVe7WFjd5
z5iiFhq2Ae3EoF6KclhH5ykGVjIYtJPiHoAdTeSD7B36LJrfrk//Z+Wf3SLVlcRn
holl3v9iK8iiytpRu+tXGI66B5m+8GBH404HHiQOVVPffyARh742uC85C1U6FxOu
+X5Pj91LAdzZsJpkldJciKBw2/KW3/PeLPy7n1P1nxmit81RAh32YS9UN3X+ST5G
xtoRaLBSCIx23c/bHQeHKOajAplPspOJqHghvWi3QqDsUuH62eoSLqH9G7uCljW5
wXktWYA46TbLd5/xSDJCGLRIlInWRV8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:23 2024 by rpki-client on console-fra.rpki-client.org