Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/bab05333-27e9-304a-84a6-ea0a5b87b5b6.roa
File:                     bab05333-27e9-304a-84a6-ea0a5b87b5b6.roa (raw, json)
Hash identifier:          nOTw1GKWBnhpQKR+d6VbULVAougzIElWVUuPKddS7F8=
Subject key identifier:   48:AB:4C:2D:7F:7A:FD:CC:C8:FB:7A:2F:BC:F8:47:FB:16:C5:96:F4
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F432858475910CA9095CB7413226B3A00
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/bab05333-27e9-304a-84a6-ea0a5b87b5b6.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     30238
IP address blocks:        207.54.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:ca:90:95:cb:74:13:22:6b:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=8093e0f8-082d-45d1-b9a3-186fba335075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bb:70:94:8c:4a:56:bc:f5:a7:f4:5a:0d:cf:
                    bd:10:d0:dc:53:a7:28:da:63:29:4b:26:d3:d8:13:
                    1a:ea:d7:f8:b0:f1:ff:35:f5:0a:1a:7a:59:4e:61:
                    32:7d:3d:98:6e:f5:95:0e:12:ee:d3:cf:ea:70:7a:
                    3a:97:9a:8c:ec:42:90:c8:b4:67:65:f1:e2:6c:61:
                    62:78:13:3d:b2:0d:c7:c7:cc:09:7f:58:59:3d:bf:
                    d9:7c:47:02:73:06:c0:d5:f3:e1:71:12:ec:cd:76:
                    1f:d6:4e:65:1e:35:ec:54:fe:36:d4:67:9a:66:bb:
                    76:d2:0a:3e:a9:e6:13:24:70:8f:3d:d2:83:33:cb:
                    1f:d1:93:44:fd:ab:3c:37:4e:ce:7a:ee:be:92:07:
                    bd:97:1c:2c:c8:d0:68:05:7c:00:ea:99:37:53:e7:
                    46:d3:03:c4:47:cc:61:28:c2:a8:e5:a0:fe:23:bc:
                    6d:95:bb:a5:a4:60:a9:89:11:4b:e4:9c:31:b4:c5:
                    ea:ab:eb:bc:ae:be:f9:6e:59:28:23:9f:6c:93:b7:
                    f9:fc:46:4e:72:e9:fc:fe:52:18:1e:fa:e3:ff:3e:
                    c7:de:20:87:ef:d6:fa:2b:e5:cc:89:92:a2:30:01:
                    09:87:1f:7b:73:4a:e0:1b:f8:67:63:94:ca:3b:51:
                    63:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AB:4C:2D:7F:7A:FD:CC:C8:FB:7A:2F:BC:F8:47:FB:16:C5:96:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/bab05333-27e9-304a-84a6-ea0a5b87b5b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:a8:b2:10:ed:29:4d:0c:ab:bc:34:d5:2a:b7:4a:1d:7c:fa:
         a7:d4:b0:cf:cc:08:88:e7:67:a5:89:c7:ba:eb:7d:e9:3f:01:
         ce:2b:8e:6b:d2:ea:b4:a0:bf:5d:04:41:f4:a1:9d:15:5e:ce:
         3d:56:eb:d7:b8:39:02:81:12:0a:33:15:03:ad:fd:49:66:a3:
         35:b1:39:4f:f3:7c:63:2b:24:05:c2:25:42:23:6e:c9:ae:c1:
         10:47:47:82:be:66:63:9d:5d:e0:85:98:60:e1:c8:bb:7f:b1:
         d3:80:68:9e:f5:3e:bd:52:2c:61:2e:77:f6:87:79:12:72:a9:
         2d:dc:80:ed:28:ff:fe:3c:77:e3:c1:b5:63:71:c2:55:a5:6f:
         cd:64:ae:72:ce:7c:d9:d5:7b:db:4b:4d:15:b2:cc:67:45:17:
         7e:29:b2:81:f1:43:a8:a5:53:e7:46:85:c8:8b:e3:9c:b7:fa:
         37:91:49:52:18:8e:14:cd:ae:33:bd:73:d9:2f:fc:5d:b7:59:
         d4:3f:cc:76:36:6e:94:96:d1:d8:85:e9:6b:bb:35:ea:51:de:
         2d:1f:f2:98:15:e0:ac:f1:6b:12:07:23:ed:17:ec:35:a0:b4:
         b0:23:a7:74:c5:54:10:9e:bd:ff:b8:8a:96:04:66:28:0c:e1:
         3b:a7:e8:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdZEMqQlct0EyJrOgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI0MDkyNzAxMDAzMVoXDTI0MTIyNjAyMDAzMVowLzEtMCsGA1UEAxMk
ODA5M2UwZjgtMDgyZC00NWQxLWI5YTMtMTg2ZmJhMzM1MDc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7twlIxKVrz1p/RaDc+9ENDcU6co2mMpSybT
2BMa6tf4sPH/NfUKGnpZTmEyfT2YbvWVDhLu08/qcHo6l5qM7EKQyLRnZfHibGFi
eBM9sg3Hx8wJf1hZPb/ZfEcCcwbA1fPhcRLszXYf1k5lHjXsVP421GeaZrt20go+
qeYTJHCPPdKDM8sf0ZNE/as8N07Oeu6+kge9lxwsyNBoBXwA6pk3U+dG0wPER8xh
KMKo5aD+I7xtlbulpGCpiRFL5JwxtMXqq+u8rr75blkoI59sk7f5/EZOcun8/lIY
Hvrj/z7H3iCH79b6K+XMiZKiMAEJhx97c0rgG/hnY5TKO1Fj0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEirTC1/ev3MyPt6L7z4R/sWxZb0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYmFiMDUzMzMtMjdlOS0z
MDRhLTg0YTYtZWEwYTViODdiNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzZCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA2oshDtKU0Mq7w01Sq3Sh18+qfUsM/MCIjnZ6WJx7rrfek/Ac4rjmvS
6rSgv10EQfShnRVezj1W69e4OQKBEgozFQOt/UlmozWxOU/zfGMrJAXCJUIjbsmu
wRBHR4K+ZmOdXeCFmGDhyLt/sdOAaJ71Pr1SLGEud/aHeRJyqS3cgO0o//48d+PB
tWNxwlWlb81krnLOfNnVe9tLTRWyzGdFF34psoHxQ6ilU+dGhciL45y3+jeRSVIY
jhTNrjO9c9kv/F23WdQ/zHY2bpSW0diF6Wu7NepR3i0f8pgV4KzxaxIHI+0X7DWg
tLAjp3TFVBCevf+4ipYEZigM4Tun6DM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:37 2024 by rpki-client on console-ams.rpki-client.org