Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa
File:                     2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa (raw, json)
Hash identifier:          X7aHAzQqiz7sXyDX/LqKY8jYqfIzMmlJAkiCm5m7jl4=
Subject key identifier:   64:FD:47:91:4B:89:3A:FA:D1:27:29:8D:BB:96:E2:E2:9F:B8:A5:DC
Certificate issuer:       /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
Certificate serial:       010D0C9F43285847A30BEEBE7FFD36040CC1B580
Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     32329
IP address blocks:        162.218.224.0/22 maxlen: 24
                          164.152.136.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0b:ee:be:7f:fd:36:04:0c:c1:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=b13f7176-aa1f-4261-8db2-2550049deb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f4:65:d6:89:68:7f:69:75:35:f3:28:6f:74:
                    01:30:45:18:64:e9:55:61:f5:6a:88:c7:55:3d:3d:
                    fc:66:94:b5:85:f0:89:e7:df:23:5e:45:40:10:d2:
                    be:aa:5e:bd:4d:8a:ed:f5:2c:39:18:24:bc:03:72:
                    77:69:03:c5:6d:25:d5:88:92:95:7c:d9:de:98:46:
                    41:1d:de:f4:0e:65:7d:37:81:27:11:f8:7b:38:17:
                    88:80:64:5e:9c:10:ae:7e:5f:9c:f3:98:ed:db:54:
                    5b:03:01:b7:cb:1e:b0:db:09:54:84:58:84:51:2a:
                    f6:61:83:6f:b2:ef:6a:f1:63:77:12:50:fa:6d:9b:
                    e1:c3:05:b9:ce:cd:3a:1e:f0:e7:d7:e4:db:87:6d:
                    86:80:08:95:48:cb:39:44:62:08:ec:3a:65:f5:5e:
                    36:26:a6:e1:eb:78:0d:19:8f:b2:18:c7:9a:27:5f:
                    36:22:6f:2a:a4:ca:6c:f3:42:62:e0:41:b3:61:b1:
                    f2:28:24:34:59:b7:c1:48:89:1e:05:eb:bd:42:cd:
                    51:d7:04:76:76:a8:a5:90:8a:02:1a:97:05:0e:ab:
                    b6:30:bd:e6:e2:af:1c:50:11:06:42:7c:34:14:14:
                    a3:52:fc:b8:60:d9:69:07:46:3e:e2:9c:0d:e5:09:
                    b1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FD:47:91:4B:89:3A:FA:D1:27:29:8D:BB:96:E2:E2:9F:B8:A5:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl

            X509v3 Authority Key Identifier:
                keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.224.0/22
                  164.152.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:7c:21:7b:02:26:b8:4d:77:67:16:d8:32:c6:2f:ed:c1:d9:
         16:b5:8c:96:28:59:6c:75:8e:43:bc:a5:1e:15:92:47:bc:ab:
         49:0f:c8:a1:c9:2d:12:b6:fe:34:01:40:2b:3b:19:61:59:d3:
         07:46:83:c8:bb:8a:39:ef:75:27:f7:5a:cf:73:23:aa:da:7a:
         bc:50:a0:e7:19:f4:66:1b:19:e9:bb:62:30:7b:bd:64:01:bc:
         40:f6:47:cd:c9:9e:a5:27:b6:bd:10:88:02:63:87:10:ad:16:
         f2:8c:69:ba:84:6b:97:8b:3c:3a:f8:37:d0:ab:6c:12:e5:87:
         6c:24:d5:ba:6d:53:4a:b7:9b:51:f4:45:aa:9a:ef:84:44:69:
         5a:03:cf:f3:af:20:03:b4:20:62:c7:97:86:51:6f:ac:e7:e0:
         a4:79:f7:be:97:86:05:23:f0:1e:2f:15:87:83:32:85:59:96:
         b8:bc:c3:cb:71:f1:ee:0d:66:e5:2b:78:7c:8d:bd:f8:cc:52:
         e4:13:54:7a:1b:81:fb:72:fa:c7:09:01:34:3c:ad:0b:33:0e:
         9a:a1:4f:4e:cc:24:38:34:88:80:d0:ed:df:69:5e:d9:ce:70:
         16:15:0d:9b:dc:63:df:44:08:29:03:01:ef:5f:2d:36:f7:05:
         2c:c8:1d:e8
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEejC+6+f/02BAzBtYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTY2ODMwYTQtMGU2Zi00OWExLTk4MjMtYWYyYWU5MmFj
N2YyMB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk
YjEzZjcxNzYtYWExZi00MjYxLThkYjItMjU1MDA0OWRlYjk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfRl1olof2l1NfMob3QBMEUYZOlVYfVqiMdV
PT38ZpS1hfCJ598jXkVAENK+ql69TYrt9Sw5GCS8A3J3aQPFbSXViJKVfNnemEZB
Hd70DmV9N4EnEfh7OBeIgGRenBCufl+c85jt21RbAwG3yx6w2wlUhFiEUSr2YYNv
su9q8WN3ElD6bZvhwwW5zs06HvDn1+Tbh22GgAiVSMs5RGII7Dpl9V42Jqbh63gN
GY+yGMeaJ182Im8qpMps80Ji4EGzYbHyKCQ0WbfBSIkeBeu9Qs1R1wR2dqilkIoC
GpcFDqu2ML3m4q8cUBEGQnw0FBSjUvy4YNlpB0Y+4pwN5QmxEwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFGT9R5FLiTr60ScpjbuW4uKfuKXcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NjY4
MzBhNC0wZTZmLTQ5YTEtOTgyMy1hZjJhZTkyYWM3ZjIvMjQ3M2Q2YmEtM2ZiOS0z
NTgyLThjY2MtM2MxOTU1NGNmZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTY2ODMwYTQtMGU2Zi00OWExLTk4
MjMtYWYyYWU5MmFjN2YyLzk2NjgzMGE0LTBlNmYtNDlhMS05ODIzLWFmMmFlOTJh
YzdmMi5jcmwwHwYDVR0jBBgwFoAU3F9NtqqhGEEdYousdKiAYb8FFEMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85NjY4MzBhNC0wZTZmLTQ5YTEtOTgyMy1hZjJh
ZTkyYWM3ZjIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCotrgAwQD
pJiIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGR8IXsCJrhNd2cW2DLGL+3B2Ra1jJYoWWx1jkO8pR4Vkke8
q0kPyKHJLRK2/jQBQCs7GWFZ0wdGg8i7ijnvdSf3Ws9zI6raerxQoOcZ9GYbGem7
YjB7vWQBvED2R83JnqUntr0QiAJjhxCtFvKMabqEa5eLPDr4N9CrbBLlh2wk1bpt
U0q3m1H0Raqa74REaVoDz/OvIAO0IGLHl4ZRb6zn4KR5976XhgUj8B4vFYeDMoVZ
lri8w8tx8e4NZuUreHyNvfjMUuQTVHobgfty+scJATQ8rQszDpqhT07MJDg0iIDQ
7d9pXtnOcBYVDZvcY99ECCkDAe9fLTb3BSzIHeg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:38 2024 by rpki-client on console-ams.rpki-client.org