Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa
File:                     d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa (raw, json)
Hash identifier:          c1NwNUHxFZtKjR93NGHVX5IoO2nzOp7j1kLlIVPCmZU=
Subject key identifier:   23:61:81:DF:E1:71:A2:25:B4:2C:00:93:37:0D:66:9E:75:FF:DA:AC
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285845C179197CCFAAD7F12165EE00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     46261
IP address blocks:        172.98.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:79:19:7c:cf:aa:d7:f1:21:65:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=4c4d8ace-a8fd-4e70-96ad-ad74ecf8ce6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:01:3c:25:e8:59:3d:f4:c0:b9:12:92:3f:1d:
                    94:03:c7:9a:e1:b7:1b:73:ff:9e:a6:a0:77:df:7f:
                    41:9d:fe:e4:bc:be:69:fa:86:f0:6f:ff:86:e9:93:
                    ca:55:1e:ad:f4:72:3e:0d:d3:f1:98:15:14:bc:8f:
                    2f:d9:a5:a9:35:73:57:67:0d:e8:23:78:28:df:e3:
                    8b:98:ef:2e:8b:0c:4d:85:25:06:c2:e6:8d:29:d2:
                    a0:4b:85:7e:71:98:ab:ae:17:45:d5:e6:49:65:37:
                    58:b4:af:e1:67:cf:ed:d8:2c:76:69:c4:ef:a5:98:
                    6f:84:b9:f4:d6:98:96:01:76:8d:41:aa:5b:15:55:
                    af:9c:8d:ca:04:52:02:5b:86:cc:e6:b9:ad:f0:14:
                    b7:88:86:83:53:e4:ab:d2:56:fd:89:21:0d:6b:8f:
                    73:a9:68:89:c6:8a:af:30:f3:2b:e0:4a:53:65:5c:
                    16:8f:a7:e0:24:49:33:91:40:9f:78:3d:08:2b:5d:
                    0d:3b:e9:1a:ea:33:3d:76:7d:e6:83:f2:9f:16:ab:
                    44:0a:4f:3a:f8:76:49:06:e9:bf:81:37:8e:40:90:
                    22:85:eb:45:b5:fa:45:ca:fe:90:f6:99:ce:80:40:
                    fb:aa:38:a6:80:ef:c6:82:be:e5:7f:93:f9:47:f0:
                    b9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:61:81:DF:E1:71:A2:25:B4:2C:00:93:37:0D:66:9E:75:FF:DA:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:ea:de:f8:80:74:cd:5a:d4:21:b7:2e:82:7e:a5:f3:c3:3e:
         0e:07:68:89:75:d8:76:b2:10:f7:2d:e3:d4:0e:76:c0:3f:c3:
         46:ec:a7:c7:cf:15:bc:78:b9:19:d2:49:b4:82:d8:0f:0a:9a:
         49:ed:eb:7f:f6:35:42:09:b7:71:c2:dd:58:0c:64:70:c5:62:
         e8:9c:3b:6f:91:61:d3:fc:f6:15:77:07:20:a1:b5:83:99:6b:
         8c:17:2b:6a:54:36:b1:e5:84:75:3e:79:99:64:bc:38:e1:5a:
         c1:c9:27:dd:5b:63:b5:a1:c8:d8:49:4c:26:3b:f2:15:c7:86:
         4c:7f:3e:f4:0d:56:fe:21:1f:72:79:08:c7:ee:d4:d1:17:dc:
         62:f8:af:dd:87:ca:35:71:8f:a5:69:93:68:d5:d3:4a:bb:17:
         94:cc:31:18:36:04:ef:4f:53:b9:8d:b3:87:97:55:59:1e:78:
         66:12:d2:1f:b2:a0:bb:42:ee:e6:3e:c3:76:2e:b9:9f:20:b3:
         42:00:54:e2:f1:06:ba:43:dd:b6:19:8b:8e:9f:d1:41:d6:1f:
         40:0f:ce:4f:90:f3:a9:04:35:68:0b:a5:a7:73:ff:03:77:38:
         e6:38:7d:70:e8:f0:32:dd:4d:94:29:01:3f:f0:61:8c:6d:b8:
         57:af:94:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:43:25 2024 by rpki-client on console-fra.rpki-client.org