Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215415.roa
File:                     AS215415.roa (raw, json)
Hash identifier:          j3qdy13Cnj0TeQBpnIfUGsqsySWIsxfXUG/dTaizNQU=
Subject key identifier:   1A:18:39:EB:9D:5F:0C:0C:C7:EA:DD:FA:F3:BE:A6:C8:4C:E3:BB:D1
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       33BA4C7D6E68EE6DA5ED02E6D7767281D6020C13
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215415.roa
Signing time:             Tue 04 Feb 2025 12:28:26 +0000
ROA not before:           Tue 04 Feb 2025 12:23:26 +0000
ROA not after:            Tue 03 Feb 2026 12:28:26 +0000
asID:                     215415
IP address blocks:        98.142.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 06:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ba:4c:7d:6e:68:ee:6d:a5:ed:02:e6:d7:76:72:81:d6:02:0c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Feb  4 12:23:26 2025 GMT
            Not After : Feb  3 12:28:26 2026 GMT
        Subject: CN=1A1839EB9D5F0C0CC7EADDFAF3BEA6C84CE3BBD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:15:b1:8b:b6:82:3a:8c:fb:4e:81:06:e5:9e:
                    00:dc:92:d4:e7:de:5b:e5:48:51:07:87:45:9c:da:
                    1b:4b:15:38:56:46:97:87:20:b5:a7:fd:67:f2:bb:
                    7b:45:2c:6a:d8:fc:e7:a2:d9:b0:57:22:9b:98:bb:
                    63:8e:c3:26:6f:a4:9f:ce:43:4c:29:9e:b4:78:50:
                    d0:4c:ae:47:8f:e4:0d:cf:e7:ce:d3:a2:b3:f5:12:
                    81:f7:82:96:99:85:67:6a:86:f7:84:5c:35:25:43:
                    c9:8a:13:dc:6f:30:11:a2:cc:36:2c:7d:34:a8:a8:
                    c6:64:e6:a8:9f:34:ca:dc:d4:e2:a2:b7:c1:19:41:
                    90:85:57:14:d3:6b:1d:22:b3:7b:dd:8f:1b:80:0f:
                    af:8b:02:d7:12:b7:c6:68:e1:01:3c:42:33:a1:98:
                    81:3e:e3:4f:be:8b:97:f5:05:cb:10:03:66:b6:42:
                    6a:38:f3:36:38:d9:25:24:8e:bc:6e:5a:55:cf:71:
                    db:df:f5:e8:5d:1f:3d:18:30:77:4d:d8:13:2d:a6:
                    31:78:5f:ea:58:63:10:b4:e4:6d:5e:64:23:c0:86:
                    d7:7f:47:25:b1:79:32:8c:1e:2b:f7:f9:b4:e9:26:
                    80:d6:1b:91:af:d8:b0:96:d4:74:7d:e5:11:8f:2a:
                    32:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:18:39:EB:9D:5F:0C:0C:C7:EA:DD:FA:F3:BE:A6:C8:4C:E3:BB:D1
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215415.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:a4:ef:e5:bd:56:aa:13:ed:d4:1b:81:f8:95:2e:a2:60:e2:
         e0:93:5c:4c:3a:33:46:8f:26:06:1f:7d:bf:e9:71:08:a8:f4:
         44:55:19:07:14:83:96:28:ed:61:89:ab:9d:b0:40:b8:08:2e:
         7c:0a:9e:52:ae:b9:d2:b8:5c:36:7d:8c:de:26:81:bb:fc:7c:
         ca:ec:c3:e2:12:09:00:f0:f4:c5:d4:d6:a4:ee:af:e1:b3:10:
         d4:67:5a:8a:d1:a0:ed:e2:46:bf:1d:1c:89:d3:f6:ed:68:d5:
         94:75:44:6c:ea:9e:2d:03:18:d0:96:65:2b:29:39:40:7f:00:
         ac:89:97:4d:f0:84:57:35:bc:6a:33:21:08:db:2a:67:62:c2:
         ee:ed:bc:64:fb:44:69:1c:fa:3d:9d:e5:4c:81:40:d6:b8:20:
         a1:4a:de:56:7e:1c:83:c1:82:bb:d5:a0:9f:f5:93:a2:e6:7f:
         20:97:47:9a:19:99:4d:bf:c8:55:37:e6:b8:72:49:e4:61:f5:
         7f:4c:e7:72:7f:48:ad:b9:12:e1:7c:9c:02:a4:df:0e:08:4c:
         3f:4f:ec:56:a3:c8:96:8f:4a:4b:60:46:e7:5f:22:0b:74:40:
         f0:1a:ab:89:d4:d8:f0:7a:6a:85:34:ce:f2:9d:aa:fd:40:86:
         e1:f3:29:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:21 2025 by rpki-client