Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/4748e949-c2fb-3b07-a310-c7d6a2767edf.roa
File:                     4748e949-c2fb-3b07-a310-c7d6a2767edf.roa (raw, json)
Hash identifier:          Kl4vx/cQW1vbqxbEcdSg8CjQ24D3Qz1/oDr21OBpekI=
Subject key identifier:   51:46:79:E0:4A:65:68:B0:99:71:D8:5E:7E:E3:5F:0E:97:1D:C1:7E
Certificate issuer:       /CN=ab96de43-19ee-48ac-8a2f-acd9ed1caffc
Certificate serial:       010D0C9F432858479D76B7BF63797364DACC9540
Authority key identifier: 3B:CF:83:75:19:2E:01:83:B3:A0:FD:24:21:90:21:F1:62:C7:68:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/4748e949-c2fb-3b07-a310-c7d6a2767edf.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     395101
IP address blocks:        199.175.98.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:b7:bf:63:79:73:64:da:cc:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab96de43-19ee-48ac-8a2f-acd9ed1caffc
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=640db046-5000-4f83-a2fe-316ec8861b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:06:2e:90:cd:cb:d5:9e:69:aa:c2:a0:8c:2b:
                    eb:de:3d:d1:75:2f:e2:26:9d:90:80:05:06:42:f5:
                    6d:5b:97:f1:5d:88:97:0b:71:f2:1c:78:ac:4b:7a:
                    7d:40:fa:5e:3a:2f:2b:12:19:14:21:51:ed:79:44:
                    92:30:9a:96:9a:f6:67:3b:16:4f:c6:23:b8:c4:87:
                    7c:36:c0:44:44:60:f8:d7:43:00:aa:4f:42:21:55:
                    73:fc:f8:fd:72:fb:8a:83:cb:0b:58:0b:39:cb:dc:
                    6e:f4:26:a7:52:c8:a3:20:4f:ac:d0:37:ed:db:a4:
                    5b:0f:bf:73:04:2d:fc:02:6f:ff:63:a4:6f:31:00:
                    2c:61:6e:0e:bb:6c:eb:ca:a1:19:59:bc:f0:e8:52:
                    49:b0:4b:21:f7:25:c1:73:6d:dd:19:97:bf:74:20:
                    10:8c:4f:85:54:c5:aa:76:49:dd:99:fc:11:1b:56:
                    79:01:55:ec:63:a1:25:22:67:37:70:9d:c0:bc:ef:
                    2d:80:7a:38:d8:c7:e0:db:75:8e:06:b5:79:55:d7:
                    ef:ce:92:6d:b4:a7:7b:85:df:ad:4c:32:2e:62:14:
                    a8:18:a7:a0:22:cb:37:6d:50:ac:d9:50:87:3f:db:
                    a6:cc:b0:39:6b:0d:e3:3f:0a:9e:09:95:ea:56:20:
                    39:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:46:79:E0:4A:65:68:B0:99:71:D8:5E:7E:E3:5F:0E:97:1D:C1:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/4748e949-c2fb-3b07-a310-c7d6a2767edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.crl

            X509v3 Authority Key Identifier:
                keyid:3B:CF:83:75:19:2E:01:83:B3:A0:FD:24:21:90:21:F1:62:C7:68:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.175.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:5e:46:74:d8:35:50:48:da:a4:c8:0a:7a:67:d1:e3:e8:2d:
         8f:80:e6:50:09:9e:aa:cf:e2:34:3a:87:ec:45:7f:47:71:81:
         82:6b:77:bb:91:47:ec:21:0f:65:74:b7:83:a9:bc:12:10:fd:
         43:da:7b:2b:13:9f:3b:a3:ec:0e:2a:82:54:19:3c:e4:50:cc:
         bf:28:25:6c:78:26:b0:21:3c:7c:4d:73:25:a7:ef:20:83:cd:
         5f:a9:dd:e9:f0:99:d6:c0:e4:7b:0a:2c:fd:b6:b4:1a:f6:e7:
         fc:a9:80:9e:2f:55:de:e9:ca:54:d5:d0:3d:38:b4:dd:75:06:
         8c:86:b4:ad:0d:cf:05:1e:ea:5e:0d:52:07:dc:75:13:0b:27:
         42:65:d7:1f:b6:70:2c:62:d7:a6:4e:ad:34:1c:4d:bb:d8:f7:
         1c:d3:b2:66:70:b7:8c:5e:f2:17:0b:b1:88:01:83:70:fc:dd:
         9d:34:af:54:2c:23:c4:5e:e6:e5:4f:c9:cf:de:8f:60:fb:9f:
         ee:4f:b5:21:08:5f:9b:90:85:c3:8a:70:28:e1:21:31:da:96:
         05:f6:56:4e:9b:3e:b9:17:50:92:17:d5:d0:1d:02:37:c9:f3:
         8f:d4:48:20:66:7b:e9:cd:2c:ba:22:83:ac:16:01:f6:73:6c:
         12:d1:d5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:19 2024 by rpki-client on console-ams.rpki-client.org