Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03e22aef-37f8-38cc-84d2-12282dc8956b.roa
File:                     03e22aef-37f8-38cc-84d2-12282dc8956b.roa (raw, json)
Hash identifier:          gO/JYKBb4QY7rP4LYHg4NW7G03Ri7WpSoZ9OjJFu/Yg=
Subject key identifier:   70:7C:85:1F:71:6A:67:42:10:E5:93:53:89:9A:B7:0F:93:97:00:CA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C85FB05CE347987DF8AA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03e22aef-37f8-38cc-84d2-12282dc8956b.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        98.200.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:5f:b0:5c:e3:47:98:7d:f8:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=07b15624-c67c-4e7c-b8bf-7d8496527f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2c:85:70:f4:d1:0f:07:c7:c7:ef:f5:46:2f:
                    c9:14:d4:11:da:7d:7a:5b:bc:3c:4d:9b:26:5e:62:
                    00:53:80:a4:2a:76:80:6c:fe:79:17:47:15:7c:b8:
                    4e:7b:ee:90:8d:09:0b:98:b4:1b:24:88:0d:5c:57:
                    8c:dd:6e:f9:73:26:0b:90:12:f6:90:c9:fd:a7:d2:
                    f3:0f:2a:7c:e0:f0:8b:80:cf:fb:30:7e:9f:83:e2:
                    56:6a:73:69:47:c1:89:15:3e:dc:09:8f:e7:01:78:
                    b1:0e:0e:b7:b6:58:a8:bd:ff:90:94:2c:21:ce:ad:
                    d7:56:b6:90:74:7c:a8:1c:4a:81:9a:5c:ff:0c:ef:
                    44:29:83:e9:92:18:59:3d:ce:c5:b6:68:d8:dc:07:
                    4a:f3:1c:cc:78:9a:12:cf:b2:55:76:0d:35:c1:7e:
                    6b:8a:2a:75:9e:32:3b:49:48:73:b3:58:b1:e3:1b:
                    57:f5:94:70:f9:40:08:7e:32:1a:7f:5c:94:a6:c9:
                    39:c0:c7:e8:2e:c4:92:47:f9:39:9d:2b:93:e1:fa:
                    15:9e:c3:1f:a6:65:a5:42:f8:fb:1c:51:fb:bc:2d:
                    bf:ee:2c:da:31:d6:34:c7:a4:ed:8a:8c:da:64:99:
                    4e:3c:b0:63:37:2a:c6:36:7a:6a:df:65:5d:5b:50:
                    52:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7C:85:1F:71:6A:67:42:10:E5:93:53:89:9A:B7:0F:93:97:00:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03e22aef-37f8-38cc-84d2-12282dc8956b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.200.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:71:f2:59:f9:1d:23:3e:65:2f:d6:79:cc:ae:5e:36:a3:7d:
         f8:ac:f6:a1:26:83:1a:28:4d:7a:2e:2c:5c:25:30:2f:fe:41:
         21:7c:8e:d1:74:0e:59:7e:f6:3c:10:8d:61:23:5e:ff:ba:fc:
         09:04:b3:1c:35:e9:68:a5:4b:3f:f1:9f:15:73:b6:12:be:e6:
         01:96:8b:87:9a:0b:1b:43:c8:45:2b:a8:e5:e8:95:e4:ac:f6:
         dc:7e:7e:73:58:84:f3:63:0f:10:06:85:51:9a:e9:ed:0b:d8:
         67:ab:ea:7c:e9:e3:5b:b8:22:33:f9:a8:84:91:a7:39:4d:2a:
         7c:82:04:3b:2d:9a:1a:79:b1:70:36:1b:71:61:30:0d:c1:7e:
         aa:f3:45:d4:1f:0e:ce:b1:cd:82:5b:0b:4d:92:da:89:2d:26:
         8e:22:c0:7d:39:b7:d2:a5:96:ff:1b:c3:a9:52:71:ad:ee:6d:
         5b:76:97:d2:9e:b4:67:5a:35:a2:ed:bc:c0:d8:2c:ee:0b:ab:
         70:a1:07:d1:20:8e:df:fc:75:2c:14:84:aa:03:50:88:89:af:
         b5:b4:89:3a:bf:74:dc:ac:9f:55:f1:07:45:32:c7:a8:ed:de:
         51:f1:39:d2:aa:4d:7d:c1:38:98:c3:35:2c:15:f1:24:a8:86:
         0d:f8:f1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:54:35 2024 by rpki-client on console-ams.rpki-client.org