Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18e23fdd-9bdb-3756-b728-bc0ed50601dd.roa
File:                     18e23fdd-9bdb-3756-b728-bc0ed50601dd.roa (raw, json)
Hash identifier:          ZgP9YfibN5RJBcpuPfUQSuboi/l3u4ERuI1gFQE07pM=
Subject key identifier:   91:F4:D7:43:6C:FF:6A:C4:9E:B7:20:1D:B0:90:8A:E9:B4:17:D7:2A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C8460D1C9DE7507637B340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18e23fdd-9bdb-3756-b728-bc0ed50601dd.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        98.194.86.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:46:0d:1c:9d:e7:50:76:37:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=3ef55a4f-1e02-4a91-8653-2b3c3d773556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:61:cb:56:d4:f9:c1:8e:99:f7:1a:91:63:14:
                    d0:37:e2:1d:92:d3:6b:56:1a:44:5e:b2:21:9f:53:
                    4b:02:5f:fc:c0:04:0b:80:f9:06:1b:09:51:ab:b8:
                    b3:e8:7b:25:68:f6:11:e4:e8:37:10:42:26:fc:db:
                    95:ac:9a:08:8c:97:ce:36:85:02:33:eb:01:c8:ad:
                    a0:18:12:04:ba:fd:4e:39:1a:9b:b6:f0:99:72:81:
                    10:92:c6:0e:c7:48:e2:f3:bc:9d:9d:9d:e8:c6:81:
                    05:7b:4a:08:fd:8a:c9:9f:92:80:8d:6a:b5:4d:66:
                    6e:b0:87:52:5c:46:96:49:32:ae:00:06:dc:09:b0:
                    6e:ad:a8:bc:e4:8a:ff:aa:5e:bd:01:f9:73:99:5c:
                    8f:f7:78:03:98:24:55:8d:a5:16:36:7f:cf:d2:11:
                    2e:f5:f6:ac:20:bf:20:40:a6:d3:65:7d:6f:78:44:
                    46:95:a6:86:05:e0:d1:90:f9:48:4c:11:7d:e0:fb:
                    23:2f:2a:fe:0c:e2:0f:db:32:aa:42:30:f8:de:41:
                    ff:e5:98:97:1d:4f:c7:a9:bc:df:3c:ea:a6:7e:c1:
                    be:4d:9c:bc:42:58:76:b4:ee:c2:ca:e9:cd:68:88:
                    22:4c:ee:8e:9a:6d:99:cc:40:56:19:66:e6:4c:b0:
                    31:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F4:D7:43:6C:FF:6A:C4:9E:B7:20:1D:B0:90:8A:E9:B4:17:D7:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18e23fdd-9bdb-3756-b728-bc0ed50601dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.194.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:e5:f3:bb:7a:06:d7:02:8f:84:62:c4:96:b4:4e:66:b6:ad:
         52:76:d7:11:aa:c9:09:9f:03:11:d5:99:cc:c3:86:52:5e:9e:
         d1:48:c6:5f:c4:e1:ed:f8:21:26:24:96:0d:4b:75:9f:51:eb:
         1a:23:c2:9b:a4:2c:29:75:09:45:e9:e6:97:fb:9d:43:32:50:
         3a:5b:f6:1c:02:6c:8c:96:75:b6:91:fc:b7:f7:45:b9:1a:34:
         3e:62:75:f0:cc:5c:5b:c2:fb:c6:17:a9:06:55:82:fe:c6:58:
         13:a6:2a:dc:a9:4f:b5:07:e5:56:8f:f1:d0:0b:23:a1:48:1a:
         43:dd:0e:62:f5:16:56:07:a6:2b:c8:09:a1:0c:78:18:75:d9:
         44:b5:93:2b:ee:08:ac:bb:0c:bf:bc:1d:21:9e:40:24:76:48:
         36:87:28:6a:f9:c7:ce:a0:58:96:94:db:cd:96:40:f8:b1:f8:
         bd:d7:a2:9f:61:4e:13:1f:d8:05:c2:86:0a:cb:b5:59:a1:5b:
         b2:13:79:61:24:5e:65:11:55:4c:94:93:45:85:ee:01:e6:94:
         c6:13:3c:5d:12:f9:8e:8d:b2:1f:27:d0:1d:68:32:61:46:10:
         f3:f3:e9:c4:d1:1e:f6:0a:c7:0e:a8:84:19:6d:38:bd:9a:34:
         2e:ef:2e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:56:29 2024 by rpki-client on console-ams.rpki-client.org