Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22c8bdf2-c8f0-37c7-aa24-a3389b4d44b6.roa
File:                     22c8bdf2-c8f0-37c7-aa24-a3389b4d44b6.roa (raw, json)
Hash identifier:          LgSPxXgUGWdZ81keF9b9Bwx33Cw6PcK5OCv6fU621YY=
Subject key identifier:   DE:71:78:F2:AA:79:3C:7D:C1:E5:85:40:BA:BA:CC:EF:8B:56:21:48
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858481170332D751100DAAC13D940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22c8bdf2-c8f0-37c7-aa24-a3389b4d44b6.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     22258
IP address blocks:        98.50.152.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:70:33:2d:75:11:00:da:ac:13:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=25e6bb4f-646e-49b9-9c85-976e650620df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:14:1e:6a:72:1b:31:60:1d:14:6d:0e:29:
                    20:37:1d:66:67:f5:5a:c3:8e:c6:b0:19:09:c4:e4:
                    2d:2f:5d:af:20:72:22:05:e5:f6:10:b4:3c:a7:92:
                    fe:2e:39:f3:d4:01:38:e9:86:22:f6:00:89:93:db:
                    63:4f:c6:fc:8c:61:6b:03:8b:eb:86:18:79:53:82:
                    a2:47:4e:0d:d3:7f:00:65:80:b2:c7:d3:ef:30:2c:
                    de:8e:92:09:7d:a4:4f:05:39:0f:ea:60:e0:a7:a7:
                    85:81:34:c8:2a:c8:ee:e9:0e:fa:b6:40:f5:c9:0e:
                    e6:45:6b:4d:2b:6a:a1:4d:9d:e9:23:c4:1b:1d:ec:
                    c6:07:28:ed:6f:e5:f3:cf:d6:b4:5c:a5:45:24:e0:
                    45:74:f1:21:17:0c:ff:3d:75:cb:36:04:8a:d7:e7:
                    20:9c:97:c0:2b:6d:74:fc:28:08:9d:87:86:65:05:
                    63:fd:a6:ea:8b:1c:f3:8e:6c:7e:3b:b2:cd:09:f5:
                    af:8e:fc:d8:8d:a8:9d:73:29:7d:0f:88:fd:51:47:
                    ab:6d:ab:9d:b9:a2:89:35:94:e6:b4:ab:6c:c5:cc:
                    95:60:2f:89:46:e2:ca:31:d8:f0:42:a3:fd:a1:1d:
                    c1:bb:f4:1c:a2:92:5d:e5:28:fc:fc:f9:a6:bf:a1:
                    db:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:71:78:F2:AA:79:3C:7D:C1:E5:85:40:BA:BA:CC:EF:8B:56:21:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22c8bdf2-c8f0-37c7-aa24-a3389b4d44b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.50.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:2e:80:e4:68:14:ee:44:d2:a4:86:c0:79:75:f0:26:ab:78:
         34:31:61:54:1e:19:6c:4f:14:4f:c5:c9:f1:de:66:b1:ee:ca:
         77:de:5f:d2:23:b0:5f:5b:4c:e9:b7:58:6f:50:06:f2:5b:6d:
         18:95:0d:ef:0d:18:47:97:fe:0c:2f:6c:a3:f9:54:2a:b6:81:
         cb:60:6b:9f:9d:9d:c7:e5:06:bf:38:d1:62:11:37:57:2d:92:
         1f:10:45:cf:55:e4:2d:40:f4:30:e3:3c:a2:32:82:e2:f5:0d:
         2b:b5:2a:dc:6d:58:ef:5d:a0:47:e1:54:98:fc:d0:4b:86:75:
         19:29:77:f6:61:f3:fa:c6:9b:69:dc:c7:b4:f5:5e:41:ec:46:
         86:e5:cd:6d:e5:05:20:9b:0d:de:2f:bc:ac:fb:95:50:ba:31:
         b0:53:82:f5:42:52:c7:65:9b:45:9f:ca:cb:54:25:2f:79:ac:
         9c:54:54:c2:b0:60:a6:0d:b3:41:d2:27:fb:57:05:69:16:53:
         b2:46:3d:19:ac:cb:83:62:e5:d4:51:4d:f6:8b:39:54:2d:c2:
         0b:e3:65:63:87:a7:62:44:99:7e:6a:12:d9:8f:f5:6d:8a:b3:
         f2:3a:48:01:b2:d2:b6:b6:d8:81:9e:fd:77:f7:ae:c8:e8:6a:
         69:c7:10:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 16:13:07 2024 by rpki-client on console-ams.rpki-client.org