Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30e4a87a-e78a-3af8-b05e-e3dfc571cb38.roa
File:                     30e4a87a-e78a-3af8-b05e-e3dfc571cb38.roa (raw, json)
Hash identifier:          xwg6jcb6kgWsAQcLcXaGggfHx7kwUqAJVFg4h58oufI=
Subject key identifier:   CB:F4:DB:5E:AB:A6:C2:35:DD:A6:7B:8A:B6:FD:E5:BF:FE:A8:9C:B1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C8594650D026E9FFB29AC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30e4a87a-e78a-3af8-b05e-e3dfc571cb38.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        98.199.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:59:46:50:d0:26:e9:ff:b2:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=2fd177cb-c35c-488a-aa21-d0895d33201f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0d:fe:42:74:e1:47:ce:c2:f9:fd:b9:9d:52:
                    5c:50:45:45:df:08:d5:d0:ea:61:f5:19:06:f1:aa:
                    c3:13:e8:ba:6d:59:b1:b0:9b:bd:be:0d:bc:29:9b:
                    86:02:68:3c:aa:88:c2:9c:67:f2:5a:08:3d:9d:e9:
                    35:70:03:0e:df:14:0e:45:88:3e:17:45:2c:3a:db:
                    b2:15:4f:86:37:ee:af:d1:e5:bd:cb:09:f6:17:2d:
                    4e:92:a1:01:52:a3:40:9b:29:eb:a6:d7:7c:ec:41:
                    64:6a:ae:15:c1:fc:69:61:86:43:92:7a:b8:e7:d3:
                    b5:94:d2:5e:82:53:bb:8f:d7:e4:19:b9:67:de:07:
                    d3:5c:5f:53:c6:43:65:66:f8:74:4f:ee:66:14:6c:
                    df:73:85:a5:09:4a:8c:d9:59:8c:17:4c:3d:a4:c8:
                    4f:c7:ba:94:c1:a4:0b:67:2c:32:95:8b:65:fd:dd:
                    d9:7d:0a:7c:50:20:28:54:72:3c:0b:d1:fc:05:49:
                    87:4c:10:c3:8c:6f:51:72:c8:0a:05:4e:b2:c8:18:
                    73:90:ab:d7:79:db:7c:80:a7:8c:8c:b1:74:c0:26:
                    81:05:7b:a8:75:3c:47:3c:71:18:d9:03:bc:53:6e:
                    55:c6:af:98:61:93:fc:67:ba:d9:13:99:7f:79:df:
                    da:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F4:DB:5E:AB:A6:C2:35:DD:A6:7B:8A:B6:FD:E5:BF:FE:A8:9C:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30e4a87a-e78a-3af8-b05e-e3dfc571cb38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.199.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:75:03:ec:b7:aa:9d:b1:7c:38:81:b0:fa:db:c5:c9:ad:04:
         91:10:38:1b:8d:f0:77:13:51:57:9d:21:89:c7:e5:8d:0a:f1:
         f7:7c:fa:0c:9d:0c:44:50:70:28:25:70:55:ae:60:69:dd:cd:
         f7:e3:b1:ad:8f:5b:8e:15:95:a9:2c:23:e5:69:ea:cb:aa:7d:
         a4:dc:81:cc:46:61:f7:0f:26:f7:4b:ba:24:99:7a:65:26:e2:
         06:7a:bb:0f:7a:e9:96:72:01:60:f5:70:09:8f:e9:da:d1:72:
         8c:97:85:bc:4d:2e:e7:27:3e:66:51:16:c7:6e:0e:d0:ab:a7:
         97:83:7a:c4:35:2f:52:fc:03:69:6a:db:19:f1:a6:67:0b:62:
         ab:68:cd:c3:68:83:12:3a:c9:1f:42:02:0c:2f:63:ea:d1:42:
         c6:61:f6:bb:e8:62:02:db:d1:38:21:35:10:1c:b8:4d:0d:41:
         51:8f:16:f0:33:8f:5b:e9:0c:4a:47:a0:72:df:7d:34:a1:6f:
         66:d1:15:ec:3e:2c:ed:30:cd:ec:24:ec:77:69:92:52:bf:61:
         31:b7:2a:ba:8e:11:bb:a8:5d:c4:14:22:06:16:55:73:cf:cb:
         67:b4:7a:7f:0f:5c:cc:9e:c4:67:25:a7:b4:38:84:79:ff:af:
         f1:eb:33:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:33:00 2024 by rpki-client on console-fra.rpki-client.org