Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3319c230-c10c-3153-8c46-0efff7d0e119.roa
File:                     3319c230-c10c-3153-8c46-0efff7d0e119.roa (raw, json)
Hash identifier:          TEg8Yx67fPwisPvzIDJJAouasVsgMFMUx+HPEWAyXC8=
Subject key identifier:   54:FA:8E:BD:DD:DE:3F:6C:8E:21:B3:32:6E:72:46:3E:BD:29:48:3E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D8FBDB3830237C19168C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3319c230-c10c-3153-8c46-0efff7d0e119.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        98.248.152.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:8f:bd:b3:83:02:37:c1:91:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=dc2ccb19-149b-4401-affc-f9ef1df45b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:28:47:7b:be:77:19:19:04:f0:3b:f9:c7:d1:
                    75:af:76:6d:c8:2c:f3:48:bb:6f:99:d4:63:c8:ec:
                    f2:b3:82:e8:d5:a1:6f:ff:a2:3d:bc:f8:7d:87:53:
                    20:99:e1:13:2b:39:ce:62:3f:b9:73:e7:23:cf:7f:
                    0c:68:81:99:af:55:31:c4:a3:5f:78:1c:14:3b:a0:
                    62:75:26:4d:c6:50:be:25:5c:5c:d0:6c:1b:74:94:
                    88:df:0c:f6:12:be:65:db:f6:91:70:94:cf:5a:d8:
                    a9:00:04:66:96:53:56:ac:62:a1:7d:af:78:bc:f9:
                    71:cf:65:37:48:59:8a:85:2f:bf:32:7c:6e:19:4f:
                    8e:76:1f:c1:92:ab:f7:77:b3:fc:83:90:1c:f3:6e:
                    02:17:14:47:67:25:cf:3e:7f:0e:f1:be:b8:77:db:
                    b3:dc:80:25:b6:83:ee:c5:59:eb:eb:8e:a1:0d:bc:
                    c8:2d:fc:b3:bb:7e:51:ee:9e:a2:64:06:fe:b7:4d:
                    cd:6f:35:96:09:ca:f2:36:35:e8:fa:a2:d9:57:11:
                    0c:81:60:13:13:7e:96:b2:51:20:00:67:ff:95:8d:
                    c2:8e:9c:f2:ad:f0:b9:b7:88:8e:fb:c2:bb:50:9a:
                    91:b8:4e:57:fa:73:2c:14:7b:ab:b3:88:21:f0:af:
                    49:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FA:8E:BD:DD:DE:3F:6C:8E:21:B3:32:6E:72:46:3E:BD:29:48:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3319c230-c10c-3153-8c46-0efff7d0e119.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.248.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:9e:61:02:d7:55:d5:6a:d5:f1:49:27:92:51:0a:80:c0:13:
         53:35:dc:72:fa:24:de:c0:4f:84:84:ef:96:2d:cb:18:b4:39:
         41:4d:a4:f4:ca:0b:50:16:e8:7a:1c:5f:4a:f8:07:b3:5f:f3:
         0c:a6:16:ec:3b:bd:f9:51:fb:5f:37:b2:65:7d:70:35:f0:21:
         5f:99:cd:08:b4:73:e3:b0:27:0d:c5:ec:91:b4:15:0f:01:a5:
         0a:c5:61:35:64:c6:c8:04:fd:c9:32:a8:9c:57:f5:d7:22:6d:
         69:2e:96:a3:c9:eb:7f:73:2a:e9:13:82:75:b7:f4:dc:d2:79:
         73:72:dd:31:e0:0c:6d:53:c3:f3:d7:57:cb:82:67:62:d3:10:
         fe:04:77:0d:e8:ff:4c:20:29:67:64:86:bf:e7:0f:2e:32:a4:
         7f:f3:05:71:78:2d:c4:9b:2f:e6:14:fd:3f:78:03:2f:e0:88:
         e3:4a:58:4a:2a:02:c9:10:b0:ce:9e:17:c6:09:51:c1:e9:2e:
         4e:5d:40:5c:75:65:74:8a:4d:66:87:48:21:cb:c7:93:19:0d:
         18:5d:61:aa:92:ea:ad:8b:77:0e:08:90:3a:2d:61:db:5f:b3:
         5a:bb:9f:e6:78:76:ec:fa:a6:22:c4:50:5e:04:8f:f2:aa:74:
         51:c0:0a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:22:05 2024 by rpki-client on console-fra.rpki-client.org