Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3807b2c1-0cc2-35c0-88d6-ab162eea0175.roa
File:                     3807b2c1-0cc2-35c0-88d6-ab162eea0175.roa (raw, json)
Hash identifier:          Ss7q8cHNaiXhuMxkqK9RWkalLERqO6vydltIBS2NLbQ=
Subject key identifier:   85:4B:3E:06:6C:A2:B6:F5:2C:82:10:C7:70:44:5F:B6:35:AD:BE:88
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C85E5CFB5F082F9962DE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3807b2c1-0cc2-35c0-88d6-ab162eea0175.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        98.200.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:5e:5c:fb:5f:08:2f:99:62:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=327b3ece-d4c3-4dcc-99aa-09d7e8ab60c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b3:af:b9:6d:e5:7e:79:fb:18:fd:b3:bb:98:
                    3f:ba:55:2d:3d:30:ac:6d:11:8c:3f:79:19:b4:ca:
                    ca:22:15:0a:9d:6b:c3:a2:72:c1:47:86:19:69:ca:
                    bd:b5:df:54:cd:49:88:35:4e:76:46:45:55:41:fc:
                    ef:b3:97:4d:60:15:a8:56:96:42:22:aa:b4:fc:7c:
                    f8:38:e2:47:3c:59:a4:0a:23:0d:19:e0:68:01:97:
                    72:82:27:21:1f:8e:2b:bc:9d:45:dc:04:47:f2:4a:
                    7e:0b:2e:dc:39:32:02:25:22:ac:69:2a:ce:15:1b:
                    2c:5c:e9:44:b8:a1:79:0e:d0:77:99:3c:f5:01:91:
                    d8:b0:bd:8e:8a:9e:c7:e1:7f:dc:78:3b:0e:75:13:
                    e3:db:90:02:e3:00:c0:c4:01:6e:34:94:9f:3c:5b:
                    e5:d3:a3:7d:6e:2e:a1:d8:a2:65:fe:a3:ad:08:61:
                    8b:2a:e3:ea:21:7c:fc:28:6a:21:14:a4:9e:6e:e5:
                    22:5f:98:7d:01:2a:04:68:a0:55:5c:e2:7d:81:55:
                    3f:95:8a:8d:5d:db:0e:c0:d5:97:bf:fa:54:6e:60:
                    aa:92:c9:7e:06:05:c0:3d:20:8b:eb:9a:dd:67:6b:
                    2d:2a:f6:26:cf:0b:62:52:4f:9d:d5:61:3a:2b:5e:
                    de:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4B:3E:06:6C:A2:B6:F5:2C:82:10:C7:70:44:5F:B6:35:AD:BE:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3807b2c1-0cc2-35c0-88d6-ab162eea0175.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.200.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:9b:98:a1:50:ef:a6:b3:db:96:8f:83:b2:86:ed:c1:eb:d5:
         a9:14:81:c3:ed:8c:34:f4:6b:61:10:4e:cd:11:a8:e9:35:c3:
         61:6a:79:d7:97:3c:45:af:5f:28:23:13:ec:76:47:b7:c3:ce:
         14:db:84:1f:f6:c4:6b:bc:61:dd:20:f3:07:c2:41:88:8f:99:
         b2:95:6d:e5:c7:53:11:13:b8:4c:07:4a:0f:e5:c9:8c:1e:91:
         8e:74:2f:b1:d0:67:45:aa:4e:48:b8:c7:97:84:83:3d:03:64:
         ca:3a:47:e6:83:be:f5:ba:0d:b3:df:26:81:9a:c6:85:1f:9c:
         40:2e:29:16:e4:c7:37:6e:ff:c0:0e:cf:f6:f4:c8:15:2f:53:
         8c:df:83:ad:41:4c:cf:32:67:fe:c7:48:b9:d5:cd:a6:ce:f4:
         83:98:d1:93:2e:23:aa:ae:ab:27:65:78:af:ea:dc:ca:ee:3a:
         17:10:08:4b:5b:9b:c6:9d:cc:cc:eb:e1:ee:39:38:bd:95:08:
         fa:ac:bb:6f:4f:3d:2d:09:33:8c:8e:42:a0:53:85:24:60:f5:
         82:34:fa:30:38:cc:b6:13:2a:a9:24:80:fc:26:61:c4:0c:78:
         0f:12:6b:d5:42:c7:2e:cf:ae:f2:1e:fa:45:d5:6e:38:a5:b7:
         b6:f7:b5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:59:31 2024 by rpki-client on console-ams.rpki-client.org