Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a5b5d30-3a6f-3d01-844c-4f00d396ce75.roa
File:                     3a5b5d30-3a6f-3d01-844c-4f00d396ce75.roa (raw, json)
Hash identifier:          Q4LB1M5XKTEflUtoomGD1eDYJiXjfx59h6CIJepI9EI=
Subject key identifier:   6D:90:D1:CE:F7:C3:A3:BD:E2:57:D8:E4:3A:F3:66:D6:65:01:67:11
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB803028C55158A34FDD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a5b5d30-3a6f-3d01-844c-4f00d396ce75.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33490
IP address blocks:        98.246.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:80:30:28:c5:51:58:a3:4f:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=d2f8c42a-e7d3-4ee4-8c45-e00632ca4e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b0:10:f9:aa:00:7d:51:4b:2b:1b:46:6a:a8:
                    d8:55:c5:4e:20:8e:9a:25:42:6e:8d:0e:ff:79:6f:
                    54:3c:5d:b1:ef:54:63:d1:aa:be:00:5b:fd:5d:c8:
                    bb:ed:3c:9f:cf:32:bf:1a:32:50:10:01:b4:c8:32:
                    a3:22:cf:27:07:f1:2e:1f:50:aa:d3:fb:70:69:1d:
                    d0:35:e7:a6:80:ba:5c:0c:5b:59:9c:b3:e3:fb:dc:
                    77:65:17:ef:ef:15:b3:34:59:2e:30:c7:42:af:47:
                    fd:8a:83:53:d0:32:5d:b9:b8:c2:47:81:d0:1e:7d:
                    d0:f9:38:e0:83:5a:7b:1e:d0:f4:96:22:bb:58:bd:
                    44:c4:79:80:d0:c0:aa:9f:b8:de:bd:bb:37:9e:48:
                    7d:61:31:98:3f:89:0e:fc:0c:ba:bc:08:ef:3b:bf:
                    1c:98:47:bf:5f:8a:be:f4:9a:73:23:91:f0:ce:e3:
                    d8:1b:78:02:53:97:f5:db:9c:f1:86:c3:1e:f6:e0:
                    87:3b:f3:9a:4a:bc:5b:68:04:79:51:61:c8:04:38:
                    41:0d:64:7e:7c:04:ea:35:07:24:2a:04:50:2b:5f:
                    c4:6e:af:b4:68:d8:e9:48:3e:ae:3f:8b:9f:c8:39:
                    39:ae:af:77:98:12:82:6f:7e:59:3d:fa:da:b2:76:
                    8b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:90:D1:CE:F7:C3:A3:BD:E2:57:D8:E4:3A:F3:66:D6:65:01:67:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a5b5d30-3a6f-3d01-844c-4f00d396ce75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.246.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:d8:06:c0:d5:45:4c:56:f9:f0:97:18:75:f8:0c:8b:e7:03:
         33:73:39:b5:61:66:18:5f:42:3a:4b:56:15:99:af:45:63:0d:
         43:d0:5f:c0:04:81:88:76:cb:7d:2e:8b:c9:50:03:94:f3:e0:
         80:a0:3f:cb:76:f2:05:64:a3:39:80:fc:7a:90:9b:a9:8c:33:
         b8:10:96:81:18:d6:e9:4e:8b:c7:33:d7:e4:9e:4d:b1:ca:be:
         b4:43:e6:21:f6:5d:0c:83:43:2b:aa:d4:0d:bb:dd:90:3b:09:
         d3:58:57:ac:cb:21:4b:00:01:5b:64:df:16:d9:f2:55:72:5c:
         df:e7:96:4e:09:30:b8:2d:b5:98:76:d8:b3:90:c5:48:5a:1d:
         f9:f5:2b:a1:08:ce:5a:93:e6:52:35:d2:e0:8b:1f:f4:3b:af:
         de:14:cc:68:ce:49:79:0b:d9:22:57:55:a8:d2:bd:10:02:89:
         d4:a2:34:19:dc:3e:b6:37:40:dc:26:67:ca:58:b6:e2:f6:11:
         13:fd:a2:ff:e0:20:79:ba:42:d0:75:6f:a4:fd:8b:37:ce:7e:
         b1:d1:bf:da:e4:b9:33:e8:7d:76:ea:f6:93:17:e7:d8:18:c4:
         f9:57:fc:77:a3:8f:db:17:ff:9d:9e:b0:7d:a7:be:10:31:ff:
         3d:d6:4d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:37:27 2024 by rpki-client on console-fra.rpki-client.org