Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49c1ae99-aa7c-3beb-bbc2-30666e4e0ec5.roa
File:                     49c1ae99-aa7c-3beb-bbc2-30666e4e0ec5.roa (raw, json)
Hash identifier:          QHDSmrvHIm66V2ls3wLaVHVgO95qO0ilgPiz/ahNoro=
Subject key identifier:   2C:33:CA:D1:7F:7B:70:28:E9:98:38:C0:3F:52:B5:C6:0D:DE:FC:EA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C8522A74D98C7999EB411C
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49c1ae99-aa7c-3beb-bbc2-30666e4e0ec5.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        98.197.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:52:2a:74:d9:8c:79:99:eb:41:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=d296cd3e-3519-43c4-878c-a2324f83b3f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3b:76:59:1d:fd:5c:81:72:88:aa:a9:41:71:
                    52:cc:0c:3e:ed:75:8d:b3:1e:68:98:dc:81:07:c5:
                    dc:7f:f7:ec:ea:1a:ed:a9:ba:49:dd:b4:9a:26:13:
                    16:af:45:81:16:f2:6a:9f:1d:be:f4:62:2a:92:9f:
                    5b:5c:24:de:4f:f1:40:95:05:2d:d7:92:ad:06:cc:
                    f8:40:89:08:04:b8:54:aa:5c:ae:cf:02:b4:59:f4:
                    ac:d8:93:84:b6:d8:e0:1b:72:cf:ba:d5:b4:8e:7c:
                    e4:5b:7e:2c:35:39:48:c8:c3:3a:82:37:67:dc:88:
                    2d:e4:da:2a:aa:1c:37:a8:99:9a:5d:c6:cb:13:eb:
                    75:2e:0f:bf:90:d8:9b:9d:e3:66:98:12:53:d7:c3:
                    93:5c:bb:c4:a4:85:c1:f1:be:5b:2c:8a:3a:f8:87:
                    72:b9:b2:96:97:4f:40:a8:40:4a:7f:ff:8b:28:9a:
                    ab:15:50:cf:e7:90:7e:29:3f:29:fa:8e:54:e0:6a:
                    e6:0f:1f:24:07:a2:a4:be:5a:6d:3b:01:e5:ce:93:
                    47:6a:ca:ba:44:8d:8b:a3:0c:30:7f:dc:72:31:25:
                    d8:e3:85:3e:4c:24:5b:15:52:db:21:09:99:ef:38:
                    35:53:b1:6d:69:45:9c:15:82:be:58:c6:60:86:1e:
                    17:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:33:CA:D1:7F:7B:70:28:E9:98:38:C0:3F:52:B5:C6:0D:DE:FC:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49c1ae99-aa7c-3beb-bbc2-30666e4e0ec5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.197.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:10:f4:b3:8a:cd:25:4e:f6:52:0e:e0:b7:a8:34:f3:a2:bd:
         8c:c4:30:26:57:ab:1d:b5:4c:bd:96:b5:b3:ec:2a:06:d3:ed:
         f3:ea:25:87:77:c2:46:eb:bf:84:79:e0:61:28:c4:a8:15:92:
         5b:7e:c3:d5:49:0e:7f:a7:c1:e8:5b:d1:46:c9:18:7d:02:b7:
         b3:67:f9:60:9b:80:4e:de:25:ff:ed:77:dd:ef:f8:5b:90:a8:
         22:b1:c8:c6:c6:e5:e2:e8:a0:1d:e0:64:67:f5:b8:92:a1:80:
         c6:ac:9c:77:ac:26:ff:c1:3e:a7:69:48:2a:8c:87:f9:b5:25:
         ff:a0:6c:be:8f:da:fc:1b:7f:0f:68:15:bc:bf:bd:49:c2:af:
         c4:7a:4f:3e:63:0b:fd:88:63:53:b3:c0:64:bc:fc:6c:d7:08:
         73:09:26:75:ec:04:64:01:57:12:5e:dd:d4:62:bf:49:74:a7:
         37:43:13:c2:83:22:4e:8d:c3:04:0e:9c:e5:42:9f:ac:b2:a2:
         e4:27:43:3b:bb:e6:c9:92:79:c3:0f:90:b8:e1:14:34:10:bb:
         9d:d7:70:3e:09:33:a0:3b:b0:07:a0:a2:4e:ad:47:bc:fa:c0:
         c6:51:31:f1:e5:2c:60:17:cd:30:f4:83:cb:94:e4:d6:b4:6a:
         23:6d:d3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:01:12 2024 by rpki-client on console-ams.rpki-client.org