Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fc71aeb-482f-3d39-8058-15744eda5b7b.roa
File:                     4fc71aeb-482f-3d39-8058-15744eda5b7b.roa (raw, json)
Hash identifier:          hP85enhhaRWhZI32cx9nzp8mqaOnQqZplTFwcjYVn/k=
Subject key identifier:   8A:15:E0:13:78:2F:CD:98:52:43:57:26:58:F6:2C:5F:6C:AD:64:87
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C843D83E0821381E3FD580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fc71aeb-482f-3d39-8058-15744eda5b7b.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        98.194.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:43:d8:3e:08:21:38:1e:3f:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=eda5f401-ef97-466d-95da-698ecd916f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b3:04:1b:d6:3e:55:0a:21:09:d3:96:a8:56:
                    85:0b:be:b9:7c:b0:1d:47:96:38:c7:84:2b:25:35:
                    49:05:0c:2a:d6:30:2b:1d:f2:90:18:65:95:bd:7c:
                    ef:e7:f3:53:82:85:e1:de:f1:64:10:9d:2f:75:6e:
                    79:ac:9c:27:98:5e:fe:aa:52:4f:79:dc:ee:30:f8:
                    7b:60:16:c3:8f:54:54:14:c1:e4:ca:38:c2:1f:73:
                    49:dc:3b:38:6b:50:c9:6b:aa:25:71:b0:25:9b:13:
                    21:6f:a3:e1:a6:1d:e8:e4:09:81:c7:ba:16:71:70:
                    22:d7:52:43:e5:c9:a1:d9:40:46:28:8b:2b:23:03:
                    8f:04:0a:87:e4:e7:c8:09:d8:b8:33:e7:59:a3:73:
                    ca:8a:90:69:6d:aa:ae:3e:af:d0:7e:0a:dc:f9:32:
                    04:7b:d3:67:bc:52:c6:d1:87:96:5a:ad:cb:a3:11:
                    db:7a:65:05:8a:e7:10:70:a6:29:f1:2a:f6:9a:f7:
                    8a:88:b5:99:56:de:18:0e:f1:73:b3:79:12:c9:d0:
                    47:fb:05:25:88:72:74:51:b8:59:6e:e0:f9:fc:82:
                    d4:c1:e7:9b:84:a0:ef:87:45:7e:0e:1b:6d:dc:f9:
                    6b:32:f7:ff:c0:5c:c6:31:30:79:1e:f4:92:81:91:
                    17:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:15:E0:13:78:2F:CD:98:52:43:57:26:58:F6:2C:5F:6C:AD:64:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fc71aeb-482f-3d39-8058-15744eda5b7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.194.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:42:d3:fe:9b:78:76:c9:61:1f:d9:02:30:57:9b:bf:b8:7d:
         ef:b8:4c:dd:7c:c8:93:c7:d8:c0:5f:12:fa:2f:92:68:f7:cd:
         35:1c:d0:2d:1e:55:2a:39:ad:77:7c:b4:57:42:54:65:15:96:
         f4:46:c4:f3:5a:6a:9b:22:5f:a5:97:c5:a0:da:9f:86:3b:eb:
         29:e9:2e:0c:a3:fb:7f:ea:1c:27:39:a8:c2:4b:2f:bb:6b:fd:
         88:de:20:a5:1c:6f:f1:e8:8a:09:58:f1:00:d5:14:fe:3e:08:
         df:67:b5:88:31:6e:49:b2:f4:81:6e:36:46:28:07:81:de:6b:
         93:d6:f4:90:b4:24:cd:00:7f:d4:93:72:67:fe:7f:21:e6:86:
         39:ad:52:cc:76:65:28:84:0f:d6:f5:1f:74:df:4d:7d:63:77:
         37:20:c4:12:cd:cb:57:78:64:2b:a6:0d:32:8f:05:9a:f9:d1:
         2b:95:57:ae:fc:fc:a0:ab:a0:d8:0a:ad:55:c1:c3:4a:5c:dd:
         f8:a6:33:29:67:f2:5c:69:76:97:01:db:59:ed:da:9e:bd:ac:
         04:0a:b4:dd:86:84:c1:c2:8c:9e:35:d9:7c:07:27:86:15:13:
         e0:79:c6:6c:08:ce:b7:de:b2:55:ce:fe:09:9f:bf:02:54:04:
         d1:e7:95:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:35:39 2024 by rpki-client on console-fra.rpki-client.org