Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71b8dddc-1f23-37b6-ae9d-c6be8e52d313.roa
File:                     71b8dddc-1f23-37b6-ae9d-c6be8e52d313.roa (raw, json)
Hash identifier:          mkWkNG5ms21+ytK9y5kxb5hYbt87+U1AhbCrlNeYULM=
Subject key identifier:   A8:D1:25:E4:EE:AD:29:29:E8:2F:17:BF:BF:70:55:EA:7E:7A:45:7B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E60369605C4A72FF9AFC40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71b8dddc-1f23-37b6-ae9d-c6be8e52d313.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        98.192.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e6:03:69:60:5c:4a:72:ff:9a:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=eedb1b0f-7727-435e-a780-6ca72c30f6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e1:14:80:88:55:9b:44:15:6b:29:51:3a:9f:
                    ef:80:00:23:85:c1:a1:d0:33:d8:50:26:c8:20:ba:
                    63:f5:e3:c7:df:db:08:fb:e8:05:cd:d8:86:74:41:
                    5a:9d:fa:4e:99:79:3f:80:e5:60:1f:dc:9b:3c:c5:
                    09:40:99:5e:cd:fb:b0:58:63:83:0d:2b:fa:d3:85:
                    0a:a0:2e:b4:72:e4:f1:79:1a:8e:0a:26:74:65:56:
                    f9:c4:5a:11:01:07:37:0b:09:86:1f:53:d6:56:b3:
                    fc:9c:e9:e3:1c:1e:7c:b6:0a:b4:07:cc:27:96:75:
                    84:20:13:bf:b4:27:0d:c2:45:4b:31:40:0c:8b:8e:
                    c2:60:07:53:f8:2f:5d:cd:0a:31:a2:ed:e7:c4:f7:
                    60:18:17:26:7d:5a:fd:c9:f1:89:ca:a5:72:b9:3f:
                    8a:b2:7f:98:40:d8:1f:8c:1e:4c:94:f1:b4:84:3e:
                    f9:9d:fe:a3:10:9b:44:2c:e6:2b:02:73:f0:94:16:
                    28:18:e4:3d:68:ff:c1:65:25:ff:7b:45:81:24:04:
                    47:63:eb:bf:de:79:27:22:49:1c:06:70:e8:c6:dd:
                    b4:a0:23:ad:0d:df:56:88:b5:e8:6e:58:3c:ad:73:
                    e1:c3:93:21:a4:74:85:2e:50:ad:3b:2e:f3:a4:48:
                    79:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D1:25:E4:EE:AD:29:29:E8:2F:17:BF:BF:70:55:EA:7E:7A:45:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71b8dddc-1f23-37b6-ae9d-c6be8e52d313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.192.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:aa:67:59:f9:9f:5d:80:1b:2e:70:6e:72:9a:9f:0b:89:61:
         fa:9c:1f:fa:14:df:9d:d7:47:4a:fc:70:1f:62:d0:95:dd:83:
         05:1c:2e:ef:82:c3:2e:dd:db:eb:44:32:71:59:ea:a1:b4:9f:
         f5:7a:f5:8b:a2:e7:2e:36:db:88:23:8d:27:da:27:75:28:be:
         10:63:0e:eb:89:87:32:19:44:e7:25:f4:df:45:79:8b:a2:d7:
         5d:73:b7:a0:c5:1a:49:ba:c8:38:10:9d:6c:aa:20:41:b3:ef:
         04:1c:50:9e:b0:25:d1:19:70:d3:3d:7a:e2:ec:99:55:75:54:
         f8:98:6d:13:46:8d:30:87:6f:60:27:5d:16:a1:34:41:39:13:
         e6:f7:7a:ca:0b:f1:01:5c:44:79:dd:07:d1:37:89:19:b2:e2:
         f0:52:0b:2d:f3:2e:67:d7:ee:a1:c1:c3:fe:ee:b4:c7:6c:b8:
         d9:4b:be:2f:47:37:e3:7d:45:af:ee:92:b0:b5:63:88:85:6a:
         77:b7:b5:31:b1:44:4a:5b:75:01:6d:05:a5:d3:60:fc:74:2f:
         15:d9:e3:a9:c4:8c:f3:2a:7f:7a:4e:25:59:4e:a4:a0:8f:78:
         5f:98:27:59:4d:80:6b:37:15:83:6d:81:17:bc:59:c8:ec:b7:
         3c:e1:18:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 16:27:55 2024 by rpki-client on console-ams.rpki-client.org