Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91b42d1e-b4a3-3e69-b664-523cd5702790.roa
File:                     91b42d1e-b4a3-3e69-b664-523cd5702790.roa (raw, json)
Hash identifier:          oRIfCwHhtRse3jUNM6dNm9GG8ISMYnFsfPtBIpjTsOc=
Subject key identifier:   66:06:83:D2:9E:D3:CA:4A:85:C4:9B:F6:65:89:62:9A:F8:D3:86:DC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAFBDEABF07175D8C5415E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91b42d1e-b4a3-3e69-b664-523cd5702790.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     13367
IP address blocks:        98.61.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:af:bd:ea:bf:07:17:5d:8c:54:15:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=3897ea8c-3a6f-4362-8524-edde693f4ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3c:44:3a:9c:95:71:7f:07:44:34:44:28:2e:
                    d7:11:9a:66:3e:27:4a:f3:55:29:94:1c:e2:34:31:
                    f2:b1:d8:70:5c:32:90:f5:20:91:d8:84:f1:cf:f7:
                    ca:d2:78:c1:c7:64:25:98:53:58:8e:1c:4f:90:a5:
                    71:30:3b:0e:d3:cb:04:cc:a5:a6:f3:0f:89:9e:b6:
                    39:49:cd:ad:33:3b:2d:a8:a4:a0:aa:ca:82:f7:ac:
                    48:1c:ce:b7:82:42:0f:a3:b6:0f:5f:b5:05:40:87:
                    93:42:6a:2a:65:96:72:fe:ae:59:8a:ad:0b:60:74:
                    28:6e:4f:ea:32:35:a5:31:3d:5b:ee:9f:4f:a5:8b:
                    e0:db:e2:08:c5:ad:c4:cf:5a:0c:d1:2f:27:05:e8:
                    c7:2c:90:fc:8e:91:b0:ff:c3:1c:d8:87:91:e9:7f:
                    3c:16:8e:2c:36:5a:bf:7d:29:b5:45:f8:9a:76:a2:
                    f3:59:a6:81:4c:9f:36:28:7f:a4:a3:8b:78:43:e5:
                    4a:20:67:c5:ad:cf:ab:a6:31:86:94:11:f1:75:5f:
                    35:b5:44:ea:31:de:f0:73:c4:45:aa:71:be:b7:6f:
                    9f:c5:30:01:fd:24:84:f5:c1:93:b0:91:f8:b3:42:
                    7a:c3:a4:14:6e:4b:5c:a3:96:e5:ae:bc:b1:aa:46:
                    0a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:06:83:D2:9E:D3:CA:4A:85:C4:9B:F6:65:89:62:9A:F8:D3:86:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91b42d1e-b4a3-3e69-b664-523cd5702790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.61.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:ca:15:69:18:61:5e:0a:75:08:85:d1:86:dd:27:a4:dd:1f:
         ae:e3:0f:6a:c0:e5:22:17:7e:30:dc:5c:80:8e:23:12:9f:c4:
         dd:60:60:9c:6a:67:ce:9f:ac:8d:4a:81:22:96:7c:ac:28:2b:
         78:f6:ef:17:86:9b:fb:d4:ab:c8:7a:9b:11:7a:aa:47:0a:e6:
         a2:2a:8b:47:62:a3:7d:6b:8f:0e:7e:cd:eb:06:c0:d2:a6:0a:
         70:5d:ee:83:82:d4:d8:62:5d:5c:45:a0:5d:b4:a5:54:18:64:
         e0:83:94:c9:67:b8:c6:51:48:a4:f7:3b:87:f6:83:4e:16:58:
         80:96:7f:a8:cd:e6:28:da:78:80:7c:0a:24:9f:ae:d6:2b:5e:
         76:47:b1:c0:b7:e8:99:04:7b:c9:bd:d6:5f:ce:7c:90:cf:03:
         84:04:ea:16:37:18:3e:d5:75:88:64:d4:08:37:1d:1f:78:86:
         e3:d6:ca:63:ef:7d:da:8f:15:ee:49:3f:73:c1:63:7f:6e:ef:
         da:be:53:94:04:e0:36:cd:93:3b:df:7f:31:e7:1f:e7:e7:93:
         63:b0:3d:7b:a1:8e:f4:16:df:c9:86:62:ac:a1:cb:83:80:fe:
         7d:d6:e5:8c:8a:ee:05:8b:31:5a:0d:26:ec:de:d6:7e:4d:b2:
         b5:c8:ef:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:31:59 2024 by rpki-client on console-fra.rpki-client.org