Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98368fc3-8d4e-3d77-8515-5345b912cb0b.roa
File:                     98368fc3-8d4e-3d77-8515-5345b912cb0b.roa (raw, json)
Hash identifier:          dhR7PRCcrOQyzx8ge1isrC1okirNEhv+enTdbdRsHw4=
Subject key identifier:   98:F0:DD:1E:60:6D:7A:74:F5:EE:96:19:D1:59:58:57:B4:8D:6E:C8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFB915E6EEC6111322F3B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98368fc3-8d4e-3d77-8515-5345b912cb0b.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33287
IP address blocks:        96.109.150.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:91:5e:6e:ec:61:11:32:2f:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=610bcc73-a949-4bdf-b15a-3549551d49e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2a:27:91:6a:61:be:38:02:a4:61:75:d5:f4:
                    91:b6:74:cc:7e:6b:8c:83:9c:3d:dc:ed:ef:ec:02:
                    60:b9:dd:bc:cb:cd:da:19:3c:d8:38:58:71:42:f1:
                    30:4e:f8:68:b0:cb:4a:ca:68:87:a1:0e:0c:57:db:
                    f6:bf:a1:90:43:cd:16:ff:32:76:2b:13:c5:cd:e1:
                    74:43:6d:f4:30:42:36:5a:6c:36:5f:bb:db:33:69:
                    99:ea:b1:e3:b2:35:34:c8:61:9e:a2:97:48:0c:0c:
                    f4:87:d9:c8:ee:bb:d5:12:d0:e4:52:95:41:40:96:
                    e7:66:68:51:60:5e:7a:93:71:1a:10:c1:00:e3:10:
                    be:9d:69:73:fc:75:6a:a8:ca:3d:5f:3e:a5:b7:b4:
                    d3:79:65:ec:a1:94:8c:4d:0e:b0:5a:d3:c4:e2:00:
                    2b:9a:0d:5e:17:b5:04:0e:86:97:18:69:f1:ac:79:
                    46:20:23:74:33:5d:58:c2:b1:11:68:96:53:f7:97:
                    c8:e5:18:47:8f:ef:c5:81:14:41:fa:8c:c8:b3:06:
                    46:1a:7b:be:a3:10:0f:31:8a:c9:f7:17:62:9f:ee:
                    f2:39:c5:12:c0:16:c9:86:98:56:c5:59:0a:32:9f:
                    c2:90:3b:2e:25:46:64:7c:79:99:a9:65:ff:50:38:
                    01:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F0:DD:1E:60:6D:7A:74:F5:EE:96:19:D1:59:58:57:B4:8D:6E:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98368fc3-8d4e-3d77-8515-5345b912cb0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.109.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:b6:00:27:12:37:a8:5a:6d:fb:bf:96:bb:33:37:a6:a5:3e:
         39:23:7c:2c:6c:35:57:71:d1:9c:e4:bc:e5:7c:1e:66:cb:d2:
         b4:62:c5:45:0d:db:55:0b:e7:56:66:8f:5c:a0:a9:20:9c:dc:
         f6:7d:2f:5d:5f:70:5d:dd:a7:05:d8:aa:e7:41:3f:fb:e1:48:
         d4:ba:e6:b2:ac:1e:6f:9d:38:f1:3d:03:b5:31:02:64:63:a4:
         b8:4d:99:dd:fc:ea:77:2a:9e:2e:d8:f3:3c:f3:0f:be:75:89:
         ad:15:ea:c1:0f:65:df:48:eb:a5:9f:bd:b1:f3:9d:29:f7:f8:
         7c:d3:bb:7b:7d:f7:ce:03:5b:38:39:e0:68:9e:26:e3:4e:13:
         f0:0f:15:33:e2:84:ad:bf:7b:97:a9:5f:89:f8:d3:f9:7b:06:
         e6:3a:42:d5:6d:65:1f:9e:85:11:17:26:44:f0:5b:ab:d3:74:
         21:1a:1a:07:bd:fd:38:fb:29:d3:79:05:1c:ff:c7:af:d6:3a:
         e5:a4:e3:af:11:f6:39:a8:41:8e:95:e1:3d:5c:be:e7:ea:63:
         a7:c7:9d:58:7e:4c:ce:a1:44:d8:61:e3:73:d1:e8:ed:3d:0e:
         0a:a2:9c:0c:ce:8e:f0:c5:3d:2d:f5:ed:6c:6b:d2:92:04:8c:
         58:29:20:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:01:21 2024 by rpki-client on console-ams.rpki-client.org