Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fca919b-022b-333d-80c7-3a5f6cff114b.roa
File:                     9fca919b-022b-333d-80c7-3a5f6cff114b.roa (raw, json)
Hash identifier:          NT0sas+mOU9nhMkjrvgLvUtuxpOR9a533fLMMOVkCNU=
Subject key identifier:   67:CC:6B:09:94:81:47:07:1B:1A:10:B2:F6:6B:40:DD:48:C8:A0:B4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF94529635AAEA61950D7D8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fca919b-022b-333d-80c7-3a5f6cff114b.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     20214
IP address blocks:        98.254.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 Jan 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f9:45:29:63:5a:ae:a6:19:50:d7:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=16c6c6f1-99db-418f-88ce-57be5246b1c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:aa:23:ba:ef:7a:2c:0a:f1:e7:26:b8:3e:93:
                    1f:9a:be:98:62:d4:56:e7:db:6e:9a:5a:24:4b:13:
                    1e:b6:60:60:68:19:38:68:fb:0e:f0:c0:62:af:70:
                    c3:e4:cd:00:9e:41:e4:f7:54:3f:22:c3:04:1c:4d:
                    cb:8b:b4:99:a8:70:19:c6:6f:48:e2:2d:09:cf:26:
                    3a:74:bb:50:ee:30:d3:32:8b:26:25:51:0a:ac:79:
                    6d:13:83:bf:c9:26:e9:7b:d6:18:56:57:d3:bb:20:
                    1d:d2:7a:cf:27:dd:1a:4f:31:ff:ad:d4:ee:7a:5f:
                    6d:c0:8c:a9:40:7a:aa:29:a2:9b:74:09:1a:4b:ab:
                    26:47:8b:db:ee:af:92:e1:95:6c:3c:5a:a7:96:d4:
                    73:65:c6:12:d4:7e:ed:ce:f5:49:fe:fe:8c:7b:8c:
                    9b:53:2e:54:7b:91:aa:0e:c5:f9:6b:f5:18:ae:54:
                    79:47:9e:10:0a:90:0f:09:58:d0:26:51:9c:9c:d0:
                    22:3e:df:af:9d:c8:e8:ae:bc:73:77:d4:f7:4b:57:
                    9d:ed:de:7a:38:13:8f:37:cb:c3:67:99:15:3f:33:
                    de:23:16:04:3e:82:82:f9:58:84:1d:40:77:fc:56:
                    54:09:bf:8a:eb:a8:3f:f3:9f:c4:bf:0a:f5:bd:f5:
                    60:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CC:6B:09:94:81:47:07:1B:1A:10:B2:F6:6B:40:DD:48:C8:A0:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fca919b-022b-333d-80c7-3a5f6cff114b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.254.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:3d:cc:a3:59:44:23:2e:fb:65:33:4c:a9:17:e9:83:ef:cf:
         71:99:60:d2:51:1d:58:75:68:39:ca:9b:a7:6f:1f:41:b1:2b:
         ca:a7:05:72:b7:61:4d:58:f7:26:21:57:b4:c3:cc:69:a4:66:
         58:df:33:48:5d:35:ca:eb:1a:c3:7e:43:75:7d:82:49:0f:bc:
         21:dd:48:68:fd:cb:b7:a8:8b:d5:df:66:4b:3d:9b:e8:0c:0c:
         97:42:5b:78:a4:a9:41:b9:b8:12:d7:cc:51:88:e5:3f:23:62:
         be:59:51:fd:dc:d6:51:08:73:86:2c:60:c2:98:53:1e:1b:e5:
         a5:73:a5:67:b9:14:f1:27:2c:1c:df:39:b4:80:18:0f:8b:cf:
         08:d4:f6:08:47:13:3d:dd:d6:eb:7e:87:af:10:06:c8:e9:65:
         d4:8b:6f:61:23:fc:f8:86:70:c7:b2:59:8c:e7:6c:46:7c:f5:
         2b:ec:03:2a:08:7f:cb:00:8f:0a:38:6a:91:62:bf:e4:8d:7e:
         9f:c3:17:c4:cc:22:4c:88:07:01:0c:ac:c4:63:49:fe:b3:d5:
         59:f6:c7:54:52:7c:9b:54:37:a5:31:b8:27:4b:d1:b2:61:4f:
         48:a1:65:23:a7:68:ef:ff:92:de:02:a2:44:bc:c0:77:c8:7d:
         03:e2:cd:56
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEe++UUpY1quphlQ19gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
MTZjNmM2ZjEtOTlkYi00MThmLTg4Y2UtNTdiZTUyNDZiMWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqojuu96LArx5ya4PpMfmr6YYtRW59tumlok
SxMetmBgaBk4aPsO8MBir3DD5M0AnkHk91Q/IsMEHE3Li7SZqHAZxm9I4i0JzyY6
dLtQ7jDTMosmJVEKrHltE4O/ySbpe9YYVlfTuyAd0nrPJ90aTzH/rdTuel9twIyp
QHqqKaKbdAkaS6smR4vb7q+S4ZVsPFqnltRzZcYS1H7tzvVJ/v6Me4ybUy5Ue5Gq
DsX5a/UYrlR5R54QCpAPCVjQJlGcnNAiPt+vncjorrxzd9T3S1ed7d56OBOPN8vD
Z5kVPzPeIxYEPoKC+ViEHUB3/FZUCb+K66g/85/Evwr1vfVg/wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGfMawmUgUcHGxoQsvZrQN1IyKC0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWZjYTkxOWItMDIyYi0z
MzNkLTgwYzctM2E1ZjZjZmYxMTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYv4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEABT3Mo1lEIy77ZTNMqRfpg+/PcZlg0lEdWHVoOcqbp28fQbEryqcFcrdh
TVj3JiFXtMPMaaRmWN8zSF01yusaw35DdX2CSQ+8Id1IaP3Lt6iL1d9mSz2b6AwM
l0JbeKSpQbm4EtfMUYjlPyNivllR/dzWUQhzhixgwphTHhvlpXOlZ7kU8ScsHN85
tIAYD4vPCNT2CEcTPd3W636HrxAGyOll1ItvYSP8+IZwx7JZjOdsRnz1K+wDKgh/
ywCPCjhqkWK/5I1+n8MXxMwiTIgHAQysxGNJ/rPVWfbHVFJ8m1Q3pTG4J0vRsmFP
SKFlI6do7/+S3gKiRLzAd8h9A+LNVg==
-----END CERTIFICATE-----
Generated at Fri Jan 3 15:09:13 2025 by rpki-client on console-fra.rpki-client.org