Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c48377e6-200d-3ecc-9348-bed2ee2913e5.roa
File:                     c48377e6-200d-3ecc-9348-bed2ee2913e5.roa (raw, json)
Hash identifier:          kdThnz7cjfocK0zqEGq6Sod1fuizeT5XE2LTS86R9x4=
Subject key identifier:   DF:E7:9B:9C:2A:50:42:0C:6C:C6:E9:B4:5A:1D:39:63:DC:00:81:66
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9DA7B168385C2EBB5D22C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c48377e6-200d-3ecc-9348-bed2ee2913e5.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        98.51.146.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:a7:b1:68:38:5c:2e:bb:5d:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=961e6872-a95c-4aa3-8d70-dad102f5cfc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:69:92:6d:c2:77:e3:ab:bb:7a:b1:67:e8:06:
                    3c:be:e7:27:bc:ef:cd:8d:0d:2a:88:4b:17:ee:fa:
                    cc:40:5b:f5:26:2e:20:1a:05:07:ca:b2:31:7c:b9:
                    c3:e9:33:85:28:13:ad:4e:65:26:44:6b:44:cf:c7:
                    27:f7:78:d8:8a:21:4a:31:1c:2d:ad:9c:eb:8f:9d:
                    23:e8:48:0d:86:50:d4:72:7f:6f:5f:c2:f0:bf:09:
                    c3:a8:88:74:55:98:be:31:0d:9a:95:21:43:94:9c:
                    ba:3c:88:98:46:1c:53:f0:0f:86:6d:46:86:26:cb:
                    7f:13:8c:97:94:b5:3d:1c:d5:58:38:80:8b:3b:78:
                    32:31:bc:05:26:26:59:30:ad:cf:9f:16:c1:d9:9e:
                    6f:c6:aa:af:54:31:02:9d:c7:17:12:e4:7c:96:5d:
                    b4:ad:65:72:71:55:d9:31:cf:89:2d:5a:e5:ab:06:
                    af:d0:72:4a:d7:54:02:16:11:90:7e:bd:11:02:1e:
                    79:98:cd:96:62:86:61:1a:a9:b1:5f:ad:9f:75:45:
                    3e:68:9a:c4:ce:a9:18:c6:eb:73:4b:1d:e5:3d:f6:
                    b0:3f:8b:20:d6:a3:66:5c:55:ab:0d:41:95:9f:20:
                    41:8b:79:36:af:c7:60:c3:f6:14:49:c2:1d:af:fc:
                    9a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E7:9B:9C:2A:50:42:0C:6C:C6:E9:B4:5A:1D:39:63:DC:00:81:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c48377e6-200d-3ecc-9348-bed2ee2913e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.51.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:ea:e1:0d:4c:5d:f6:9a:c2:f0:70:7b:35:e2:23:03:e2:32:
         4d:0c:69:e9:d1:5f:9d:d6:b7:a1:50:63:d1:81:51:b0:c5:c2:
         37:02:3e:23:57:bb:cb:de:8f:4b:b6:8d:aa:1c:54:3d:48:65:
         44:2e:39:3d:03:71:d3:d6:af:c3:59:c1:51:06:53:76:3c:5f:
         c3:24:45:43:94:3b:f8:de:34:bd:11:5e:af:d6:97:44:17:0e:
         9e:23:13:54:01:ff:55:79:16:e1:70:7d:d5:6f:23:ca:18:58:
         d7:3d:62:53:55:f3:e9:7d:16:af:78:59:ed:a1:3e:2f:82:d4:
         a5:a7:85:cb:ac:45:2d:d7:01:8f:f5:4b:de:ec:a6:12:5c:cb:
         07:d1:4d:c1:f2:31:4f:0c:75:b0:9d:8f:04:0d:a5:0b:11:d3:
         85:f7:77:e4:76:34:25:86:a0:af:77:74:8d:0f:7f:45:60:58:
         11:cd:2e:7d:dd:95:0a:9c:3d:df:4d:16:b2:83:8e:e1:88:97:
         d7:64:dc:8f:11:84:b4:38:7c:65:0a:9f:62:71:f7:cd:a2:20:
         12:6b:01:8f:0b:c7:c4:c1:fa:33:80:85:62:87:be:da:f6:70:
         92:69:95:21:dc:11:1a:e1:cf:f3:17:1f:6c:99:c6:10:10:5d:
         cf:bd:21:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:07:46 2024 by rpki-client on console-fra.rpki-client.org