Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d25cae11-ba79-300e-a184-e07c0cb0de30.roa
File:                     d25cae11-ba79-300e-a184-e07c0cb0de30.roa (raw, json)
Hash identifier:          86h9ubGOfaKd+wozJ5UlS3F8vShfn34sphnOVbD5SMA=
Subject key identifier:   35:8F:9F:E3:02:6A:67:27:50:C2:24:5C:D9:A9:A2:92:6E:AA:A5:86
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E603EC02F1A9B00E2A1E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d25cae11-ba79-300e-a184-e07c0cb0de30.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        98.219.40.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e6:03:ec:02:f1:a9:b0:0e:2a:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=30ad71c8-b7d5-4b29-9c8b-dbe24f6d9572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:01:fc:b8:aa:c6:8e:cf:b9:ac:cc:56:80:6a:
                    ea:49:fd:21:83:1f:70:80:74:d1:9e:8e:03:a0:f9:
                    be:08:27:c7:2c:bc:82:58:22:bb:81:ab:6e:b2:b8:
                    cd:bb:63:c3:7f:20:2f:21:0b:22:57:97:e1:59:bc:
                    af:ad:2e:ee:6a:61:c0:86:77:7d:36:55:e7:c7:49:
                    ed:9f:d6:8b:3a:d7:7a:aa:63:5b:44:0b:ea:a6:3f:
                    91:57:6f:e0:f8:44:16:0a:00:52:69:1a:ee:f3:9b:
                    0a:2f:0d:96:35:6b:ef:e2:68:ec:f9:ee:04:dd:e5:
                    23:98:ce:d8:24:92:b1:bf:87:31:91:6b:8d:18:c5:
                    ab:88:6f:1a:a3:6e:01:7d:1f:b4:e0:b7:c9:45:f9:
                    e9:d5:6a:98:2f:31:80:f2:7a:82:1a:28:f2:89:4a:
                    d5:d9:7a:bc:a8:fd:90:27:3c:79:20:20:ea:58:82:
                    cb:b2:8d:cf:01:50:96:c8:3d:ca:e7:a6:6e:08:a1:
                    30:8b:45:cb:6f:fe:58:db:f3:65:fe:4c:0a:cb:84:
                    c1:33:7c:36:29:1a:57:02:62:c3:ca:e1:a6:7d:39:
                    cf:aa:91:4b:aa:53:db:77:31:24:a6:de:7f:40:d8:
                    29:9e:f1:7b:83:fb:18:49:ea:05:57:fa:f5:1b:d3:
                    86:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8F:9F:E3:02:6A:67:27:50:C2:24:5C:D9:A9:A2:92:6E:AA:A5:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d25cae11-ba79-300e-a184-e07c0cb0de30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.219.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:d4:2b:ba:ef:49:e5:1d:6b:88:3b:ec:d1:2b:af:18:72:69:
         22:18:e3:b4:20:f8:f1:c5:68:49:9f:b2:8f:1e:0b:76:03:48:
         30:7a:41:a2:03:43:d3:31:d2:0e:6d:8c:e6:f5:f6:8e:03:17:
         08:28:cc:d4:9c:0f:7e:f1:f3:cd:f2:67:f6:89:69:d8:f5:b0:
         b1:e2:8b:d3:b1:d3:c7:dc:f6:4b:32:9b:aa:75:ff:f6:00:13:
         a1:b2:3c:56:35:b4:9a:ea:0f:5a:df:e9:65:09:8a:8d:58:26:
         96:c1:18:a1:66:43:d9:77:fb:f4:cd:04:4e:17:a1:a0:59:2d:
         6e:80:d3:84:db:4d:73:41:dc:5b:00:62:37:d2:f1:23:ca:fb:
         fd:3f:d4:51:f7:10:d5:e1:4d:cc:98:78:4f:03:30:9c:fa:1d:
         c9:85:64:5e:28:56:f5:75:76:bf:fc:70:c6:30:65:2d:2a:cf:
         e6:0e:f5:bd:f1:cd:69:88:bc:df:22:14:51:89:a8:d8:af:20:
         cd:f2:6a:23:16:05:2d:25:e2:af:fe:20:5b:fb:7c:74:75:99:
         df:03:14:99:e5:b7:18:32:81:26:e9:d8:2f:bc:af:2f:29:c1:
         8b:d8:80:d0:06:d2:62:f9:75:ed:15:82:74:4b:1a:37:28:09:
         9b:29:d5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:19:40 2024 by rpki-client on console-ams.rpki-client.org