Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd9cec32-6e97-35b6-9e99-c61fa4698ab3.roa
File:                     dd9cec32-6e97-35b6-9e99-c61fa4698ab3.roa (raw, json)
Hash identifier:          /b5EJ6OQecazU6Z0Kb68zAgTCO7CzumhysrjLRGqHY8=
Subject key identifier:   95:77:90:8E:70:AB:D7:E5:34:B0:67:02:F9:D6:1F:9B:E2:45:E8:E8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E60B4A8EECCA528505AB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd9cec32-6e97-35b6-9e99-c61fa4698ab3.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        98.62.252.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e6:0b:4a:8e:ec:ca:52:85:05:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=ec16d067-46d5-4d1e-932a-b619f24542f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:78:bd:47:09:88:1d:42:d1:58:cb:0c:3f:b0:
                    82:7a:60:8b:54:a3:d9:b5:ca:3a:3f:57:7e:e5:1e:
                    af:5e:c1:ae:0c:63:e9:de:49:c9:42:1f:cb:02:44:
                    7d:a0:44:2f:d2:f1:f8:7e:cf:d8:c3:55:66:89:65:
                    38:2f:b5:df:f7:28:49:e9:b4:e9:c8:91:4c:18:4e:
                    37:0f:35:03:f6:45:be:60:41:25:f4:24:4b:dd:8b:
                    33:a8:f7:2b:a9:5b:5c:e2:ec:03:bb:12:00:23:1d:
                    07:01:52:70:1b:ca:a9:a4:5e:c9:5d:e0:30:9e:9c:
                    34:e7:80:61:82:78:b8:a9:e3:ea:2f:0e:2d:87:97:
                    89:22:e6:59:8b:a8:4a:ef:7d:f0:4c:a4:e3:ff:bc:
                    a8:c8:ea:08:f3:6b:ad:99:2a:88:35:8a:f4:5d:b3:
                    48:bb:a6:a2:89:5d:3d:5b:e8:3e:0b:d4:17:40:3e:
                    86:2a:61:3b:48:a2:dd:7d:74:9e:d4:8e:ef:3d:20:
                    23:e5:a3:a1:74:60:59:e4:a4:e1:ff:ae:81:47:d3:
                    cd:6f:e7:55:ed:42:26:f6:44:40:5d:a2:da:3a:88:
                    45:77:af:45:72:50:55:e4:b0:be:3e:5e:da:e7:70:
                    f6:aa:9a:91:c2:0f:1f:5d:94:3b:d9:50:c4:a2:03:
                    60:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:77:90:8E:70:AB:D7:E5:34:B0:67:02:F9:D6:1F:9B:E2:45:E8:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd9cec32-6e97-35b6-9e99-c61fa4698ab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.62.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:62:7f:b8:89:a1:4c:3e:75:63:db:99:24:a8:76:2b:f9:dd:
         fe:1e:f5:4b:8d:f0:4a:b5:19:07:90:bf:22:40:b7:2a:41:e8:
         00:e2:0f:8b:05:4b:dc:02:8c:c2:eb:f9:e0:8d:99:d2:f6:3c:
         fb:ca:f9:01:49:d8:2a:f7:68:82:12:e5:6d:0c:ce:12:15:10:
         31:8e:6c:41:80:f2:20:0c:e5:35:33:11:5f:07:48:4f:00:2c:
         20:7c:4d:12:0a:82:3d:da:00:de:82:9c:b4:c2:c5:e0:c1:3d:
         6a:ea:99:6d:5c:47:83:29:84:56:6b:37:ac:ac:18:96:c6:39:
         d1:52:84:b2:e3:34:c7:8d:cf:6e:28:23:90:84:74:5b:1b:21:
         03:10:5d:64:1c:cb:48:d9:d7:c9:7e:6d:e4:24:e8:1b:57:0c:
         81:50:52:59:24:fe:91:df:57:6f:98:2d:f7:eb:7b:5d:be:a2:
         60:90:60:e3:86:56:89:e3:ee:90:70:69:b4:b5:c4:96:03:1e:
         e0:e3:bc:0a:63:c6:f2:88:72:98:76:44:2f:3d:6f:3f:d3:c7:
         1c:68:8a:05:a9:ff:dd:42:ee:f5:b5:3e:50:54:0c:75:eb:df:
         bd:e8:e8:fd:14:44:3c:1f:b3:5a:11:5a:44:2c:b1:1b:d7:6d:
         d2:0a:b7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:21:12 2024 by rpki-client on console-ams.rpki-client.org