Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dda0403e-90b2-31bb-8ac0-c9ad888d14f6.roa
File:                     dda0403e-90b2-31bb-8ac0-c9ad888d14f6.roa (raw, json)
Hash identifier:          IV249nF3EMomXyS+9cdb77KoANnVsulXHG1spwaeil8=
Subject key identifier:   7B:0F:DD:02:EC:21:B8:79:F2:D5:21:AD:E5:2E:A6:CB:FA:42:4F:BD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C75A6D878DEB3CD5DFEA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dda0403e-90b2-31bb-8ac0-c9ad888d14f6.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        98.229.136.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:5a:6d:87:8d:eb:3c:d5:df:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=f6ce5d67-5c33-4e9f-8400-1ba3241b5224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3a:fc:dd:0e:a1:16:8a:db:b2:7f:1d:de:52:
                    c8:11:b6:b0:e6:1a:3b:a3:f8:91:40:6f:41:bf:a9:
                    9b:6f:5e:1d:a2:e5:71:74:1e:96:9b:a3:a5:66:36:
                    ab:3f:4f:52:ac:5a:8b:6b:a7:bf:34:22:84:d0:ff:
                    73:b7:75:b2:bc:51:ad:8f:de:3d:4b:db:88:87:bf:
                    27:8e:b7:3e:a1:d2:4a:bf:b0:38:74:20:6c:cc:fb:
                    0a:90:3b:f4:e4:99:4e:6e:9e:74:15:f5:c2:fb:91:
                    86:1a:4a:dd:0b:96:44:3a:07:2f:9f:58:6e:01:a9:
                    7a:b3:14:d0:2a:03:57:08:dc:dd:45:31:f6:7a:90:
                    6d:dd:14:0b:3f:32:50:5c:ca:cf:53:bc:1a:6b:e8:
                    20:af:04:85:17:93:62:b1:6b:df:cc:26:46:75:0c:
                    14:e6:3d:8f:de:79:eb:dc:2c:1d:dc:4f:76:60:76:
                    ca:11:09:81:2c:4b:47:68:a7:77:16:05:21:86:a5:
                    16:0e:12:69:89:41:25:de:f8:63:12:5c:31:a2:68:
                    f3:d5:fc:55:ef:29:fd:4b:6e:7d:15:bc:bc:78:8d:
                    1b:8c:64:f3:82:8a:12:4d:0c:12:0c:2d:88:a0:16:
                    1f:da:99:f3:14:be:da:97:03:c3:22:7f:cc:2f:14:
                    5a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0F:DD:02:EC:21:B8:79:F2:D5:21:AD:E5:2E:A6:CB:FA:42:4F:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dda0403e-90b2-31bb-8ac0-c9ad888d14f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.229.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:35:a5:31:3e:99:dd:64:44:9a:2b:fd:bb:b9:fb:20:8e:c5:
         b0:17:43:ac:b8:07:5b:c5:8a:1b:23:80:bb:b8:ae:3b:bb:2e:
         f2:4e:fe:6a:ee:28:64:93:6c:e3:9f:c2:e3:63:7f:89:6b:35:
         1b:b8:01:8f:a9:d5:fa:99:67:76:61:0d:7e:51:6c:c4:ce:0e:
         c6:a7:12:93:14:cf:c4:d1:e9:3b:af:c3:76:49:ea:68:19:f9:
         5a:5a:18:ea:86:32:1f:5e:40:c3:1e:9c:49:97:59:f9:bf:a6:
         44:d1:67:c4:a6:6b:5a:cb:a6:62:c2:77:bd:d4:40:8c:a8:27:
         69:be:7a:57:dc:4f:08:70:8f:36:0e:63:13:60:49:3a:61:d2:
         e5:b6:62:bc:f3:d8:19:56:0d:8d:e5:d8:fc:82:ef:54:bf:de:
         42:61:a6:8a:cc:2b:43:9b:a1:f0:41:60:b8:d5:27:45:50:21:
         a8:9f:1a:26:f3:55:7d:ce:d8:82:1d:28:a2:0b:26:e8:bf:45:
         f3:e9:8b:82:6e:22:91:1e:b2:94:bd:b0:e3:cb:ae:d0:c9:09:
         93:71:75:3d:31:3c:d3:15:14:7a:26:27:af:1b:c5:96:df:bd:
         48:ca:b1:68:09:b7:09:64:43:fb:f6:da:30:1c:44:4e:79:49:
         58:94:42:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:09:48 2024 by rpki-client on console-fra.rpki-client.org