Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e288ec68-8757-354f-a8b5-0d14474ae6f9.roa
File:                     e288ec68-8757-354f-a8b5-0d14474ae6f9.roa (raw, json)
Hash identifier:          d12CPaH9zlsB14TG9meFAZbfiJiQ3+C5Y47PR/tBq2w=
Subject key identifier:   61:8B:07:23:BC:BB:F0:8E:23:4B:D0:B8:D5:BE:C2:BE:5B:6D:C3:A2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9CB039DC6651599711D380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e288ec68-8757-354f-a8b5-0d14474ae6f9.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        98.215.100.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:b0:39:dc:66:51:59:97:11:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=342db319-d66d-42a3-b69b-634eae8b52b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:49:3d:7e:7a:1a:fe:fc:cd:a7:c8:ee:a7:ab:
                    f2:91:e4:46:ac:f6:71:2e:6c:49:a0:ae:b4:02:5d:
                    ca:2d:11:4a:20:0e:c7:16:d7:57:46:2b:c8:79:db:
                    62:f2:08:d1:5d:28:97:04:99:96:6f:17:e9:f7:10:
                    c2:bd:4d:3d:df:a7:51:a6:12:02:1d:70:02:6b:2f:
                    a5:2f:db:83:39:31:6f:82:1a:09:76:91:fa:cb:01:
                    6a:95:20:dc:15:3e:79:cc:37:d4:ee:f0:1f:8e:68:
                    05:5d:c1:75:c2:63:b7:b7:5d:94:1e:88:49:fe:ca:
                    be:ed:3f:8f:a0:b3:2e:41:3c:fe:a6:47:e5:05:5e:
                    5b:c9:99:09:b6:03:58:91:1e:32:c2:48:31:18:17:
                    65:68:b5:ab:29:e2:bc:53:b6:2c:2e:6a:aa:1e:56:
                    cb:9b:45:b3:fa:8e:95:d3:07:d7:07:35:2e:50:68:
                    90:d3:20:ac:0e:b9:e8:fa:64:b0:1c:97:86:ef:37:
                    f4:22:ca:4f:25:09:93:bd:84:b7:d8:82:10:f8:53:
                    4f:42:26:20:26:b2:2f:ee:cd:72:25:b3:f3:66:59:
                    53:02:ba:90:eb:0d:30:08:b7:e9:db:84:1e:55:4b:
                    37:82:bf:a2:c9:a9:2b:2f:ef:94:7b:29:3c:fa:55:
                    2b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8B:07:23:BC:BB:F0:8E:23:4B:D0:B8:D5:BE:C2:BE:5B:6D:C3:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e288ec68-8757-354f-a8b5-0d14474ae6f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.215.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:e6:44:a0:80:6e:b8:7f:b2:7d:02:31:da:f0:87:14:a0:73:
         f3:48:c1:66:f7:b0:57:14:55:15:23:77:9e:ee:e6:5d:14:12:
         19:f0:f7:b9:13:44:1a:ab:c5:a2:6d:41:54:72:46:c0:48:b3:
         84:be:a5:bb:5b:9d:e5:74:df:7d:0c:82:33:07:2d:85:22:7a:
         70:57:bb:83:25:60:7f:09:4b:26:cf:4c:e1:7d:be:93:b0:51:
         ed:5f:1d:3e:e2:b6:c8:59:c6:ea:15:84:23:cc:e5:cc:42:b2:
         81:4f:94:05:84:d9:a0:7e:52:32:a5:e6:88:70:1e:d0:18:fd:
         3a:db:c6:d9:cf:45:5e:52:6c:b4:27:d8:70:c9:6f:4c:cc:b8:
         4b:4d:23:3f:bf:73:05:f6:c4:cf:26:9d:f6:a4:63:28:8b:14:
         20:35:71:36:52:70:6a:df:fe:7b:64:6b:18:c4:d0:8d:b0:57:
         40:0a:7a:4a:5e:35:ba:28:4a:26:34:6a:ef:73:26:12:7b:08:
         30:77:37:69:be:44:61:be:ea:4d:26:6d:be:8a:5e:c2:92:d2:
         f8:6b:3c:64:63:18:43:6d:a0:4e:34:25:a1:b1:45:a4:a8:ad:
         d2:26:41:d9:07:d8:18:b1:3e:c2:95:2a:b3:26:35:9f:1f:16:
         61:49:81:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:35:56 2024 by rpki-client on console-fra.rpki-client.org