Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e36d77c1-93a7-3ad8-996c-d0ad93465641.roa
File:                     e36d77c1-93a7-3ad8-996c-d0ad93465641.roa (raw, json)
Hash identifier:          GJS5uLl+OYBMmaOSDul4emhCPHovwRW5Z+tqy2QyysY=
Subject key identifier:   61:05:4C:22:7A:8D:C0:93:94:61:D4:B3:E0:B9:69:6A:15:0D:AB:5A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C85851CD87EAA56645EC60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e36d77c1-93a7-3ad8-996c-d0ad93465641.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        98.198.84.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:58:51:cd:87:ea:a5:66:45:ec:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=6b0d02e1-ada3-402d-9d3a-8c5cd5346073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6a:9b:0d:b7:0f:ca:73:a7:a3:98:7d:71:02:
                    63:1a:f5:fe:c1:fb:b2:55:a9:39:8d:23:98:04:23:
                    58:28:09:c8:6a:1d:0e:fa:0d:23:58:31:f3:f3:19:
                    e1:e6:82:ab:42:6d:71:29:a2:e7:1c:77:30:09:9a:
                    4d:fb:33:40:3c:d9:15:a6:86:67:be:48:bf:20:6b:
                    fa:cc:1c:a3:a3:b0:fa:68:52:61:d4:cc:60:0d:f6:
                    b4:72:00:4e:fd:01:24:d3:37:fe:ca:05:3e:fa:a7:
                    dc:b6:42:9b:74:84:cb:4e:68:f4:fd:3f:63:2d:a3:
                    fa:cc:5a:e2:68:01:d5:c3:35:01:98:41:96:21:39:
                    e3:6f:52:11:5f:35:22:70:28:32:09:cd:c3:61:2b:
                    d3:2d:39:62:2a:3e:b4:88:c2:a1:0d:ec:48:64:c3:
                    cb:f5:21:0f:42:de:73:2d:c1:44:c3:71:64:93:dd:
                    ee:9a:96:a2:69:fe:78:d5:f8:ce:e9:80:b5:87:97:
                    d5:10:bd:60:49:bc:dc:38:fc:b3:dc:11:5e:67:96:
                    e2:c8:9d:e3:6a:87:f6:c5:fa:67:0e:58:d7:bd:94:
                    51:92:67:8d:ce:4b:f3:9f:2f:f3:cc:45:ed:e8:56:
                    c7:85:53:9b:05:c9:59:8c:82:99:b3:2f:b7:52:9a:
                    d7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:05:4C:22:7A:8D:C0:93:94:61:D4:B3:E0:B9:69:6A:15:0D:AB:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e36d77c1-93a7-3ad8-996c-d0ad93465641.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.198.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:fa:e0:3f:64:3d:ab:79:a4:0d:61:ae:59:2c:05:b8:3f:e3:
         b1:8f:e4:57:7d:29:cd:2d:1d:c0:2a:34:99:c9:3c:ad:0d:dc:
         7f:11:66:08:c9:4b:71:6c:4d:c2:1f:e7:bd:28:62:08:83:46:
         54:49:eb:94:a2:4a:99:f8:34:b9:26:07:8a:b3:fa:4d:ac:a0:
         f6:db:ce:67:3f:34:e3:e3:29:29:5c:1d:be:52:a2:c9:07:2c:
         11:14:af:55:ad:28:43:98:23:ce:a5:52:8b:26:00:de:0e:f0:
         a3:7d:11:1b:90:88:5d:e2:f0:d1:99:86:ef:37:5b:68:36:d3:
         52:b8:0e:26:b9:db:12:38:84:b3:5a:7f:a0:60:d1:14:4b:c2:
         95:fe:21:6e:94:52:d3:89:bb:62:8b:d4:43:63:14:62:1d:57:
         5e:90:c5:ad:0b:b7:04:6e:2f:9e:06:3a:43:72:b8:3f:9c:73:
         dc:c3:c8:82:08:f9:98:c5:26:dd:77:8e:09:5b:cc:4d:06:99:
         79:0f:48:bd:52:b8:58:a0:2e:e3:69:52:8f:cf:67:98:31:79:
         03:91:25:98:26:19:ae:df:c1:93:6d:56:cf:6b:f8:3d:c2:fe:
         e9:00:a8:9e:63:6b:2e:bc:9d:b3:58:c1:54:20:34:53:6f:05:
         40:8c:0f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:47:42 2024 by rpki-client on console-fra.rpki-client.org