Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/1035250f-f315-3d14-93d6-35562a7cf489.roa
File:                     1035250f-f315-3d14-93d6-35562a7cf489.roa (raw, json)
Hash identifier:          6ZuNKwtM1EKvtJXB1jR+R/f52ns6EYykxFl5mA4vPLA=
Subject key identifier:   D5:92:51:77:FD:6B:47:94:36:D6:44:BA:D6:8C:1B:CB:82:12:06:81
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F432858456128685B0213AA80C5A154EE
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/1035250f-f315-3d14-93d6-35562a7cf489.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     16826
IP address blocks:        198.248.97.0/24 maxlen: 24
                          198.248.105.0/24 maxlen: 24
                          198.248.110.0/24 maxlen: 24
                          198.248.108.0/24 maxlen: 24
                          198.248.101.0/24 maxlen: 24
                          198.248.106.0/24 maxlen: 24
                          198.248.109.0/24 maxlen: 24
                          198.248.100.0/24 maxlen: 24
                          198.248.111.0/24 maxlen: 24
                          198.248.99.0/24 maxlen: 24
                          198.248.104.0/24 maxlen: 24
                          198.248.107.0/24 maxlen: 24
                          198.248.96.0/24 maxlen: 24
                          198.248.102.0/24 maxlen: 24
                          198.248.103.0/24 maxlen: 24
                          198.248.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:68:5b:02:13:aa:80:c5:a1:54:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=d6fd41e2-49f8-4fac-aeba-910a6c16a0b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a8:bd:0f:12:98:bf:bd:1a:80:ef:a9:e4:f4:
                    29:82:12:68:40:67:f0:6e:9d:e7:91:36:7e:18:1d:
                    e6:6d:d7:60:38:5e:22:55:18:5e:b3:a4:6a:2b:6b:
                    b9:b0:94:52:51:da:de:99:09:f9:86:13:9e:c2:ed:
                    31:9e:f9:0d:36:91:47:a7:92:d8:93:f1:ad:65:f3:
                    a9:01:8b:40:e5:7f:5c:dd:b8:7a:d2:89:90:89:b4:
                    63:20:a8:92:57:1e:25:b7:9c:9c:44:95:e0:b0:87:
                    46:4e:1b:11:47:6a:ea:81:13:19:22:ca:e3:59:2a:
                    a8:a7:f4:82:18:72:c8:f5:58:0c:73:fb:13:f3:ca:
                    b3:82:0a:ae:ff:e2:63:22:ee:71:b4:72:a1:04:75:
                    a1:72:fe:e5:c7:36:87:12:7c:53:f0:d0:61:5c:d0:
                    f4:56:74:e8:14:e5:cc:a8:63:71:55:e4:bd:b6:65:
                    cf:fb:d7:a8:cf:63:6e:cb:21:d7:af:9d:36:82:fc:
                    f4:bc:c1:82:72:1b:82:ec:1d:fd:77:ff:f6:83:b8:
                    c7:83:88:dc:d7:67:f8:2d:b7:92:92:6f:d9:bf:1d:
                    f3:4f:19:8e:af:42:a5:db:83:b6:42:9a:88:d2:e2:
                    87:60:e1:82:50:b9:4e:83:04:bd:51:b0:12:44:12:
                    e2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:92:51:77:FD:6B:47:94:36:D6:44:BA:D6:8C:1B:CB:82:12:06:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/1035250f-f315-3d14-93d6-35562a7cf489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:49:79:c7:32:d1:cd:ba:2d:97:b0:b1:ee:a8:b6:e0:fe:56:
         a9:2c:82:50:eb:49:3a:f5:9a:5c:09:88:b2:a6:fd:06:e4:a4:
         59:0d:0d:de:ce:75:07:dd:c0:ff:d1:7c:93:97:69:1a:57:d4:
         62:23:84:b9:c6:97:36:ab:aa:68:96:09:30:44:a7:d0:41:2b:
         87:14:9b:35:5f:29:2e:5e:d4:fd:e3:5a:f7:6c:42:3d:9b:bd:
         2b:9a:3f:71:a8:b8:37:64:6f:a8:3d:b2:5e:06:78:cc:0d:77:
         54:38:eb:f1:63:ca:bd:53:78:32:ea:cb:48:98:14:39:0e:fb:
         c9:4d:2c:51:72:ee:88:bf:0f:6b:76:ed:92:44:f4:53:ae:88:
         13:cc:a1:ac:b6:cd:04:72:55:39:3e:80:44:85:f1:0d:48:04:
         79:3a:84:8b:21:4f:23:41:ea:96:e1:e9:d1:25:6a:cb:62:5b:
         4a:08:9d:46:c2:b9:47:76:55:11:c5:af:b7:85:55:7b:d2:3b:
         30:83:51:7a:c0:8c:27:ab:54:9d:b7:41:86:98:b9:99:d5:c4:
         05:50:4c:82:ea:03:2c:bf:2e:60:9b:65:61:b1:85:78:b8:b8:
         e6:99:52:c4:4e:23:c0:04:ed:c6:2d:b3:f1:da:90:30:82:fd:
         4f:88:8e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 15:52:51 2024 by rpki-client on console-fra.rpki-client.org