Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/420963fb-a3d2-3813-9896-a813e2840697.roa
File:                     420963fb-a3d2-3813-9896-a813e2840697.roa (raw, json)
Hash identifier:          mAi0hDn6BXhNBK9cSQFTSEJqpwW6Ct19DAgi14fCeVw=
Subject key identifier:   3F:46:51:92:69:53:B9:61:BB:57:CF:C9:85:E2:27:25:90:BF:13:2F
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F43285845C5A8EF85882C8E84BE542100
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/420963fb-a3d2-3813-9896-a813e2840697.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     2495
IP address blocks:        198.248.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:ef:85:88:2c:8e:84:be:54:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=17120c43-4e0f-4566-b787-057cc97380e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f6:9f:f8:49:c9:48:8c:eb:dd:72:e3:98:4c:
                    a9:3d:03:5f:c9:a0:a3:60:75:b7:05:07:55:0f:0b:
                    bb:10:04:c5:d3:5f:c8:81:44:d9:78:3a:02:1d:3f:
                    63:3d:21:9e:32:a4:b8:bf:0a:f1:66:90:5b:f7:4c:
                    d0:6d:88:82:ae:1f:74:a8:d4:0e:f1:57:d5:8f:4d:
                    ad:5d:64:94:66:18:bb:d5:6d:ed:25:52:b5:ce:a6:
                    8c:d6:c2:47:a3:31:8f:43:20:c7:3d:65:fd:27:76:
                    85:9e:b7:af:b0:84:cd:bc:ab:be:ce:73:60:3d:80:
                    16:8b:53:aa:0a:dd:b5:64:d4:80:c7:fa:73:cb:2d:
                    a0:25:32:f1:df:04:8c:09:8d:b9:e4:c4:93:b3:3b:
                    06:5c:c3:9a:e4:4e:ea:fe:12:24:59:a9:4c:7e:06:
                    20:80:a1:95:f1:28:58:66:bb:07:ec:27:f0:8b:fd:
                    d6:9a:83:2d:71:72:86:39:a2:27:a6:52:6b:a4:ec:
                    7b:b3:63:5e:72:ee:7f:fd:8a:c9:c2:b3:9d:30:e6:
                    f7:5b:b3:8e:ee:72:45:d9:1a:a5:0e:3c:e5:03:7a:
                    9f:a7:3e:8a:5b:f3:90:d8:31:0a:0b:1a:85:24:97:
                    99:0d:9e:03:c1:56:85:7a:6f:1c:72:df:71:14:33:
                    a0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:46:51:92:69:53:B9:61:BB:57:CF:C9:85:E2:27:25:90:BF:13:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/420963fb-a3d2-3813-9896-a813e2840697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:65:10:41:81:d2:71:e5:52:11:26:2c:f3:45:82:5f:1d:1b:
         0e:ab:0f:58:23:21:e2:5a:2a:ff:f4:aa:fc:5d:7b:77:f8:fc:
         64:b8:4d:2e:9c:c2:c3:ca:7c:b0:c1:54:fe:eb:c0:e2:39:89:
         39:1f:d5:81:40:8b:ad:ea:3a:73:1f:fc:1f:3b:b8:92:e7:5c:
         79:ed:15:15:27:62:6d:9b:38:3d:d0:6f:54:75:d3:c5:17:3d:
         37:c1:ae:07:fe:8e:f3:5d:cf:8d:c9:d0:3d:1a:24:79:05:75:
         3e:ef:dc:23:a3:e2:44:d1:77:17:33:6b:56:34:19:a7:56:6a:
         be:53:e9:a4:8c:48:ae:e4:57:69:5f:ee:4f:6a:e2:a9:44:06:
         3d:89:a2:e4:07:ac:57:0c:aa:49:5b:95:d0:59:28:c6:6f:49:
         01:95:ad:91:35:a1:f9:3f:2b:34:f6:64:09:94:55:9e:19:88:
         c0:25:8f:b6:95:4b:20:3b:44:f1:7c:9b:e8:1e:5e:c7:28:2b:
         c0:90:d1:63:a8:a0:7d:f7:19:af:19:82:77:6d:3e:8e:0c:7a:
         aa:3f:65:2d:b8:51:7d:92:45:3f:eb:ad:68:48:f0:a6:be:70:
         dc:93:9a:2f:26:5b:0a:b3:46:b9:c5:93:a2:4e:8e:bd:23:ab:
         a8:69:96:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 17:03:20 2024 by rpki-client on console-ams.rpki-client.org