Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/430f5633-553f-37c1-963f-135058220cc2.roa
File:                     430f5633-553f-37c1-963f-135058220cc2.roa (raw, json)
Hash identifier:          +AdbUyVXrTnDB1TPDi+DtuFPCSiqg6yH0x8QaybGU+o=
Subject key identifier:   C2:A3:62:A1:1F:AA:3A:51:A9:7D:E0:76:59:CC:3B:CC:04:11:2B:DC
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F43285847845674D85765C788D3B8A240
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/430f5633-553f-37c1-963f-135058220cc2.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     2495
IP address blocks:        198.248.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:74:d8:57:65:c7:88:d3:b8:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=633fa780-3087-4701-ae5e-496f47528c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:92:d8:bd:91:83:27:10:a5:b8:d1:96:a7:57:
                    d5:28:c1:d1:af:76:da:ec:e1:e7:9f:f2:12:69:53:
                    eb:29:af:7c:c0:f6:c6:75:5d:2d:e0:13:d4:28:7c:
                    b7:98:55:79:ee:e9:c6:45:cf:77:a2:a8:a9:76:21:
                    56:f5:79:51:7c:86:5c:04:2b:aa:e4:7d:53:c1:2c:
                    35:df:ab:81:4c:05:f5:5c:46:7b:f5:f7:db:89:8d:
                    13:8f:01:4b:b9:ae:df:6b:fc:3a:81:de:51:86:83:
                    93:72:bc:51:54:f2:aa:63:f9:26:f1:1e:42:90:b6:
                    82:e8:59:9d:34:f1:b8:76:93:c8:00:66:34:e6:03:
                    1a:49:55:26:64:b9:37:04:94:34:85:1f:42:61:b5:
                    bc:dc:86:60:a1:eb:63:24:ee:a4:b6:38:fb:2a:f7:
                    53:d4:4b:28:7d:fb:48:90:57:11:ea:80:ce:6b:5e:
                    36:88:46:eb:a3:3d:ff:fa:2e:6b:b9:e1:26:6c:d3:
                    1d:43:e1:c0:5e:0e:dc:db:99:59:76:83:0d:10:66:
                    53:9c:ea:57:12:28:52:c6:bb:68:4d:70:e0:b9:2c:
                    e8:8e:d1:66:d7:42:f9:98:f3:b9:e7:c8:b8:6c:b3:
                    bd:6f:09:9a:3a:fa:ef:0f:a7:c4:63:9d:34:12:0c:
                    2f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A3:62:A1:1F:AA:3A:51:A9:7D:E0:76:59:CC:3B:CC:04:11:2B:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/430f5633-553f-37c1-963f-135058220cc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:c4:0f:ae:67:3a:96:b0:4a:36:0f:6c:8a:99:97:38:fc:80:
         fe:c3:74:ec:23:1b:cd:69:af:62:d3:2c:28:25:18:4a:2a:4c:
         6c:08:c5:08:7b:d9:77:cd:58:db:80:10:a6:08:1b:0d:26:1f:
         af:6d:5a:32:9a:bc:a0:0a:0c:55:4f:46:a7:a0:82:48:87:dd:
         55:82:44:6c:23:33:65:65:81:8e:fe:12:81:4b:fa:31:38:f2:
         99:2a:0c:a9:f5:35:3c:fb:b1:a7:8b:19:cd:bc:9d:f1:df:a8:
         24:dd:ea:5b:c6:d1:1b:aa:dc:8d:c1:03:01:c8:aa:7d:3f:81:
         f4:9a:02:ed:fa:cc:47:7c:10:c2:88:72:69:09:a1:e5:c2:a5:
         3f:cc:13:23:a5:29:fb:10:dd:93:47:fe:3e:6e:f5:84:46:be:
         0c:aa:b9:74:7e:e7:f3:45:ad:fa:e2:d5:8b:09:d0:3f:16:b5:
         f0:23:43:82:64:42:2b:99:2d:7e:ff:36:f2:bb:4a:d8:fd:65:
         86:c9:3a:43:f9:08:b0:78:96:6a:fc:27:05:4f:ca:2b:4d:08:
         2b:04:13:e9:68:aa:46:33:af:d7:7e:3b:82:7b:bb:5a:ee:c4:
         9c:e5:dc:3d:38:e0:75:02:ec:53:90:ff:7f:4e:22:2b:0e:60:
         f4:5a:f4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:35:26 2024 by rpki-client on console-fra.rpki-client.org