Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/49b07414-e84e-3522-b44a-c3c3c96ed2cf.roa
File:                     49b07414-e84e-3522-b44a-c3c3c96ed2cf.roa (raw, json)
Hash identifier:          VbFmeOKyzttbzYZp+s9CGEn0D8Dg3EQlqw6J67CdmKU=
Subject key identifier:   42:18:C5:14:A9:77:47:A1:A8:00:8A:58:17:29:EC:50:C6:49:5B:96
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584762D65499B43D2ED0CB984B40
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/49b07414-e84e-3522-b44a-c3c3c96ed2cf.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     20177
IP address blocks:        198.248.134.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:54:99:b4:3d:2e:d0:cb:98:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=e247ae7d-e748-493d-850e-991ffdf033cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4f:67:48:c2:c1:cd:bf:74:6b:ff:22:a8:e4:
                    43:c3:6b:ca:d4:a8:c4:b0:05:33:e0:74:13:da:14:
                    cc:89:d8:b7:37:0f:ab:2c:bc:f8:05:51:ea:1d:da:
                    14:f1:9a:d8:bb:da:e3:e0:45:f6:01:2d:a5:a9:6c:
                    0b:81:56:35:94:55:59:f3:79:c2:e0:93:80:91:42:
                    42:0c:f1:37:34:89:44:98:30:7b:84:54:b1:ff:d4:
                    ac:14:29:b9:84:d6:75:82:62:29:78:b4:df:ba:79:
                    54:eb:7c:6f:a2:3d:8b:82:c7:14:ec:0e:ff:4f:eb:
                    3a:93:6f:3c:f9:50:7f:fb:d7:0c:89:21:c3:86:7d:
                    2f:16:0c:6d:47:b3:c7:4e:95:15:2b:59:7a:c5:37:
                    c0:40:3a:bf:30:f0:c4:5f:15:02:1f:a5:f7:4c:4e:
                    89:f7:88:fb:76:3e:74:13:dd:d9:73:bc:54:c1:df:
                    16:26:76:42:ff:92:95:d8:31:89:33:b6:9b:99:c0:
                    12:13:cb:f4:bd:4a:c6:e2:fe:85:7a:a6:99:a1:01:
                    52:34:6d:68:9b:97:cb:88:b0:0f:b0:72:49:06:a4:
                    32:d9:61:48:6a:69:52:81:c3:8d:2a:69:69:29:0f:
                    1f:7a:af:2a:19:81:29:bc:b7:3b:0e:6d:7d:76:45:
                    9f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:18:C5:14:A9:77:47:A1:A8:00:8A:58:17:29:EC:50:C6:49:5B:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/49b07414-e84e-3522-b44a-c3c3c96ed2cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:4e:75:47:39:1a:9b:d3:0d:74:04:7b:b6:81:e3:6e:47:b1:
         32:1c:61:2e:fc:b4:4e:71:d2:10:82:b2:07:18:5a:88:7a:c2:
         e0:8a:b7:b5:74:51:dc:86:fe:77:0c:ac:94:91:3b:3e:94:ae:
         b2:ec:be:64:5c:83:ac:ba:a2:e8:23:f8:3d:a8:32:d3:e0:9e:
         c6:9c:8e:ae:dd:da:6a:46:0e:86:af:6c:4f:c5:b2:31:6e:9b:
         16:f0:2b:57:62:5b:ab:40:05:62:79:d7:b7:ff:d3:65:14:e8:
         ff:22:e9:d8:9b:a9:f9:7e:e6:bd:ee:fe:26:ba:71:18:be:35:
         25:ec:08:13:6a:b9:bc:51:79:ad:c7:5e:99:8f:fd:1a:b3:83:
         6c:60:07:94:4d:e2:09:a2:57:e3:16:be:b0:d7:1c:a4:14:e4:
         66:a1:77:e8:1e:38:0a:1e:92:3f:85:33:98:47:12:ef:06:e1:
         6a:2b:1c:7c:a8:d3:eb:0f:90:16:e9:da:81:d4:a9:3b:bf:cc:
         96:6d:e0:5a:7e:ce:e0:56:13:26:29:da:03:d1:58:55:94:85:
         dc:a4:0a:8b:f1:f5:b3:4b:66:a1:c3:05:dc:ed:4a:25:79:da:
         6b:8f:88:be:ff:a5:ca:2d:1d:ef:b3:1d:3f:5f:13:98:da:28:
         60:52:0c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:35:26 2024 by rpki-client on console-fra.rpki-client.org