Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/d750cc30-d12e-3583-902a-d78ec5dee599.roa
File:                     d750cc30-d12e-3583-902a-d78ec5dee599.roa (raw, json)
Hash identifier:          crjAyg5tSvhpdRRN7HcS8IhS4gGbz5neF+NSRlbJGFw=
Subject key identifier:   62:0E:DF:8E:93:99:A6:8D:33:09:C5:61:DB:15:D0:18:0C:2F:85:69
Certificate issuer:       /CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Certificate serial:       010D0C9F43285847ED24B4A54C62DFDADEA18D40
Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/d750cc30-d12e-3583-902a-d78ec5dee599.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     399728
IP address blocks:        172.98.48.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:b4:a5:4c:62:df:da:de:a1:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=c97e3d4e-bed2-4041-adcc-b875a47227ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1f:c8:f8:8c:6c:fe:6a:5b:1a:65:c3:eb:8b:
                    6e:59:ce:e9:c5:54:b9:42:59:53:9b:d3:2c:8c:ec:
                    a1:54:f8:e4:d4:de:0c:84:84:1e:08:0d:be:a6:fe:
                    2c:63:bc:9d:7b:f4:5a:20:a6:13:72:79:bd:6a:11:
                    19:f6:d0:51:83:a7:28:38:59:98:0d:3c:74:ae:04:
                    b7:5f:22:6f:5c:79:30:5c:b2:68:a5:5c:f7:9e:05:
                    4a:36:25:99:ed:e8:9a:bf:5f:d4:22:b0:e1:ec:61:
                    ce:54:26:3a:dd:a5:84:52:01:d2:88:a7:22:16:0c:
                    1f:79:d6:44:c9:1e:b2:4b:85:0a:e0:6a:55:a7:41:
                    34:c1:67:2d:02:33:18:67:51:6b:22:4b:fa:3b:84:
                    26:ad:7b:bf:b4:de:5f:c6:8b:07:3a:32:52:76:29:
                    46:2e:12:f0:50:0c:45:13:da:75:63:30:e7:60:af:
                    d5:7a:78:ef:94:6e:84:5b:b5:e3:e0:a8:51:9b:76:
                    eb:a1:42:88:f8:fd:cd:71:d7:46:2e:1e:a8:46:8d:
                    9c:8b:70:e7:43:45:ba:bc:9d:a2:ea:d6:b9:99:05:
                    d1:a3:01:fb:25:82:9b:ce:81:15:ce:2c:e1:ba:e8:
                    19:f0:da:2f:75:e8:47:40:c9:dd:4e:e1:97:49:56:
                    16:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0E:DF:8E:93:99:A6:8D:33:09:C5:61:DB:15:D0:18:0C:2F:85:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/d750cc30-d12e-3583-902a-d78ec5dee599.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl

            X509v3 Authority Key Identifier:
                keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ff:d3:5e:64:36:35:d2:d7:8e:b0:2e:44:d9:fb:e4:1c:85:
         f4:7c:51:1e:6c:81:ed:81:f5:d7:4d:86:18:a0:4f:2f:b4:0d:
         44:23:e3:b5:59:5d:ba:36:04:ce:a4:3b:4f:fa:75:f8:b8:f8:
         64:94:dd:52:24:67:68:1b:22:bc:c1:b2:d9:4b:ac:18:73:c8:
         0c:5f:d2:2d:22:61:28:9d:14:4c:89:6d:92:b0:16:58:92:23:
         e8:b6:8e:36:22:c6:56:55:9c:59:ec:b2:ba:d9:3e:8c:6d:2a:
         d5:57:7d:5d:1b:d0:89:18:48:75:6d:72:c9:46:8b:1d:2a:2b:
         44:1d:07:68:93:c6:40:c6:a6:c2:46:bf:bb:18:f6:fe:d4:96:
         c0:64:e8:d6:5b:44:3a:50:a5:81:1f:e6:1c:67:6a:bc:de:94:
         4d:10:ad:d1:d8:56:fa:d9:ff:7b:2f:fb:15:6e:3b:cf:78:fd:
         31:a6:8e:e9:05:a2:70:44:80:fe:71:62:29:6c:d1:f4:39:82:
         2f:94:bc:21:57:d5:52:6a:50:0a:a4:fd:d5:99:48:09:cd:00:
         33:88:38:87:7f:e2:ad:a2:04:25:7f:7b:77:31:da:2a:65:d8:
         6d:41:cd:f3:4a:55:2e:ac:c4:72:e0:07:74:08:3e:a3:fe:fd:
         ef:95:54:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:24:31 2024 by rpki-client on console-fra.rpki-client.org