Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/b3b03f47-6547-310e-ba40-c2f46479d934.roa
File:                     b3b03f47-6547-310e-ba40-c2f46479d934.roa (raw, json)
Hash identifier:          uQTAHRQtXdfKpJ6YAnmdChpTtcIVo/Da9jMLzNh+ass=
Subject key identifier:   3E:C7:D9:7F:3A:E1:84:54:E5:ED:15:D6:D3:13:74:EB:A6:C0:06:BA
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F432858459633520CDBD484DC8CD93A80
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/b3b03f47-6547-310e-ba40-c2f46479d934.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     32133
IP address blocks:        98.124.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:52:0c:db:d4:84:dc:8c:d9:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=4a222786-0357-4efb-964d-0bbe7e8e3083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:10:db:9e:a1:2f:2f:20:10:20:8e:03:02:a8:
                    58:ca:1f:61:8a:5b:d2:33:01:2d:58:43:84:8f:75:
                    ec:e1:2a:3a:c5:d9:2d:f9:84:df:cf:59:52:f8:8d:
                    49:90:64:bc:a9:d8:ba:4a:56:ec:1f:03:a8:e6:76:
                    72:61:95:1d:5d:cf:a1:22:d8:33:5b:7a:10:4c:c2:
                    c4:4b:7f:db:a3:c0:c7:9e:ab:37:37:ac:36:93:f9:
                    44:e9:7f:0f:8f:d0:12:01:2f:49:5b:a5:c1:09:86:
                    a6:d4:c6:53:9a:1c:e3:70:c5:71:66:1f:05:d2:41:
                    70:72:f0:ac:25:61:0f:13:f8:81:fc:3e:06:63:eb:
                    3b:fd:40:34:c5:48:d9:5e:1e:35:34:f3:1a:78:61:
                    bb:44:7a:6b:aa:e5:e8:b5:9d:01:8a:25:8c:6b:5d:
                    86:d3:15:bb:b3:81:68:29:50:27:d9:0f:12:41:ae:
                    bf:91:03:ae:60:98:63:ff:98:a7:80:cc:24:0f:36:
                    0e:a1:6c:b0:b4:c0:0c:26:e7:d6:6f:c5:a0:c7:45:
                    69:bd:66:a6:9f:5a:9b:38:11:f4:b0:53:ea:0c:7a:
                    4e:b1:70:d9:d3:85:84:dd:6e:64:47:b0:a2:4a:e4:
                    cd:55:12:e1:67:24:3d:4b:eb:39:e9:c0:39:d8:c2:
                    8d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C7:D9:7F:3A:E1:84:54:E5:ED:15:D6:D3:13:74:EB:A6:C0:06:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/b3b03f47-6547-310e-ba40-c2f46479d934.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.124.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:3d:ec:0e:65:ff:fe:3e:fb:02:3a:e1:26:0a:81:f1:b5:af:
         6d:8a:4f:42:62:52:42:e0:26:33:dc:29:47:5b:d5:f3:bb:7e:
         48:fe:61:e9:d6:b0:49:46:53:74:1e:fd:6f:b5:aa:9e:07:66:
         b7:9c:42:ae:f4:fd:fb:b7:97:ab:b1:47:b6:cf:e9:b0:85:20:
         9f:31:eb:c6:05:02:06:72:eb:ea:34:24:0e:76:72:3c:94:c6:
         ee:62:be:bc:ce:c3:c2:c2:6c:b7:af:1a:d4:27:2b:42:fd:47:
         2b:49:da:5b:0f:21:21:c1:33:85:88:65:0f:ed:c1:c5:0e:a6:
         c7:5f:b5:6e:6a:f0:9a:44:37:1e:15:59:a5:3c:f2:75:f4:3a:
         fe:a1:80:fa:6f:85:0d:5a:af:2b:83:00:16:14:43:2c:b7:54:
         61:9f:f2:7d:c5:d6:7c:68:49:4c:f9:5a:03:30:2a:b5:89:52:
         55:c5:7c:51:a4:d3:63:76:91:59:f5:34:fe:ba:fe:9c:e5:b0:
         9d:af:06:92:46:d0:8c:42:cc:90:08:87:28:49:cc:70:c6:90:
         43:25:52:0c:04:1d:02:de:e0:5a:8d:ff:26:47:d5:da:56:e6:
         94:1c:95:9b:7b:fa:e4:af:87:db:3f:95:fb:5c:bf:1a:23:54:
         a9:08:7d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:02:32 2024 by rpki-client on console-fra.rpki-client.org