Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/274aee7b-1b4c-35b6-81ea-7f91cfa2a8f6.roa
File:                     274aee7b-1b4c-35b6-81ea-7f91cfa2a8f6.roa (raw, json)
Hash identifier:          2Z4jzRUI5ameaJszirOz066+M31fim7C1DbEdmy6kdk=
Subject key identifier:   D3:BE:00:8C:D3:A2:FD:D6:3F:C5:03:6C:E0:12:62:AE:7C:F8:A8:05
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16F8C31A9E6
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/274aee7b-1b4c-35b6-81ea-7f91cfa2a8f6.roa
Signing time:             Thu 09 Jan 2020 21:24:22 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        198.87.0.0/21 maxlen: 21
                          198.87.232.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:8c:31:a9:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=023fc88a-4770-44e5-b5e3-2beeb1e51f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b0:46:9b:e4:43:58:11:49:dc:76:7d:6c:12:
                    2a:5e:c1:a3:1f:14:9b:9b:2e:28:5f:18:3e:e2:bf:
                    5c:aa:cd:13:67:85:2a:f2:46:f1:80:84:46:48:be:
                    71:64:1e:34:ad:30:ee:7c:68:42:09:fb:42:f7:c6:
                    37:da:53:fc:80:fd:66:10:3f:5e:fa:6a:30:6d:d4:
                    5a:7c:fc:10:f3:29:fc:ba:a6:75:72:2e:57:9b:5a:
                    e9:1b:39:91:86:17:12:9c:86:3e:3a:bb:5e:1f:d5:
                    4c:d7:85:15:a1:5d:79:6a:8a:5c:fc:ed:d6:19:e4:
                    ab:87:e7:3c:b9:97:7c:c5:b9:1e:4b:fa:72:cf:db:
                    ec:03:9e:8b:56:3a:55:69:36:f3:66:4e:30:17:40:
                    41:86:01:16:f2:de:e1:32:44:4d:fa:27:f5:3e:57:
                    f5:4e:35:71:26:59:ff:11:3e:40:b9:f9:09:5a:c9:
                    d1:44:da:06:22:8d:22:68:17:b8:4c:4f:97:83:7c:
                    d8:79:06:25:8c:93:fa:f1:8f:65:a4:28:7b:18:57:
                    9a:83:e4:1d:f1:52:7c:22:ca:f9:a2:10:e7:bd:8f:
                    02:b7:e7:b5:10:41:d4:d7:bf:b1:a8:4d:11:43:d9:
                    c6:af:85:e9:9a:f0:81:57:19:bd:36:81:c1:a1:db:
                    13:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BE:00:8C:D3:A2:FD:D6:3F:C5:03:6C:E0:12:62:AE:7C:F8:A8:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/274aee7b-1b4c-35b6-81ea-7f91cfa2a8f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.87.0.0/21
                  198.87.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:8c:d0:48:ed:4b:20:bf:0f:ca:eb:85:5c:f6:c6:a2:fc:29:
         ee:cf:65:ea:81:7d:59:ea:7b:8f:ce:d6:6b:56:8f:bc:d7:1a:
         61:b8:1f:01:f7:07:d8:4d:a2:91:e5:cb:b8:03:ff:84:63:23:
         b5:b4:9c:88:74:92:36:b6:0e:fa:83:d8:0b:79:13:f7:fa:c5:
         59:18:73:36:dc:51:f9:49:b8:03:41:cd:95:f0:cb:89:b6:09:
         eb:03:5e:ee:f2:45:e9:bf:01:82:ee:48:44:56:4a:55:4c:f2:
         3b:27:e7:ca:e3:ce:92:e8:24:13:da:df:3c:17:bf:d7:fc:5c:
         6f:d9:44:f5:26:78:44:c2:67:2d:34:46:b3:bf:25:0d:5b:76:
         27:0e:63:a6:05:8c:11:74:af:c3:fe:2b:bb:b7:bd:77:8f:eb:
         12:02:66:a9:c3:e5:d9:4f:27:d3:df:2a:1f:5c:2b:6b:4f:63:
         7e:05:46:ec:7f:27:bc:d8:20:37:6f:db:14:0f:c5:83:53:78:
         42:11:b2:b0:18:60:03:f8:2b:2d:7d:3f:d8:f4:28:49:f2:d8:
         e2:1f:50:40:c9:36:ce:65:8f:f1:2d:2d:22:fb:bb:37:ed:59:
         c1:ef:10:c6:55:f3:c0:ce:43:3c:2c:a7:2b:84:20:77:fd:67:
         1f:df:9d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:59 2024 by rpki-client on console-fra.rpki-client.org