Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/cd89b1c9-2750-3d92-95f8-b1676b079a58.roa
File:                     cd89b1c9-2750-3d92-95f8-b1676b079a58.roa (raw, json)
Hash identifier:          9FkC6/xlBgJokGDHH8YjnbvA1ZM4MKFzFfXz+DLayug=
Subject key identifier:   11:5E:37:3D:FC:BF:D6:EC:13:82:CA:BF:D0:E8:CB:47:9A:76:60:47
Certificate issuer:       /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial:       010D0C9F432858456B847ED3A1EA7561F448BB00
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/cd89b1c9-2750-3d92-95f8-b1676b079a58.roa
Signing time:             Wed 03 Apr 2024 06:04:32 +0000
ROA not before:           Wed 03 Apr 2024 06:04:32 +0000
ROA not after:            Tue 02 Jul 2024 06:04:32 +0000
asID:                     2734
IP address blocks:        98.158.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6b:84:7e:d3:a1:ea:75:61:f4:48:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
        Validity
            Not Before: Apr  3 06:04:32 2024 GMT
            Not After : Jul  2 06:04:32 2024 GMT
        Subject: CN=14963b1a-b4c1-4e89-b3cd-80ff9c754961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:37:94:d8:d7:27:10:3a:b3:21:e0:db:5e:b3:
                    17:74:88:b2:a9:2c:a4:a7:c8:f3:aa:b2:4c:f7:50:
                    ba:e7:0e:0f:53:2a:d0:d9:a9:41:8d:d6:ac:16:4f:
                    9b:50:0c:94:14:61:62:e6:9b:32:73:4c:28:58:6d:
                    08:09:9f:ce:51:bf:58:b8:cb:86:99:64:bf:0b:32:
                    df:e2:74:00:3f:d6:e4:fc:02:c2:19:d0:e0:1c:46:
                    0d:b1:f5:dd:5a:6b:d4:4a:cb:19:ea:3b:32:0a:a9:
                    31:83:fc:1b:7f:68:51:36:6d:8a:74:ba:37:91:d1:
                    21:02:52:6b:e8:27:b7:87:07:81:ec:f0:53:11:69:
                    5a:a3:67:22:d4:14:11:1d:35:77:4b:88:d7:80:41:
                    e7:e9:60:d9:1c:d4:87:74:af:ba:0b:b3:bc:ab:05:
                    87:e4:ac:ce:9e:c2:cf:ed:b5:d5:33:cd:6f:24:75:
                    73:67:94:f6:36:af:11:70:08:25:3a:17:3e:80:74:
                    c8:2a:59:52:bf:3f:ec:78:df:21:be:66:02:61:3b:
                    45:3a:2e:b5:4a:8a:fc:e8:f1:8d:fe:0f:0d:e4:78:
                    8e:60:90:13:d0:87:2f:9f:4a:ea:2c:27:4f:b4:63:
                    00:2a:c2:8d:1b:5e:66:13:0e:80:72:9c:07:ad:d1:
                    08:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5E:37:3D:FC:BF:D6:EC:13:82:CA:BF:D0:E8:CB:47:9A:76:60:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/cd89b1c9-2750-3d92-95f8-b1676b079a58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl

            X509v3 Authority Key Identifier:
                keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:b0:4c:94:87:72:3c:7a:ff:2d:4f:59:58:91:14:1e:35:91:
         71:57:84:8a:cb:94:19:53:7e:30:40:67:ec:a8:84:4a:12:b3:
         62:03:b1:cf:a3:2b:66:1c:dd:b1:73:fa:46:d4:d5:f0:74:03:
         7f:16:23:83:c4:cf:49:e0:52:99:39:00:39:d0:54:79:59:06:
         56:22:69:e3:8d:1d:4b:88:c5:54:61:3a:70:7d:50:0c:a5:53:
         49:cc:b3:1c:e2:2e:6c:2a:92:e7:2c:3f:e1:00:8d:ed:bb:79:
         57:0a:27:63:d1:8f:d4:cb:c1:ee:7f:6b:42:e9:56:de:65:e5:
         70:88:ad:a5:7f:e2:8b:dc:b6:ea:f3:ae:8e:d9:47:8a:02:7a:
         6d:9f:c1:e9:51:0c:fb:59:18:f1:b9:07:1c:d1:af:26:d6:38:
         ad:22:fa:69:b1:25:9b:d2:74:85:cc:ab:e5:89:20:5b:02:7c:
         4e:5b:46:7a:b0:be:38:e9:66:23:99:9c:f4:09:f0:31:64:c6:
         46:08:a4:5c:c1:b0:cb:fc:c5:ea:14:2e:53:35:9a:2f:08:d7:
         41:59:90:51:18:16:c6:7c:d2:97:7e:7d:61:e2:6d:b7:1e:7d:
         f9:b4:2b:84:3f:88:05:b1:31:17:91:ac:03:dc:e1:6a:d0:a7:
         ff:2f:68:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:39:12 2024 by rpki-client on console-ams.rpki-client.org