Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/eb4f3dda-fc1e-3e2b-8eae-576ef396c7a2.roa
File:                     eb4f3dda-fc1e-3e2b-8eae-576ef396c7a2.roa (raw, json)
Hash identifier:          LD/LzXAFt4HjRBmEsUue6s/lT1jfrSwCMssSy+HB5kw=
Subject key identifier:   B0:A9:B2:0E:C1:4B:EA:A5:7F:D5:20:2F:A9:C7:DC:62:79:07:96:AF
Certificate issuer:       /CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a
Certificate serial:       010D0C9F43285847256B243754FB25E211EBA670
Authority key identifier: 81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/eb4f3dda-fc1e-3e2b-8eae-576ef396c7a2.roa
Signing time:             Sun 08 Sep 2024 13:00:41 +0000
ROA not before:           Sun 08 Sep 2024 13:00:41 +0000
ROA not after:            Sat 07 Dec 2024 14:00:41 +0000
asID:                     14618
IP address blocks:        198.99.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:25:6b:24:37:54:fb:25:e2:11:eb:a6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a
        Validity
            Not Before: Sep  8 13:00:41 2024 GMT
            Not After : Dec  7 14:00:41 2024 GMT
        Subject: CN=51744301-4ab1-4f4c-8955-d555b5a95669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9a:88:ff:bd:58:17:68:f5:78:c9:52:5a:e5:
                    e9:00:b7:fa:6c:4b:f0:05:1e:ee:cb:4e:a6:26:f3:
                    f5:80:cf:9d:2a:e8:6f:37:f0:76:9c:cc:f4:11:de:
                    47:cf:ac:b0:60:d9:88:8f:0d:7b:81:1a:bc:50:9c:
                    70:8a:e3:2f:3a:3a:93:7b:97:b7:d2:24:f1:4e:98:
                    da:8c:31:ec:a2:69:8c:c0:07:c7:4b:b8:35:cb:54:
                    ec:80:80:e7:2e:9e:70:c8:29:06:18:5e:63:1b:fa:
                    9e:25:64:1b:6d:1f:73:b1:90:af:6c:39:21:52:e7:
                    06:67:7d:59:4b:90:eb:c6:56:b3:a2:9d:db:4f:08:
                    5c:a4:0c:45:7a:f7:3e:9a:73:66:cf:56:eb:1f:de:
                    3d:d6:bd:7a:c7:86:a6:52:5a:e9:5d:29:42:04:7a:
                    7f:cd:3e:97:c3:93:f7:e1:36:07:9d:b6:1d:b5:73:
                    25:67:4a:17:2d:26:89:99:c3:9c:ce:f2:3d:5e:db:
                    4a:d9:9e:ad:cc:76:ba:d3:8e:9c:c2:d7:76:41:b2:
                    51:5f:f5:ae:6b:c4:2e:07:00:6c:32:6d:94:5e:07:
                    05:53:1d:4c:a0:0e:5b:c6:be:37:0c:4f:52:f8:e5:
                    0a:4e:38:2e:5b:c3:1a:56:b6:41:83:88:ac:f9:6b:
                    f2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A9:B2:0E:C1:4B:EA:A5:7F:D5:20:2F:A9:C7:DC:62:79:07:96:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/eb4f3dda-fc1e-3e2b-8eae-576ef396c7a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl

            X509v3 Authority Key Identifier:
                keyid:81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.99.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:b9:04:fc:7a:2d:a5:46:2c:69:eb:9c:46:26:e8:aa:8e:c5:
         1f:40:7d:bf:0b:7a:e5:77:04:c6:6c:86:a1:1e:db:8f:9a:01:
         7c:56:ce:09:fe:2e:75:34:4c:a3:13:8b:2a:21:55:e5:2f:5a:
         1b:1f:5c:d5:80:75:30:8b:8d:88:37:87:8c:6a:c7:40:33:58:
         52:1a:60:1b:62:29:83:aa:f6:df:f3:31:6c:48:e5:99:b6:26:
         d2:dc:a7:67:3f:6f:dd:0d:79:4e:3f:0a:ac:d0:86:44:ae:18:
         01:76:23:63:69:3a:ea:4c:e9:79:72:7b:ae:03:5f:b2:e6:41:
         37:8f:ac:5e:a9:ac:04:07:b8:f9:e0:bd:76:3c:da:5d:9c:d0:
         d9:8d:c1:3e:c0:bb:be:44:75:6e:81:b4:75:e7:ec:92:32:06:
         7a:cb:db:50:f8:25:ee:bd:b2:03:97:68:3e:39:23:1e:23:63:
         3b:88:41:49:53:54:2e:9a:0d:32:30:0d:38:01:5d:7d:8a:2f:
         d7:38:a8:9c:0c:46:fc:d8:e6:05:91:62:57:5c:35:cd:be:b4:
         04:71:a9:8d:5b:64:71:06:aa:23:cb:9c:ef:82:e1:e4:9f:73:
         a4:0f:bb:06:93:f4:a4:79:fc:5f:85:29:5e:ff:de:3b:ea:fe:
         45:f2:87:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:28:34 2024 by rpki-client on console-ams.rpki-client.org