Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/00326377-b50c-3d2f-881f-8d9f69318724.roa
File:                     00326377-b50c-3d2f-881f-8d9f69318724.roa (raw, json)
Hash identifier:          QhfjwITHxCn7YtC/Wh8E2qb5A9KFuO/qhNdoLcBJ4uw=
Subject key identifier:   1B:1E:0E:FC:97:36:2F:68:3B:AC:2C:ED:EB:D0:0A:B7:87:08:AD:0C
Certificate issuer:       /CN=f4cb39e9-98be-46ba-abb7-91c4edafbe22
Certificate serial:       010D0C9F4328584819CFE196791407602538FB80
Authority key identifier: FF:49:33:63:43:FA:30:40:4C:0E:C1:8A:72:82:58:38:85:23:66:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/00326377-b50c-3d2f-881f-8d9f69318724.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     398852
IP address blocks:        104.166.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/f4cb39e9-98be-46ba-abb7-91c4edafbe22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/f4cb39e9-98be-46ba-abb7-91c4edafbe22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:e1:96:79:14:07:60:25:38:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4cb39e9-98be-46ba-abb7-91c4edafbe22
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=0f4af3c2-50e4-4eba-b9ff-d06b4ed23bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a6:0d:76:ed:19:ea:66:e8:72:78:ae:10:f1:
                    49:fb:e0:6d:30:11:9c:0c:dd:b5:f3:45:1e:dd:1b:
                    b8:aa:98:9a:33:f1:1b:46:af:a3:f7:d3:68:48:b3:
                    bf:3e:b2:a4:eb:1a:8f:e7:cd:1e:c0:25:77:2c:f5:
                    01:e7:5f:88:19:4a:71:3a:6e:32:35:1a:6e:74:2a:
                    45:75:00:d8:16:f1:c6:f9:5f:8f:e4:3b:65:8e:6f:
                    a3:eb:03:e9:40:85:bc:f8:7d:63:15:ef:d4:b4:87:
                    c7:d8:53:0b:e6:ab:95:4d:00:57:04:6b:4b:b0:ec:
                    6b:f1:bf:57:b7:3d:f9:ed:ff:ca:4d:bb:d2:fa:49:
                    76:b1:e6:12:1c:de:8c:aa:fd:97:7b:91:07:92:1b:
                    38:45:7f:2f:6c:15:9d:4f:03:56:2e:1d:0c:d5:32:
                    b2:a0:06:b7:bd:44:25:1c:22:aa:37:07:73:df:d4:
                    56:c6:d8:93:96:0c:83:47:ae:c1:91:ad:d9:14:00:
                    4f:98:53:6a:c2:07:3b:db:88:c8:3a:d8:1c:40:e5:
                    5d:c0:19:b9:fb:63:b3:37:2d:e9:e2:43:6b:fe:04:
                    36:c4:4e:cf:b9:20:28:2b:21:67:91:d2:9c:a9:05:
                    7a:93:ce:af:4c:82:a8:f2:01:bd:ba:bd:d9:78:d7:
                    86:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1E:0E:FC:97:36:2F:68:3B:AC:2C:ED:EB:D0:0A:B7:87:08:AD:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/00326377-b50c-3d2f-881f-8d9f69318724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/f4cb39e9-98be-46ba-abb7-91c4edafbe22.crl

            X509v3 Authority Key Identifier:
                keyid:FF:49:33:63:43:FA:30:40:4C:0E:C1:8A:72:82:58:38:85:23:66:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:40:42:31:53:e3:c3:f8:69:09:69:b4:ef:c4:e4:5d:72:c0:
         bf:b5:00:c8:3a:35:0f:8e:c3:6c:32:b2:dd:d6:3e:e7:eb:4d:
         66:a9:6f:ba:a0:c6:70:41:63:4a:00:fa:3e:04:c4:b8:da:cb:
         05:8e:24:27:12:07:73:5a:1a:e0:01:ff:a8:fb:4c:ff:64:fd:
         46:15:e0:28:37:7a:08:b6:a7:e6:f3:59:d8:f0:08:cb:f1:b7:
         84:f8:1d:20:00:cd:e0:26:e5:fe:6b:eb:4e:36:81:d7:dc:86:
         4d:b9:b4:be:5e:cb:9c:94:15:39:d4:a3:10:e6:cc:79:36:15:
         1b:32:08:5d:c9:07:49:47:7e:39:11:70:2e:4e:c7:53:37:11:
         85:2e:33:f6:7e:9d:fd:05:ed:a9:be:4a:6b:48:02:61:4c:ef:
         f9:dd:a1:5d:a1:00:19:17:28:80:00:0b:37:dc:5d:74:f2:48:
         d3:fa:5c:84:80:a8:9b:98:06:33:92:2e:46:63:36:a1:fe:99:
         44:13:f0:18:68:1d:11:c4:79:e9:d1:15:33:96:91:67:ab:43:
         f3:9e:91:cd:3a:36:ee:0f:01:e8:74:00:9e:2a:a0:bb:17:e7:
         d0:64:f1:82:10:83:b8:32:92:30:55:83:8f:b4:5d:59:f0:70:
         07:f0:23:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:22 2025 by rpki-client