Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/8688f611-6998-3489-95fe-612bf6872077.roa
File:                     8688f611-6998-3489-95fe-612bf6872077.roa (raw, json)
Hash identifier:          Zv75SuQIULeP8xzV9SkFEpHqqLRUkWgQ2NAbGoGPZt8=
Subject key identifier:   02:05:5B:1F:EE:69:18:5F:CD:23:6E:8A:9F:01:B7:AC:6E:71:00:7D
Certificate issuer:       /CN=ad013889-a60a-4a2c-a0dd-eb8e8d310919
Certificate serial:       010D0C9F43285848100A71CF5A0B873FC96E2170
Authority key identifier: FA:B0:95:34:5C:31:D1:7E:9F:14:DD:5D:2D:92:A0:CC:18:7B:97:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/8688f611-6998-3489-95fe-612bf6872077.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     63023
IP address blocks:        98.159.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/ad013889-a60a-4a2c-a0dd-eb8e8d310919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/ad013889-a60a-4a2c-a0dd-eb8e8d310919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Dec 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:71:cf:5a:0b:87:3f:c9:6e:21:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad013889-a60a-4a2c-a0dd-eb8e8d310919
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=b72011eb-69df-4fdf-9302-2216a5620117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d6:2f:fc:27:3b:a0:e4:5c:4f:25:f6:73:f9:
                    28:86:95:01:c1:97:05:cb:a9:5a:72:b5:a9:e3:8b:
                    e9:17:14:0f:e9:12:e0:ba:4a:17:0e:f5:89:12:a9:
                    d3:65:74:6e:5e:df:20:d5:80:39:17:00:af:19:6b:
                    55:34:8a:f9:1f:68:b0:6b:8b:f2:7f:f4:6e:ce:f8:
                    fd:cb:f1:06:55:96:2e:f7:fa:70:ae:62:c5:6c:c5:
                    00:98:58:c9:9a:f7:d3:c9:2a:c3:68:9c:4d:9c:0b:
                    67:19:ca:55:ee:9c:b2:e1:53:11:f0:3e:68:5d:8b:
                    b6:15:19:69:8b:9c:26:92:f0:25:a5:45:0b:cc:7d:
                    a8:0d:4a:a1:ed:c7:cf:5e:ae:f0:ea:b8:dc:c3:e9:
                    1e:9b:9f:43:3c:bb:ab:ea:fa:1f:76:59:e7:c7:54:
                    d2:af:cb:23:09:d0:a7:65:07:60:e0:47:ab:e6:5d:
                    a3:8c:8f:db:a6:6d:1b:e5:c6:c9:0a:a2:83:43:4b:
                    5e:2a:e6:8a:1b:95:12:79:e4:99:12:77:26:b6:b2:
                    39:77:aa:fa:68:7a:76:ab:3d:1d:0d:76:e3:4f:59:
                    ef:29:48:85:20:80:cf:17:57:51:b9:59:9f:f7:42:
                    c4:ac:fd:6a:76:ca:26:75:b5:98:fb:f6:ec:39:df:
                    3e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:05:5B:1F:EE:69:18:5F:CD:23:6E:8A:9F:01:B7:AC:6E:71:00:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/8688f611-6998-3489-95fe-612bf6872077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/ad013889-a60a-4a2c-a0dd-eb8e8d310919.crl

            X509v3 Authority Key Identifier:
                keyid:FA:B0:95:34:5C:31:D1:7E:9F:14:DD:5D:2D:92:A0:CC:18:7B:97:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.159.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:76:22:5d:c7:8a:52:d0:7a:4a:3f:19:3b:e0:a5:cf:47:05:
         fe:0e:ae:dc:b6:51:c6:bd:59:95:cd:57:2b:d6:4f:25:b8:51:
         12:6e:a8:dc:ba:3e:c3:ec:7e:6e:98:a6:89:e8:17:97:9f:65:
         07:25:70:bc:05:e0:48:34:6e:45:1c:a0:f3:09:51:aa:2e:c7:
         f1:2e:1b:48:6f:1b:4d:e6:39:b5:f7:ba:39:3a:e6:17:1e:e4:
         d4:a0:e3:89:a3:29:60:44:e9:53:56:91:3b:f5:04:b7:aa:61:
         49:60:bf:df:9d:8d:68:f9:0e:6b:1e:2b:df:c5:e2:65:dc:b8:
         b3:72:4d:8b:32:a7:3e:56:d9:f8:09:4a:e1:17:77:95:3b:20:
         0e:58:78:71:0b:cb:fe:ba:d8:e7:19:4c:23:70:35:30:fa:25:
         45:2d:25:a0:37:06:8f:e6:b8:42:17:5c:30:af:1f:ff:16:1c:
         83:6b:ae:3a:91:bc:fb:ec:b8:83:51:90:a9:33:d8:c1:3b:cc:
         04:3c:8b:0e:56:95:ef:7a:d5:e8:ed:61:14:73:d7:89:43:fd:
         c2:94:9f:1a:2e:91:76:07:3c:69:92:5f:51:a7:f8:86:d0:bf:
         83:ba:8c:00:a2:2a:85:da:c3:6a:6e:ce:04:04:39:1b:9b:df:
         71:e9:51:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 10 04:59:18 2024 by rpki-client on console-fra.rpki-client.org