Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa
File:                     cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa (raw, json)
Hash identifier:          JOcJA0atuKjvEXmdOvB4CGeI3CHfjYM+47hnUS6Bg6w=
Subject key identifier:   EA:39:18:89:85:04:A7:A1:96:AE:08:76:3E:D0:36:87:51:14:02:BA
Certificate issuer:       /CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5
Certificate serial:       010D0C9F432858474445A69E46501703C6FB85D8
Authority key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa
Signing time:             Thu 19 Sep 2024 14:15:15 +0000
ROA not before:           Thu 19 Sep 2024 14:15:15 +0000
ROA not after:            Wed 18 Dec 2024 15:15:15 +0000
asID:                     32762
IP address blocks:        198.96.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:45:a6:9e:46:50:17:03:c6:fb:85:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5
        Validity
            Not Before: Sep 19 14:15:15 2024 GMT
            Not After : Dec 18 15:15:15 2024 GMT
        Subject: CN=796d2179-9a51-440f-b65d-f43044d8a0a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5d:55:d5:a0:1d:51:e3:2d:63:b8:9a:3c:8c:
                    fd:18:49:03:53:6c:ed:a6:15:f9:8f:5f:cc:0b:ea:
                    d6:e1:fb:f3:47:af:a8:4c:16:08:49:5c:d6:12:fb:
                    5a:87:5b:84:c0:b3:3e:fe:0e:c6:4b:e8:7c:d1:70:
                    81:55:02:28:a9:dd:0f:98:4c:26:97:01:f5:1d:6f:
                    d5:d2:9a:9d:50:da:d8:71:24:e5:24:de:bc:5a:31:
                    e9:ce:97:a8:1f:34:23:82:0f:85:17:a2:7b:18:d7:
                    9a:8c:66:30:e7:d7:ad:a7:7e:36:d6:42:e6:db:97:
                    1d:ea:7b:c1:a7:d9:70:b3:9c:cb:ae:b0:96:73:af:
                    e2:bc:10:9c:8e:c0:97:16:27:b9:5d:dd:e7:5e:2d:
                    df:d0:9c:95:6a:74:8a:eb:40:d8:8e:28:2e:20:5b:
                    d4:64:f6:49:af:40:c8:10:3a:1e:18:20:bf:d9:6a:
                    16:e3:85:31:1d:73:18:e3:37:5d:ca:b8:bd:6c:b7:
                    6c:71:90:51:cc:7c:5d:af:40:5e:4f:ef:b2:97:67:
                    d3:35:3e:26:3b:40:96:5f:44:e0:3a:7e:79:a9:c6:
                    60:03:0c:4f:3d:6d:82:c1:d6:df:e9:2d:fc:df:bd:
                    93:94:b4:c1:08:d4:d6:ef:09:4e:ad:22:a9:80:8f:
                    88:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:39:18:89:85:04:A7:A1:96:AE:08:76:3E:D0:36:87:51:14:02:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl

            X509v3 Authority Key Identifier:
                keyid:91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.96.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:9a:a3:ff:09:6f:64:de:05:de:e0:ff:3f:3c:82:40:d8:f9:
         b3:82:e5:4a:56:c3:94:33:45:c9:69:a4:fe:df:bb:56:db:20:
         07:cf:de:c0:9e:2f:8b:ff:69:ca:04:ef:05:15:54:a8:fd:0f:
         be:cb:26:ee:b7:26:33:60:fd:3f:05:e6:b7:ac:20:b3:57:84:
         39:15:67:6b:9e:b3:d9:c1:3f:54:f9:b2:da:3d:00:d1:ce:eb:
         09:8f:e4:f5:79:8a:dc:0b:e3:b3:04:d3:bb:bf:ff:17:bd:f0:
         93:01:a9:a6:22:f7:a2:2f:7f:5d:e9:ab:eb:4d:4b:04:97:39:
         d8:83:f3:b2:9e:f3:54:a5:e1:78:80:f7:7c:a6:d7:7c:c3:ef:
         db:c2:98:81:37:96:ae:7f:0e:a2:aa:85:de:a7:d3:72:40:cd:
         2a:ef:31:6b:6c:e2:6d:22:0f:20:d7:aa:29:a0:bb:54:76:1e:
         40:b0:49:64:5f:70:c5:48:3c:03:f6:23:60:50:e6:23:bc:54:
         fa:74:0b:63:59:16:70:54:63:b6:b3:29:d5:30:73:15:22:25:
         82:7d:44:30:c1:12:11:08:f2:9c:6a:c2:90:66:2e:f3:dc:fa:
         de:2c:76:68:1e:2e:a6:d0:0c:56:07:cd:d0:d4:d9:ac:0b:41:
         fb:36:71:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:12 2024 by rpki-client on console-fra.rpki-client.org