Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/2f200fa1-3761-35ab-8b55-ffa8c0606314.roa
File:                     2f200fa1-3761-35ab-8b55-ffa8c0606314.roa (raw, json)
Hash identifier:          V3tVzqFQKLk84GDfuiG8cjrYRhtV2S0vP4uR9OQW3Ms=
Subject key identifier:   1F:4D:56:60:A2:24:B7:73:C6:60:0C:35:C6:7B:B8:57:3A:D0:3E:41
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285844FF901A72FF1ADF31E617EE80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/2f200fa1-3761-35ab-8b55-ffa8c0606314.roa
Signing time:             Sat 24 Feb 2024 14:00:31 +0000
ROA not before:           Sat 24 Feb 2024 14:00:31 +0000
ROA not after:            Fri 24 May 2024 13:00:31 +0000
asID:                     21859
IP address blocks:        98.96.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ff:90:1a:72:ff:1a:df:31:e6:17:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Feb 24 14:00:31 2024 GMT
            Not After : May 24 13:00:31 2024 GMT
        Subject: CN=b2faea6e-7a62-43ff-ba53-79a2609ee63f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0f:f3:16:dc:c1:d7:ae:02:df:8d:1a:b6:ff:
                    a3:cf:a5:19:31:cf:b8:dc:12:2b:0c:b7:76:e7:d4:
                    3f:a1:a0:9f:7e:f5:6e:92:c8:4e:ce:03:d7:d1:64:
                    61:21:be:bb:f1:3a:7a:7c:3e:08:07:6e:5d:45:a6:
                    9c:86:26:aa:6f:9d:8c:19:e9:c2:c7:45:24:71:48:
                    da:94:0f:09:12:ee:c9:0c:99:ff:b6:03:bd:2a:2b:
                    1e:d6:0d:40:83:e5:55:25:ec:68:c7:78:81:c4:e7:
                    b4:35:48:33:36:5c:19:7c:42:ad:96:a6:d2:31:f2:
                    6f:30:ef:2c:73:45:96:4d:1b:f5:f5:a8:bf:8b:59:
                    e7:fb:a9:7f:84:da:99:6e:f8:90:3a:7a:c6:f5:b7:
                    1b:4f:10:7e:ea:b3:29:61:73:0d:01:93:e2:2b:bf:
                    b5:db:20:e0:19:46:4e:2b:ef:67:7b:7e:a0:63:4e:
                    67:f5:63:46:6d:81:c4:f7:c0:42:d0:2e:16:22:04:
                    86:27:2f:ff:24:33:c4:dd:27:5a:12:35:b9:2d:50:
                    f0:b0:df:05:bd:cd:56:80:5a:cb:d4:f7:df:37:15:
                    2a:8b:80:68:ca:f0:2d:32:ea:e6:12:2a:c5:0f:e6:
                    c6:95:8a:e6:5f:6f:de:47:e5:12:86:ab:5c:d9:17:
                    e9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4D:56:60:A2:24:B7:73:C6:60:0C:35:C6:7B:B8:57:3A:D0:3E:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/2f200fa1-3761-35ab-8b55-ffa8c0606314.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.96.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:36:73:ad:b1:bc:3a:6b:87:b0:68:33:40:13:aa:f8:d6:b2:
         35:4b:be:b0:98:c0:68:31:30:80:37:b1:9d:5b:2c:54:a8:ac:
         f4:10:02:24:7c:20:b1:d2:e4:ed:21:a7:ae:4a:f4:03:cf:09:
         15:c0:e7:3c:d5:bf:c9:09:85:a7:65:7d:7c:03:87:d2:80:2b:
         bc:8d:54:45:70:1a:69:73:bf:a0:f8:2e:a6:10:e4:76:a9:58:
         e5:35:12:6e:86:ac:de:ad:67:63:6a:85:d3:66:ef:ad:d1:14:
         33:47:20:4d:4f:b9:da:d5:86:19:0f:07:2e:38:ac:5f:2a:50:
         63:db:e0:60:5b:50:b4:02:54:ab:a1:93:be:85:f7:dd:ab:88:
         75:bb:48:3e:db:8a:1a:fc:63:e5:6f:39:ac:18:3e:39:51:b2:
         cf:dc:57:5b:81:b4:3a:2e:d3:c9:85:c8:1c:32:0e:19:a8:be:
         5c:d8:da:7e:63:04:2e:2c:7d:25:56:2d:b1:2c:01:a3:24:32:
         75:d8:ea:44:4a:1b:22:0f:bb:b6:46:59:2a:b8:65:b9:17:27:
         ee:e3:ab:1f:1c:fc:09:1f:94:5f:c8:03:e5:75:aa:17:68:99:
         2b:d9:34:27:ee:67:1f:e0:50:44:e0:67:91:8d:bb:22:0e:8c:
         1c:28:f7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 06:39:46 2024 by rpki-client on console-fra.rpki-client.org