Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/526751ca-8522-392d-95af-640f3c7e9711.roa
File:                     526751ca-8522-392d-95af-640f3c7e9711.roa (raw, json)
Hash identifier:          LyJc984KcR4ui1S3TvRzQ+DvWt6csRdTUXfmT3wuCrI=
Subject key identifier:   FA:99:79:35:D7:1E:23:32:51:1B:E1:79:78:F4:27:D0:47:8A:FC:46
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584581E9EFFEEDB4E3F5FE63B680
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/526751ca-8522-392d-95af-640f3c7e9711.roa
Signing time:             Thu 11 Apr 2024 06:36:42 +0000
ROA not before:           Thu 11 Apr 2024 06:36:42 +0000
ROA not after:            Wed 10 Jul 2024 06:36:42 +0000
asID:                     21859
IP address blocks:        98.98.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:81:e9:ef:fe:ed:b4:e3:f5:fe:63:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr 11 06:36:42 2024 GMT
            Not After : Jul 10 06:36:42 2024 GMT
        Subject: CN=efd64e4d-7cf9-47c2-9adc-8c59d53459f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6f:64:93:d6:98:e0:e3:ef:80:91:de:dc:d5:
                    2a:a2:c3:35:22:13:78:01:6e:9f:67:f9:9d:60:36:
                    7f:2e:19:d9:09:dc:57:c6:43:0a:a7:c8:91:c0:c7:
                    fe:90:ec:fb:ca:4f:3f:22:6c:17:91:26:0d:ce:97:
                    38:7b:34:df:85:46:c0:9b:59:2e:3b:26:3b:3d:ab:
                    9a:a3:31:ec:3e:8f:90:1e:c3:d0:70:1b:c2:7a:e2:
                    79:12:ce:2a:49:6f:0a:ad:57:98:f9:1b:0c:7e:60:
                    1f:84:4e:64:30:4f:ca:0a:65:13:3f:36:6d:5c:2c:
                    10:29:b2:7f:df:ab:a6:15:72:ac:21:03:50:89:2d:
                    3e:57:64:92:f4:1b:1e:d5:2c:55:ea:8c:b9:5e:2f:
                    15:60:f0:83:f8:df:59:69:6b:60:e9:63:f2:38:cf:
                    b4:c4:1c:f5:b8:06:81:c9:17:19:a7:90:9e:87:b1:
                    e9:8d:f5:d7:52:b8:4f:f9:51:37:70:43:45:df:15:
                    1c:9d:7c:9c:6f:07:aa:e9:1f:50:91:5d:96:7a:5c:
                    f1:57:29:88:00:43:b2:26:db:46:c8:85:17:61:12:
                    0f:21:80:8b:12:38:87:6a:4a:d3:57:64:cb:69:c7:
                    5e:af:50:d1:d1:10:16:69:c5:3e:b5:f3:d8:7a:76:
                    aa:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:99:79:35:D7:1E:23:32:51:1B:E1:79:78:F4:27:D0:47:8A:FC:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/526751ca-8522-392d-95af-640f3c7e9711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:26:9e:70:08:12:9a:e5:b6:bd:25:98:49:3b:0e:24:5d:03:
         36:0a:24:27:07:16:b8:5f:87:f1:9e:75:0e:20:50:1f:e6:04:
         7b:ea:81:d4:5b:37:b5:3d:8c:8d:8c:c1:07:d9:d8:91:b2:08:
         ff:ca:02:58:6d:ad:8d:40:bd:b0:63:b1:7b:0d:56:7f:3a:5e:
         bc:6b:82:89:17:98:84:f4:43:54:12:e0:7a:a0:bb:47:1c:72:
         ff:6f:b0:6b:56:fb:10:04:9a:8b:37:16:c8:84:f5:82:6a:b8:
         f2:f7:4f:99:06:0f:5b:00:36:d5:63:bd:84:29:9d:df:aa:3b:
         c4:86:d4:55:bd:22:87:c4:de:a1:4e:52:26:18:29:a3:ce:7d:
         b5:d7:b8:f0:3c:b7:36:c9:b5:73:b0:25:2e:65:23:80:4b:0d:
         33:69:20:8b:b7:0f:20:c3:b2:e1:ec:a9:17:b9:45:dd:48:49:
         44:53:5d:ab:4c:94:b7:33:d2:dd:90:d9:02:b2:02:e4:5d:58:
         0d:78:4c:d9:77:c1:e5:ea:eb:ce:3d:c8:0a:2b:e0:ee:39:8a:
         67:0e:6c:46:0d:39:70:3f:e1:93:62:5a:76:67:5d:03:52:42:
         77:16:0b:cf:96:b6:f2:d0:79:1f:2b:88:39:df:8b:9b:12:f4:
         1e:e9:55:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:54:49 2024 by rpki-client on console-fra.rpki-client.org