Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/afcb37b3-03f1-3034-bb08-6b9c4bfe7276.roa
File:                     afcb37b3-03f1-3034-bb08-6b9c4bfe7276.roa (raw, json)
Hash identifier:          Acj5fFBBaqFPsJ+jbFnkEFJ20511FFyCeNrR7EMt7o8=
Subject key identifier:   BF:D7:2C:AD:DA:F6:4C:93:B7:5B:B6:82:8F:AB:67:D6:1F:A6:F9:D3
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285845A936DAA8131F9AB5D3ACC594
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/afcb37b3-03f1-3034-bb08-6b9c4bfe7276.roa
Signing time:             Thu 25 Apr 2024 08:28:13 +0000
ROA not before:           Thu 25 Apr 2024 08:28:13 +0000
ROA not after:            Wed 24 Jul 2024 08:28:13 +0000
asID:                     21859
IP address blocks:        98.98.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:36:da:a8:13:1f:9a:b5:d3:ac:c5:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr 25 08:28:13 2024 GMT
            Not After : Jul 24 08:28:13 2024 GMT
        Subject: CN=45c60186-3613-47f8-933b-b500ed718c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:45:ef:c1:d8:55:59:bf:76:17:de:c0:60:68:
                    a6:22:9e:e3:82:b3:4b:52:c3:fe:64:38:84:aa:65:
                    49:fb:2b:e1:d9:57:62:d8:7d:17:55:28:07:d9:75:
                    4d:92:d4:04:a4:5e:08:e9:aa:a9:01:6c:f3:9c:e0:
                    e4:16:20:73:38:40:2f:b4:fc:a6:e1:e4:4e:b4:cd:
                    f3:e8:25:99:fe:19:da:6a:90:f6:62:0d:84:76:cd:
                    6d:fc:65:b2:4f:b2:9d:28:c8:45:0f:93:ee:d5:77:
                    6d:79:4e:04:36:3e:c6:1b:a0:f6:14:6b:c6:b3:f7:
                    59:d3:74:db:f8:7b:69:5c:52:fc:63:3f:6a:76:ab:
                    e7:ba:77:ff:ff:97:b0:20:ba:01:18:2d:c5:21:1c:
                    c6:33:a0:c4:9d:e2:30:82:b4:37:66:86:60:ad:6c:
                    83:39:f1:0f:ef:f7:cf:9d:c6:53:4e:0e:bd:29:f8:
                    4c:6d:dc:b2:9b:f1:a0:40:6a:f6:98:d1:92:e0:cd:
                    19:70:39:bc:41:7e:3e:26:e1:58:40:d3:41:bf:4f:
                    1f:7d:3b:c8:37:0f:f5:e3:20:8f:e9:0b:5e:80:67:
                    ea:de:c7:76:9a:39:e1:f5:eb:b6:db:e0:12:b7:af:
                    30:9b:5f:4f:5c:02:7a:b1:05:79:d4:93:28:61:b2:
                    ee:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D7:2C:AD:DA:F6:4C:93:B7:5B:B6:82:8F:AB:67:D6:1F:A6:F9:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/afcb37b3-03f1-3034-bb08-6b9c4bfe7276.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:29:89:f7:8e:79:60:3a:0d:f6:d4:e2:ca:9e:9c:fc:c1:a1:
         f3:0c:cf:9b:70:12:f8:84:c0:d3:92:23:42:5a:45:d5:77:05:
         81:0a:38:b0:4f:da:11:d5:c3:04:6d:29:b0:ae:05:c4:ae:28:
         48:5d:15:00:57:af:1c:f2:7c:04:96:fe:a6:e0:fe:84:c9:6b:
         aa:e1:38:10:55:c4:91:3c:02:22:3e:3b:3b:a9:a8:b9:db:20:
         ff:06:9d:f0:93:21:2d:c1:a8:c5:8e:83:5d:5f:84:42:3b:31:
         e0:9b:9c:b9:2c:b2:2f:91:8f:88:21:ca:f1:6d:0b:38:97:5c:
         8e:d0:c9:1b:51:8b:ed:09:64:e9:af:60:0e:17:02:e7:7c:d1:
         ba:ba:79:20:d8:07:e9:2b:3e:2e:db:8e:15:5e:62:cb:d6:be:
         d9:c5:c8:f2:bb:9e:82:e2:b3:6a:9f:20:07:a2:f1:71:81:fd:
         86:3e:53:65:c0:a8:08:bb:83:50:51:a7:c3:99:e8:9a:02:e4:
         05:92:e9:13:f0:6b:a4:2e:10:06:8b:10:12:dc:4b:1b:c6:bb:
         05:d0:37:57:cd:d0:f8:bc:06:8d:49:5e:a4:5d:59:67:04:14:
         73:b1:6b:ba:28:28:dc:15:d0:25:a4:60:5c:b0:fb:c9:5e:ab:
         d5:54:53:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:49:52 2024 by rpki-client on console-fra.rpki-client.org