Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/024b94db-4a95-3e23-b59b-f4fd931985d0.roa
File:                     024b94db-4a95-3e23-b59b-f4fd931985d0.roa (raw, json)
Hash identifier:          gkKajgrdURdCImrnZ2oe49adh1tAJVOAJHjPRN8sEMQ=
Subject key identifier:   7A:7E:88:D4:1F:9D:77:B8:59:75:A9:BB:18:D1:88:95:59:57:E5:8B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858384FF1974C79DD6583BEED5680
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/024b94db-4a95-3e23-b59b-f4fd931985d0.roa
Signing time:             Fri 18 Dec 2020 05:00:00 +0000
ROA not before:           Fri 18 Dec 2020 05:00:00 +0000
ROA not after:            Fri 11 Dec 2026 05:00:00 +0000
asID:                     10838
IP address blocks:        98.157.180.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:4f:f1:97:4c:79:dd:65:83:be:ed:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec 18 05:00:00 2020 GMT
            Not After : Dec 11 05:00:00 2026 GMT
        Subject: CN=f45b7009-c678-45c1-aab9-afc613d4ca96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:da:28:9b:18:f1:a4:25:83:42:25:20:61:b4:
                    f8:2f:90:d0:03:92:ec:2d:fd:cc:df:fd:b6:1b:7a:
                    48:a9:84:d5:1f:4b:be:77:d6:b2:0a:10:71:c1:5a:
                    47:49:35:88:d3:24:fb:da:1e:20:dc:bb:a2:c6:d8:
                    ef:2d:ac:8d:3a:a3:47:7a:12:4d:56:30:1d:22:5d:
                    70:b1:2a:64:0e:04:ea:2e:46:c8:40:b0:3a:74:3c:
                    5e:b2:d7:66:01:ae:25:7e:90:0e:e6:77:ee:b2:90:
                    56:2d:d0:9c:35:14:2b:5f:0a:f0:88:b5:75:7b:3f:
                    6c:f1:7d:f7:2c:81:cc:7c:d9:63:c4:00:70:8d:cc:
                    59:c9:1d:f9:78:54:85:e3:cc:91:8b:11:17:52:00:
                    29:21:85:8d:74:65:15:b8:37:aa:d7:92:48:4a:d4:
                    b6:ca:21:4b:50:98:40:55:73:a2:04:bf:da:52:9f:
                    44:79:83:b1:fd:5d:0c:2b:3d:08:34:ec:e6:33:7a:
                    c7:77:7a:9c:a6:b0:72:2a:58:09:4e:10:63:b3:f9:
                    4a:9e:8f:b1:08:04:2f:53:6e:48:e3:c2:ec:a0:f5:
                    5c:29:1f:57:06:07:62:d2:c9:ec:b4:d4:35:ba:d5:
                    ee:ff:f2:f3:f4:a3:6d:e0:f1:b7:23:8d:5b:cc:f0:
                    33:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7E:88:D4:1F:9D:77:B8:59:75:A9:BB:18:D1:88:95:59:57:E5:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/024b94db-4a95-3e23-b59b-f4fd931985d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.157.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:8f:82:b8:8d:0c:ab:a8:8c:04:02:dc:64:6c:7f:e4:2f:e7:
         d1:c0:22:e0:b3:7b:16:b9:f1:4c:ae:a6:d3:0a:75:5d:f2:95:
         1f:9c:cf:6a:7a:c1:78:ef:91:90:16:f6:39:b6:35:07:50:89:
         51:b8:5d:5b:a3:44:d6:cb:51:fe:6d:3a:ab:22:63:9f:f3:df:
         7b:8c:ac:ff:27:13:35:46:58:4a:3c:f6:6d:c8:99:c5:6b:7f:
         1d:0e:15:58:ee:e9:c0:12:8b:83:fc:68:85:d2:03:d5:7e:7f:
         c6:f5:12:08:5a:79:cd:00:04:c4:5c:0a:7e:93:ea:be:6b:8e:
         06:54:c3:28:8d:f4:b7:4c:b8:14:12:e6:61:14:e2:a7:25:0d:
         65:c1:6d:8d:78:5c:1f:d9:0f:c9:a3:62:8b:30:2b:44:f1:28:
         72:35:db:7b:80:00:52:2c:db:44:37:55:65:ad:43:bf:13:ee:
         7c:97:0e:cb:b2:b4:68:cb:34:98:3a:a9:55:7b:64:db:b9:f7:
         b1:cd:70:b1:34:6e:ec:64:52:27:a7:79:c5:f0:f7:f4:85:18:
         26:d4:88:8b:f7:86:78:fe:15:32:17:be:f5:c3:35:4c:ae:a6:
         a3:06:d0:f3:b0:38:b1:ff:c0:90:14:70:24:50:88:7a:8b:c7:
         93:15:48:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:26:33 2024 by rpki-client on console-ams.rpki-client.org