Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/365af671-70e8-3eaf-8a39-283942232e80.roa
File:                     365af671-70e8-3eaf-8a39-283942232e80.roa (raw, json)
Hash identifier:          1aeV6dXNsdVTRGyygVWke4mM8i2vYz/89+XnwNbYj/Q=
Subject key identifier:   24:DF:64:EB:CC:34:6B:DD:E9:A9:30:1F:0C:64:2D:3E:CF:EE:A1:8F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285839321918162CA2846DBECC2400
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/365af671-70e8-3eaf-8a39-283942232e80.roa
Signing time:             Tue 09 Mar 2021 05:00:00 +0000
ROA not before:           Tue 09 Mar 2021 05:00:00 +0000
ROA not after:            Tue 02 Mar 2027 05:00:00 +0000
asID:                     1437
IP address blocks:        98.100.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:32:19:18:16:2c:a2:84:6d:be:cc:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar  9 05:00:00 2021 GMT
            Not After : Mar  2 05:00:00 2027 GMT
        Subject: CN=c2a8a17c-cc97-422a-88a3-e251bcc8302c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ae:af:72:d7:d0:29:61:cb:51:7b:b1:6f:9b:
                    09:70:09:dd:2e:8d:66:32:2f:53:a9:1a:e2:2b:83:
                    ea:f5:f8:89:3c:54:d8:79:40:c1:63:c4:06:f8:08:
                    e5:36:bd:76:2b:77:3f:c7:9d:a3:99:51:9f:dc:ad:
                    19:c4:5e:80:94:ad:6e:47:92:d6:6a:ea:fc:c4:d3:
                    35:32:d7:7f:b0:99:87:03:17:1e:de:10:1b:c1:c4:
                    a6:8d:e9:09:58:00:e8:1c:a4:4e:e2:5a:d4:17:c8:
                    9a:e4:e5:37:8b:06:b5:b6:87:f7:65:72:59:54:48:
                    c1:e5:30:3b:4a:8e:19:17:56:90:7e:a2:c2:ca:b8:
                    01:41:91:0c:a3:36:fb:01:73:4b:e1:58:da:20:a2:
                    74:89:35:e5:f7:e3:68:6f:63:ac:83:73:ed:cc:7a:
                    3b:81:ef:25:a7:0d:68:46:eb:02:af:e5:ce:18:87:
                    da:64:3b:60:76:32:73:b1:12:82:df:0d:bc:0a:10:
                    49:75:f1:bd:f4:4c:fa:1f:28:98:0d:ba:d2:de:c3:
                    85:1e:64:35:c6:99:12:f5:a6:61:df:3e:52:27:b8:
                    4e:d6:ae:2b:d3:04:6b:da:3f:83:4c:41:20:09:f1:
                    fc:0a:e9:ca:36:f2:aa:d6:b3:14:53:68:e3:0c:6d:
                    87:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DF:64:EB:CC:34:6B:DD:E9:A9:30:1F:0C:64:2D:3E:CF:EE:A1:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/365af671-70e8-3eaf-8a39-283942232e80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.100.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:38:f9:13:0e:9f:c4:91:f1:5a:9f:6f:45:9f:54:00:d9:65:
         f5:c2:12:bd:d3:cf:3c:fa:f6:5b:7e:1e:1d:f6:59:91:27:3b:
         1f:c6:32:2c:26:1c:fe:c5:7b:9a:0f:f2:83:35:36:4d:3e:a7:
         7a:60:dc:31:1f:91:8a:e5:a5:b7:2f:68:de:35:ba:ea:a3:be:
         fb:47:a4:71:35:f9:25:27:22:a1:b3:91:89:b4:21:df:d5:e4:
         d9:a5:23:94:b1:77:3e:d8:44:48:b9:64:1b:1d:66:ab:b2:f1:
         ef:ac:fb:11:24:07:59:35:26:5f:e3:5e:44:6b:65:d8:73:d1:
         e7:3e:11:92:3a:b0:36:4c:8f:8f:62:9a:63:81:e4:36:7f:5e:
         b2:4b:33:57:46:8e:09:a8:b8:f0:2d:e6:f1:a8:e9:2d:b3:41:
         df:d0:bf:75:39:46:cf:bf:00:31:8c:fa:fd:2f:03:2e:e4:49:
         5d:31:08:e8:72:f1:6f:a7:8a:3c:4c:dc:29:80:f0:7f:dd:06:
         ab:2c:1d:61:25:f1:5d:ed:0b:92:3a:b7:d5:1f:8b:a4:8a:cd:
         3e:0c:6a:7c:65:10:83:2e:88:7e:08:ac:74:1a:6a:ee:06:45:
         c4:f1:8f:d4:db:b3:e0:9f:72:ea:9c:33:72:62:18:39:bd:7f:
         b4:5c:9f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:17 2024 by rpki-client on console-fra.rpki-client.org