Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/43d8e509-b533-3e4c-91b5-35259acec549.roa
File:                     43d8e509-b533-3e4c-91b5-35259acec549.roa (raw, json)
Hash identifier:          TJt7xSlWTLUz2a4Ewoeg5N65c7Sa4+140hu2jqbFkj4=
Subject key identifier:   AF:ED:8B:F4:57:F0:6A:08:1B:16:A1:FD:86:87:29:D7:27:25:A6:E9
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E6169D71A34843F0C5B40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/43d8e509-b533-3e4c-91b5-35259acec549.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     11427
IP address blocks:        98.156.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:61:69:d7:1a:34:84:3f:0c:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=ef7ffe6a-6307-4044-8b69-d98907273a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cc:19:38:b5:87:ef:27:97:62:d2:7d:a8:27:
                    ad:ec:33:f2:d1:9d:16:36:64:f9:7f:54:8d:17:e0:
                    66:43:13:b8:3d:1e:e2:14:dd:65:fd:64:9e:87:d0:
                    41:e5:56:97:b2:40:76:6b:36:f8:c3:b2:07:96:ce:
                    ac:ef:d7:13:7b:eb:53:4f:32:d7:0b:83:d4:f7:d8:
                    62:d2:f2:40:76:5c:89:40:76:01:57:08:e5:fd:36:
                    c5:ba:b5:f1:98:f0:79:61:8f:2b:07:98:d2:d9:76:
                    7e:1e:d9:ff:e2:31:53:af:ea:23:7e:b0:d2:bd:06:
                    a6:e0:89:13:0f:8f:93:6a:17:18:74:2f:7d:16:d2:
                    b1:18:9b:d8:45:18:75:1e:71:ca:ee:34:25:ac:1f:
                    72:9e:d4:c8:5d:b4:eb:fb:6a:b4:52:82:89:1f:db:
                    b7:07:1c:5f:c4:ce:90:b3:2f:71:f6:5e:4c:fc:7d:
                    17:88:61:48:62:f1:dd:c1:af:91:02:93:5d:a6:11:
                    f5:2d:fe:ed:23:b9:8f:a3:6a:79:e2:fb:ce:45:38:
                    92:77:f7:93:ae:14:01:51:82:34:89:25:ad:41:34:
                    52:5b:af:a5:96:0b:72:d0:87:c7:4f:c0:c9:1d:ff:
                    17:91:ee:5f:b3:8c:93:04:ce:1a:29:f6:63:22:83:
                    1c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:ED:8B:F4:57:F0:6A:08:1B:16:A1:FD:86:87:29:D7:27:25:A6:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/43d8e509-b533-3e4c-91b5-35259acec549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.156.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:f9:af:09:4d:72:e6:f6:da:fd:3c:c4:8a:e9:c8:d9:d4:4b:
         5b:55:45:f4:60:48:80:9b:2b:e9:61:51:8f:15:f3:bf:e0:e1:
         68:6e:bb:ff:ad:61:e7:25:9b:ed:23:a5:e6:59:3a:cc:b8:47:
         fb:b7:87:7f:e0:5f:0f:3d:13:f4:7e:4c:ef:54:14:72:22:c4:
         4f:63:c0:ff:fa:c0:ed:5f:8e:01:d1:4b:85:ed:6d:cb:b1:31:
         3a:0f:85:85:ef:2e:85:40:e0:09:80:f7:56:95:25:88:cc:f6:
         3a:74:cb:61:80:d9:87:07:2c:0e:09:53:c5:fb:ff:3e:0d:7e:
         3a:34:c1:5f:75:24:e1:95:72:ed:a3:47:bf:7f:63:58:cb:69:
         07:0e:4e:30:dc:2c:df:2d:cb:76:bd:ba:3d:8b:a5:e0:d4:ef:
         5a:19:90:e1:67:03:2e:5e:aa:43:78:61:cb:71:1b:9b:ed:b2:
         39:1d:24:02:35:be:53:95:f0:59:38:c7:9d:8d:c6:b9:ba:2d:
         a6:9b:6a:c3:44:cc:35:20:0f:f4:5f:c1:3a:b7:c0:12:6b:30:
         0b:c7:e2:33:f0:c9:2e:5e:e0:b6:59:8c:1d:48:39:85:25:9d:
         50:28:8a:11:64:95:2b:24:67:56:02:9d:a2:62:21:8e:43:51:
         9a:c7:f8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:26:37 2024 by rpki-client on console-ams.rpki-client.org