Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/47809767-bb08-3089-bbe9-3b60de5a21d5.roa
File:                     47809767-bb08-3089-bbe9-3b60de5a21d5.roa (raw, json)
Hash identifier:          PrDzyrcT+y+jBxHbyEgHndnLz17qJaw8mjVR2xsHBcw=
Subject key identifier:   32:0C:9A:F3:CB:3F:FC:3F:01:4F:3C:B0:57:CA:1A:70:BB:94:C3:E1
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A131C7CC9F2824A947D900
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/47809767-bb08-3089-bbe9-3b60de5a21d5.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11427
IP address blocks:        98.120.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:31:c7:cc:9f:28:24:a9:47:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=44384a4f-6e6a-4ce9-becc-35550276943f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3f:e6:87:76:44:38:99:9e:6a:bb:73:8c:67:
                    5f:16:fd:13:21:a1:d9:1c:13:db:49:51:45:43:f1:
                    5f:40:16:0a:39:09:1e:48:bc:04:3d:6a:7e:63:bb:
                    3d:3f:8b:17:ba:00:4f:26:f4:06:91:73:38:90:f4:
                    a6:c8:8b:53:98:e2:01:b5:fe:33:5e:3b:2f:52:5c:
                    06:6b:86:e9:33:27:b5:fa:11:8c:2b:ed:b1:b1:4b:
                    ea:fe:21:ac:06:02:78:60:63:27:fa:7f:14:ad:51:
                    cc:00:65:a4:a0:1c:20:85:eb:10:4b:6b:94:d2:8c:
                    28:cb:27:76:a6:6c:9c:17:7e:86:9c:6e:49:9c:35:
                    e6:a0:30:52:8e:ed:38:9d:a8:73:28:d2:5f:ca:b1:
                    8d:4b:63:6d:38:d9:bb:6e:0a:43:5a:c7:fa:bf:a4:
                    a5:a6:d8:3f:d5:8c:9c:ef:87:d8:7c:31:3f:23:a2:
                    f2:b0:60:04:56:07:c8:53:d4:1e:ed:66:7e:89:66:
                    19:c5:ca:77:f7:25:20:42:e3:39:d7:a1:17:98:73:
                    11:82:b4:3f:22:ec:f6:a9:b3:0f:af:26:d5:da:57:
                    e8:af:54:2c:a8:e1:0d:98:52:62:d5:58:ae:23:fa:
                    ec:62:05:06:f7:07:f6:81:0f:30:d4:c7:37:f8:be:
                    ea:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0C:9A:F3:CB:3F:FC:3F:01:4F:3C:B0:57:CA:1A:70:BB:94:C3:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/47809767-bb08-3089-bbe9-3b60de5a21d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.120.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:7e:3c:72:4b:88:ea:5b:86:de:e5:47:2a:39:64:39:8d:f2:
         13:5a:4a:24:82:3e:c0:51:ba:79:f6:25:20:1f:da:28:e2:59:
         23:1b:06:98:af:44:44:8e:e1:a3:e8:c0:f1:b9:9a:6b:4d:3b:
         d3:9d:4b:30:d5:23:c0:e4:5d:a4:08:9c:f7:02:3b:73:59:52:
         c2:dc:20:2e:b9:4b:60:ac:0a:44:e7:ea:21:58:70:a9:0c:26:
         20:9e:e8:0b:6f:fb:97:76:74:65:12:e8:9d:ab:6c:9b:4b:67:
         d5:9f:4e:7f:6d:d2:4d:c3:cc:a1:fe:13:d0:4e:37:e4:63:ca:
         a7:87:ac:be:79:69:79:fa:a7:e0:27:63:ff:94:13:78:e0:77:
         b2:70:3d:70:4c:93:ed:65:9e:40:ff:59:6a:1b:49:a3:7c:a0:
         37:0e:27:84:4d:bd:f5:61:30:fe:de:55:91:b9:67:86:ad:4d:
         6f:e8:06:2f:12:61:43:d4:0d:f7:bb:a6:27:ad:ec:81:fb:40:
         9e:4f:4b:ce:26:72:d9:2d:c3:20:5c:3c:8c:1c:a4:6b:5a:85:
         31:69:17:14:2f:68:34:41:87:37:5a:d7:c9:6b:e3:84:2d:57:
         91:c0:82:11:dd:f7:37:93:16:0f:ae:4f:fb:9f:90:97:80:9b:
         c1:68:75:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:26 2024 by rpki-client on console-fra.rpki-client.org