Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/834433f9-4064-35a8-b4c4-b71f23e18987.roa
File:                     834433f9-4064-35a8-b4c4-b71f23e18987.roa (raw, json)
Hash identifier:          pGMxXQUD/xpAbebHoQgVawXjgjZpcMi/XPlgbCwScXI=
Subject key identifier:   E6:86:0A:9C:F6:85:96:07:62:65:A8:66:D2:A6:56:F0:E0:16:E7:1F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1560B51CDD4E60D60E000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/834433f9-4064-35a8-b4c4-b71f23e18987.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     32871
IP address blocks:        98.100.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:56:0b:51:cd:d4:e6:0d:60:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=8c580403-5342-4b16-b726-0a1eafa8262d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1d:fc:fe:b8:2d:92:75:1a:9f:01:8f:81:dc:
                    e4:af:1e:5f:42:52:df:b1:2b:3e:ef:d5:fc:44:46:
                    bc:a4:87:4b:37:5a:62:2a:63:50:54:2e:41:ca:97:
                    23:46:b7:bd:ec:08:ea:17:1f:f2:bd:0d:a0:54:e2:
                    98:ef:9a:23:0e:09:67:b0:a1:9e:89:67:15:19:80:
                    52:ed:e6:ab:2b:bf:03:47:fe:b4:f8:78:d3:57:e3:
                    e0:85:ed:5f:b1:6b:f9:66:92:24:b3:75:b1:6d:cd:
                    0f:94:75:11:02:f5:48:37:aa:d8:99:b8:ee:15:8f:
                    da:65:77:8b:fa:33:7f:67:56:61:f6:e4:1f:df:41:
                    09:fc:24:e4:78:e4:7a:05:b4:1f:e5:73:c2:1e:90:
                    75:70:5f:fc:3e:b7:ed:1b:60:60:7c:d9:72:35:89:
                    90:87:79:05:f4:bb:42:13:bb:bb:3b:62:6c:0b:cc:
                    9e:74:d8:84:1b:da:27:b1:78:0b:64:dc:8c:8d:d3:
                    43:25:4c:e0:52:9a:3d:e0:d7:82:7f:74:3e:5d:db:
                    d0:64:4e:e2:92:bd:cb:2e:cf:92:c9:b5:e4:03:6e:
                    0e:43:ed:dd:61:f8:3c:75:17:a4:43:6f:f5:29:d4:
                    0c:c2:75:83:1e:a6:96:25:5f:d3:58:0d:f5:a5:13:
                    ac:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:86:0A:9C:F6:85:96:07:62:65:A8:66:D2:A6:56:F0:E0:16:E7:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/834433f9-4064-35a8-b4c4-b71f23e18987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.100.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:00:80:72:ff:ab:48:ef:85:8f:98:37:54:00:2d:4b:ae:e3:
         f8:c9:8c:ca:8a:6f:e0:b6:83:81:21:19:31:9a:2a:81:5a:70:
         78:0f:2c:e4:35:2c:1d:d5:aa:2c:00:ec:eb:9e:21:94:6d:be:
         dd:87:12:79:de:bd:9e:c6:68:30:bd:ea:14:b9:8b:80:3b:31:
         8f:be:a3:7d:d0:83:75:fe:d8:65:82:e8:e1:6a:1c:51:4a:93:
         d9:6a:25:e8:3d:d6:1f:1b:83:10:07:82:84:6c:91:1b:08:31:
         43:ca:e3:27:66:8e:c4:ac:30:3a:53:59:f7:ce:7a:ab:b3:3c:
         f0:1b:9f:49:46:7c:cb:11:00:e4:0b:3b:e3:2a:e4:5d:55:22:
         b0:21:a7:59:ed:e1:88:d6:04:85:52:a6:0d:fa:00:3b:b8:4a:
         56:1c:8f:b4:ba:43:0d:b1:f8:da:75:6d:43:b7:43:55:30:ec:
         b0:21:90:0e:f8:b8:44:d0:e5:ac:64:c3:68:c9:22:37:05:f6:
         50:68:bc:a6:f2:24:29:48:c1:09:d0:2f:23:94:88:8c:d9:5a:
         db:34:04:33:ec:36:bc:d2:09:b3:72:8f:ac:71:d3:84:01:a1:
         c5:d8:2a:03:23:57:1f:53:e5:99:04:62:1a:ac:78:28:a9:69:
         c4:4a:de:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:10 2025 by rpki-client