Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ab937801-47ae-326b-ad2f-b21338b64419.roa
File:                     ab937801-47ae-326b-ad2f-b21338b64419.roa (raw, json)
Hash identifier:          8SlzhZr6nfjateNb+iFx1fEWYfGkm1z8gRMrxLxvdF8=
Subject key identifier:   8B:CE:22:43:EF:FA:E2:B3:F8:0E:45:6D:6A:F9:6A:18:67:8F:6E:55
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285838AC12F677412339BF70D18D20
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ab937801-47ae-326b-ad2f-b21338b64419.roa
Signing time:             Wed 20 Jan 2021 05:00:00 +0000
ROA not before:           Wed 20 Jan 2021 05:00:00 +0000
ROA not after:            Wed 13 Jan 2027 05:00:00 +0000
asID:                     10796
IP address blocks:        98.123.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ac:12:f6:77:41:23:39:bf:70:d1:8d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jan 20 05:00:00 2021 GMT
            Not After : Jan 13 05:00:00 2027 GMT
        Subject: CN=3a970a3b-06a8-4400-8b7a-5e53b84f0c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e1:06:7e:08:42:bf:3e:77:c4:71:24:af:3a:
                    2f:38:99:66:d4:4e:2f:40:2a:76:23:65:70:96:8e:
                    00:62:a8:a8:24:04:53:c6:f5:57:4e:b9:d3:16:c6:
                    f6:b7:06:0f:cc:54:63:29:88:61:f6:3f:f8:8d:6e:
                    20:d2:d6:85:03:4d:4e:ab:07:57:66:f7:1d:a5:cd:
                    a8:0d:92:6e:5e:89:f1:f7:3d:c3:3b:ca:33:27:3e:
                    53:2d:b8:91:a6:0b:cb:7c:c9:64:c2:f7:fc:4f:5a:
                    47:e6:57:d4:71:78:c0:d1:c4:85:45:c5:25:38:4a:
                    12:0a:f6:16:23:c1:d9:ac:05:5a:12:3f:80:68:38:
                    88:89:f2:2d:0f:aa:e6:aa:1d:18:2b:cc:54:31:54:
                    f2:4f:05:ee:8a:4f:46:20:de:37:17:f9:22:d8:14:
                    1e:07:16:e8:cf:c7:b6:86:8b:44:3b:50:61:0c:f9:
                    75:e8:7a:8f:c5:e1:46:99:43:30:b8:f2:d1:b1:57:
                    3b:38:63:e5:d4:b7:b0:4d:d9:7a:78:2f:a2:35:f2:
                    d7:c5:c6:79:28:be:a5:6a:c5:d2:c5:e2:88:85:94:
                    92:12:75:dc:ad:16:41:63:02:a5:bb:8f:a1:63:70:
                    cd:6f:75:b4:59:e9:0d:e2:2a:85:d6:c6:a8:c1:d4:
                    89:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CE:22:43:EF:FA:E2:B3:F8:0E:45:6D:6A:F9:6A:18:67:8F:6E:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ab937801-47ae-326b-ad2f-b21338b64419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.123.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c0:27:63:3f:18:08:41:3c:b5:6a:b7:1d:ab:44:fc:6c:0a:
         a1:3d:c8:18:3c:3c:de:2f:90:34:46:11:d4:c7:39:33:f4:fe:
         2a:a2:fc:0b:41:03:95:46:f2:d6:49:51:b3:a4:58:26:d5:24:
         ee:12:61:a5:be:e2:1f:38:f9:5a:bd:4c:df:f4:f8:e7:50:62:
         88:30:fb:62:56:f8:df:b9:39:51:fd:d0:6f:f4:02:2b:b6:dd:
         ec:5d:05:12:d2:4a:3c:0d:1c:66:60:7a:93:d4:48:6a:d0:74:
         81:ed:65:2a:13:19:8a:fa:a4:70:de:2c:0c:c9:1f:48:5f:a8:
         b3:26:e5:97:c2:b8:20:43:c0:2f:6f:7e:14:69:56:27:31:af:
         f3:25:34:1a:95:1a:b0:78:0b:a9:cc:c8:05:70:80:c3:13:1a:
         0d:42:bb:f5:4d:7e:ac:5f:28:4d:e0:11:31:f4:55:80:f1:7f:
         87:4b:52:99:83:ad:9f:c0:b9:17:53:ba:50:c7:ec:9a:9d:43:
         ed:78:c5:6a:12:71:13:27:aa:ed:80:91:4b:f4:b4:09:60:c7:
         41:1e:8e:ae:b6:08:f3:dc:bc:70:a8:1d:c5:39:2c:f2:d6:5a:
         82:a5:3f:0f:69:ac:af:3f:89:90:da:57:26:a2:c8:5b:e3:81:
         03:a5:5e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:04:15 2024 by rpki-client on console-ams.rpki-client.org