Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/be01f04d-6e9d-353e-94d2-eede5c61a862.roa
File:                     be01f04d-6e9d-353e-94d2-eede5c61a862.roa (raw, json)
Hash identifier:          jUOtrWtebkwBz28E6MeLVzgNGgZzYEXMlrtRWgzz478=
Subject key identifier:   18:D6:9B:14:30:BA:73:65:E1:93:AE:EF:A5:9E:EF:B8:FE:2C:79:A1
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0C367D851962D41D45500
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/be01f04d-6e9d-353e-94d2-eede5c61a862.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     395063
IP address blocks:        98.100.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:c3:67:d8:51:96:2d:41:d4:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=a2b9acba-ebf6-4a7d-b55c-fcba2734c1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:12:7e:55:e1:91:fb:fc:ce:d5:84:ed:67:ba:
                    64:e7:10:b8:07:0d:2c:e6:e7:f6:98:c5:0d:b9:1f:
                    71:24:d6:38:79:31:f4:b0:61:08:32:f0:69:a0:b1:
                    af:81:77:c4:21:e8:08:4e:86:7c:76:fb:11:6c:66:
                    b0:61:72:de:04:9b:5d:ab:7f:6b:bd:81:d4:18:81:
                    5f:b2:5d:61:b3:78:1f:ac:50:1f:59:b7:f5:95:55:
                    93:33:94:be:b5:bb:57:d6:23:90:a0:3d:f0:c5:68:
                    a5:3f:19:ae:10:a5:ef:36:b1:fc:ed:91:16:95:37:
                    0c:d5:a9:88:b1:0c:aa:36:99:a1:23:f8:a8:55:a6:
                    a5:d5:68:e9:d8:ce:de:19:13:10:85:95:20:c9:c3:
                    dd:3f:97:d1:8d:38:e0:85:c2:91:e8:1e:07:21:94:
                    69:80:67:10:fd:eb:29:d5:9f:e1:d7:6f:31:39:b7:
                    cd:78:2c:91:13:0a:4b:e3:ce:f3:72:01:7f:3a:a2:
                    45:07:ae:66:7f:bb:bb:3a:b7:1d:b0:b4:1a:51:45:
                    9e:18:c4:83:a5:14:70:ac:b3:cc:4f:96:9a:fa:40:
                    05:de:c9:2a:35:a6:ab:ff:74:83:f8:1c:81:1f:80:
                    d1:06:b3:50:0a:87:2d:eb:32:91:9d:c0:b1:4d:40:
                    8f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D6:9B:14:30:BA:73:65:E1:93:AE:EF:A5:9E:EF:B8:FE:2C:79:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/be01f04d-6e9d-353e-94d2-eede5c61a862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.100.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:3b:d4:ac:35:29:3d:48:41:c9:8b:be:4a:a9:ef:a1:21:27:
         b3:7e:89:7c:43:9b:92:ad:6e:f3:b8:c3:b6:58:97:be:72:f6:
         3b:15:07:a3:3c:9f:97:69:c1:74:17:49:d9:a4:e1:27:1a:98:
         81:51:36:b8:0a:84:42:87:b2:41:be:39:1c:05:d4:a3:8e:a1:
         16:cf:dd:cf:f1:f2:79:af:46:05:25:ba:a9:b3:d8:65:60:58:
         c4:15:93:e4:46:ef:9a:b1:dc:50:4b:a7:54:1d:c6:9b:5c:7b:
         53:c5:f7:f5:02:47:01:dc:da:d2:e9:92:95:c9:e8:54:3f:70:
         35:4a:04:60:43:a6:d7:f4:11:86:7c:f3:25:2d:31:e8:91:35:
         8d:22:54:f8:69:ac:7b:4f:da:51:a5:b0:75:c4:aa:89:f7:24:
         a9:2a:e5:21:ec:98:dd:08:18:95:7d:03:a8:34:b9:47:f1:3a:
         c0:49:75:f8:4a:84:ff:19:f8:10:0e:b5:68:d6:13:30:d9:f2:
         e0:e0:10:3c:0f:4c:7d:3f:13:ce:39:e2:39:67:ce:60:b2:84:
         90:dd:cb:24:88:b7:43:75:44:6e:d5:b4:cc:1b:31:1f:a5:7f:
         4a:4d:ad:96:c5:5b:b7:e7:71:a8:85:9e:06:1f:0b:2c:bf:28:
         1e:c9:2f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:36 2024 by rpki-client on console-fra.rpki-client.org