Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/98f3ab2d-e59b-3e39-9812-0e051f9d6e4d.roa
File:                     98f3ab2d-e59b-3e39-9812-0e051f9d6e4d.roa (raw, json)
Hash identifier:          qCoorfvuJLSi2r/s7/UkBgyeq+ouaL4ec5WSe1qBkHw=
Subject key identifier:   95:01:73:88:97:75:5A:DB:3F:BD:A1:61:B4:FE:ED:BA:96:A4:C8:5A
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F43285844F46558FA096C8F0D9D556980
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/98f3ab2d-e59b-3e39-9812-0e051f9d6e4d.roa
Signing time:             Tue 20 Feb 2024 14:00:31 +0000
ROA not before:           Tue 20 Feb 2024 14:00:31 +0000
ROA not after:            Mon 20 May 2024 13:00:31 +0000
asID:                     7922
IP address blocks:        198.37.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f4:65:58:fa:09:6c:8f:0d:9d:55:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Feb 20 14:00:31 2024 GMT
            Not After : May 20 13:00:31 2024 GMT
        Subject: CN=8a9f39a7-054f-47c9-890a-62422e74dfe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ed:f5:a8:75:e8:d9:91:94:e4:61:a1:04:9d:
                    73:45:b8:00:3b:8c:7c:90:10:af:f9:61:95:b1:2e:
                    f5:65:28:3f:39:87:a1:68:44:11:e4:c0:bc:3b:8a:
                    ca:a5:bd:f4:fb:a2:7c:b5:1f:39:e8:9b:f6:93:fd:
                    8a:5c:5d:e8:36:e7:14:62:8d:49:b8:7f:ba:ed:ee:
                    1a:95:e6:11:67:f2:ee:a8:34:fd:e2:51:86:c1:e4:
                    61:a6:dc:b9:1a:ed:1f:03:2e:57:6e:b1:f8:5f:36:
                    5f:67:ac:86:ab:be:e2:67:75:2b:0c:b0:e0:84:fd:
                    95:49:f8:c5:88:58:a7:d1:de:53:04:2f:a2:26:64:
                    c6:f3:40:48:8c:af:ff:3a:c8:7c:00:9f:02:9f:05:
                    ce:ce:72:48:b3:3a:46:74:d4:67:ec:f7:a2:cc:20:
                    34:d7:65:0e:3f:1b:5b:19:57:53:d7:7a:b1:da:b7:
                    b8:a3:2d:81:15:22:76:86:db:71:37:c0:47:ee:4e:
                    53:fd:a7:df:2b:32:75:b9:63:ea:11:56:24:24:14:
                    ad:fd:e5:4d:42:29:59:40:e5:94:31:c6:6e:5d:75:
                    e2:98:86:42:43:70:75:8d:87:2d:79:88:4d:d3:fe:
                    36:2f:7e:79:2f:dd:d7:70:de:ab:38:67:e1:43:1f:
                    c8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:01:73:88:97:75:5A:DB:3F:BD:A1:61:B4:FE:ED:BA:96:A4:C8:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/98f3ab2d-e59b-3e39-9812-0e051f9d6e4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:98:e9:1c:2d:fc:df:ff:e7:48:bb:8f:e6:e8:bd:0d:e8:16:
         5d:15:e9:42:4a:b4:47:30:bb:36:01:b1:c7:35:9c:91:dd:d2:
         20:c9:88:5f:e2:b8:c1:4f:fa:0b:d4:f4:22:10:ab:ab:b7:6b:
         82:67:b0:55:25:d3:fa:31:6c:a4:59:29:eb:25:fd:a3:63:94:
         73:f2:bc:26:b9:59:41:6e:69:06:64:60:28:6c:ee:90:67:25:
         39:05:22:08:a9:82:f7:44:8e:74:cd:50:06:2e:6d:1c:07:f4:
         c7:d3:45:14:8d:4a:26:aa:85:f2:07:a7:10:95:96:c1:42:2b:
         a3:b4:ba:25:e5:26:aa:f6:e4:be:f5:3b:2e:62:e6:c8:9e:2d:
         6e:18:22:e8:aa:5d:23:5b:12:23:98:1d:e1:9c:12:41:b3:98:
         73:5f:84:86:5c:99:af:ee:56:28:38:39:6e:d0:42:3a:4d:8c:
         40:dd:56:e5:70:02:05:52:76:79:da:d1:28:06:2a:6d:23:42:
         b7:59:ae:46:2e:7d:31:30:ff:44:8b:ba:1c:30:7f:19:91:f5:
         7e:bb:c6:e3:e7:c7:b9:a3:09:41:9a:d5:63:99:46:3a:85:cd:
         57:72:94:01:6b:c3:da:e6:54:14:7b:aa:2a:94:1a:f3:92:09:
         91:e4:a0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:34:40 2024 by rpki-client on console-ams.rpki-client.org