Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2b6b494-eb13-38ba-b2f0-a0712ebe0784.roa
File:                     f2b6b494-eb13-38ba-b2f0-a0712ebe0784.roa (raw, json)
Hash identifier:          aBO1CvLMsphOt/96W56i+Kl6YS0in+9W6Izt6ygKfUE=
Subject key identifier:   08:D0:86:5B:3C:80:0E:EB:42:1D:44:A4:D4:2C:30:8C:4D:30:06:82
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F50F458329902104ECDC00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2b6b494-eb13-38ba-b2f0-a0712ebe0784.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     15169
IP address blocks:        34.98.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:0f:45:83:29:90:21:04:ec:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=4bcf9a45-bc5b-41c3-939d-b32e0cc9e2aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:43:03:fd:37:ef:b9:4a:a8:4b:6c:1c:94:eb:
                    2f:d3:42:68:d9:e3:74:e6:2d:c2:fd:ad:c7:78:2b:
                    cf:f4:b6:7c:65:b6:38:8b:95:1d:e5:2a:e2:be:26:
                    32:2f:93:b8:9a:b7:be:d8:cf:89:ff:0d:5e:a3:51:
                    63:cd:85:77:66:5d:c0:04:d1:e5:61:96:8e:ef:c9:
                    bd:5d:04:97:58:ac:84:e1:d2:a4:23:c4:ad:af:55:
                    7e:18:74:3a:b9:5d:99:61:5a:15:4f:13:8a:fc:d1:
                    db:a5:c2:bd:9e:e8:05:6c:75:68:aa:1b:5f:2b:28:
                    9d:11:7f:66:bf:83:91:e9:ea:de:2b:ef:5b:48:02:
                    f5:ef:00:8c:58:8b:0f:e4:7f:2f:bc:f4:1e:9a:b6:
                    68:92:e6:e8:7d:fa:19:bb:1a:e2:ab:95:00:1e:74:
                    29:a3:40:3b:41:c8:aa:07:aa:5c:db:2b:0a:45:47:
                    ab:ba:5a:fd:ab:23:b2:2d:95:f5:30:64:4d:84:de:
                    fe:70:73:e0:cc:98:a3:d0:ea:d0:da:16:8d:d8:db:
                    1b:f1:90:14:94:73:da:7f:2c:6d:2b:74:76:19:bb:
                    63:99:3d:bb:4a:82:b1:8c:5c:45:3d:83:f4:95:68:
                    7d:c3:1e:b3:86:77:46:ba:bf:79:77:d6:25:9e:aa:
                    c8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D0:86:5B:3C:80:0E:EB:42:1D:44:A4:D4:2C:30:8C:4D:30:06:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2b6b494-eb13-38ba-b2f0-a0712ebe0784.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.98.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:ce:fa:5f:69:ba:45:d7:10:c6:ee:54:b2:d9:95:1e:c7:cd:
         ad:99:07:e2:17:c4:a2:dc:01:97:8b:72:bf:dc:dd:ba:e8:6f:
         6c:f3:72:27:4e:f8:dc:39:60:f5:27:a5:d6:d6:c1:c9:40:a4:
         cd:8d:1c:87:c7:94:8c:a9:8a:13:7e:fb:09:61:ad:1b:d7:1e:
         0c:62:a2:9c:af:d2:c3:95:5e:8a:6c:0c:65:e9:b4:67:36:b1:
         77:c3:53:b9:11:09:cf:ed:57:19:1d:18:f3:ad:8a:fd:4a:2f:
         14:cc:5e:f7:79:54:06:05:26:aa:1f:3d:67:8c:2c:84:00:59:
         f7:a1:c6:db:f7:31:c3:57:bd:2c:de:cb:91:09:55:66:53:7d:
         50:8f:13:28:df:80:0f:79:34:a6:78:6b:87:78:6d:d5:f8:07:
         cc:68:6b:ce:a7:07:00:38:3e:f7:5f:cf:ff:55:4d:8d:a9:c2:
         5c:58:15:a6:73:cd:c1:70:89:22:17:d9:df:ee:14:12:f0:8b:
         d8:c9:29:86:64:d5:b1:bc:ed:ff:f9:58:64:b2:f4:64:c1:bd:
         e6:45:84:23:b8:95:d0:2d:c4:35:58:ca:34:72:5f:b0:e5:69:
         77:da:29:a3:e7:21:95:e7:f5:45:a3:cf:16:f2:2c:ce:3d:33:
         94:a0:f7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:47:56 2024 by rpki-client on console-ams.rpki-client.org