Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/8d064462-bf46-323c-b0a9-9ed60e7bb138.roa
File:                     8d064462-bf46-323c-b0a9-9ed60e7bb138.roa (raw, json)
Hash identifier:          ipdr9sGwAsc5AkqXLstt0aqtQ7ao6aJNDdaUspzk/8U=
Subject key identifier:   27:8D:74:0B:5F:4E:F6:0F:A1:8A:5E:57:37:F2:86:02:83:AF:DB:2A
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F43285847362B517F6B2917ACFB079300
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/8d064462-bf46-323c-b0a9-9ed60e7bb138.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     31898
IP address blocks:        64.39.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:51:7f:6b:29:17:ac:fb:07:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=b0faee2e-4bf6-459a-9b2f-df7e9d2b385b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c4:97:cc:d4:45:d8:a4:a0:87:34:05:72:c9:
                    44:02:3a:d1:b3:85:8a:40:96:c6:e6:01:56:ca:91:
                    65:01:ee:09:7f:8d:7e:66:36:9d:46:0e:29:89:52:
                    fc:fc:4a:a6:68:e8:2a:35:db:5e:00:1a:01:25:bd:
                    bb:76:aa:44:16:bf:d4:ea:77:01:14:f7:d3:bd:08:
                    d4:91:dd:e1:7c:7b:c1:d0:36:e7:85:a7:16:18:e3:
                    93:3e:b6:aa:df:33:9e:64:da:15:4e:6e:40:f7:d3:
                    a8:8a:14:3a:22:1e:df:53:06:8e:ce:a9:29:ad:b3:
                    f7:75:eb:25:b0:82:56:4f:e1:4f:13:a3:bd:a7:ac:
                    26:08:4c:9a:64:d5:53:ee:af:05:0e:6a:35:8e:32:
                    a2:de:d0:90:32:3e:f5:c2:ba:90:1b:a7:4d:6a:7f:
                    c3:dc:45:03:84:3b:ed:87:6a:eb:8b:c8:fe:bb:d6:
                    26:d2:7d:36:b0:57:96:29:5c:b4:e0:e8:26:1c:ba:
                    ce:26:1d:a6:aa:52:0c:bb:e5:e1:5e:7e:02:28:ba:
                    69:24:21:c4:d2:ab:97:27:e6:bd:5f:82:7b:2d:26:
                    48:03:37:6d:42:0d:97:19:47:04:2b:13:35:5c:a3:
                    e7:b9:52:91:3b:2d:28:df:b0:c4:88:74:84:0f:cd:
                    e0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8D:74:0B:5F:4E:F6:0F:A1:8A:5E:57:37:F2:86:02:83:AF:DB:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/8d064462-bf46-323c-b0a9-9ed60e7bb138.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:3f:15:f2:0e:22:45:d0:20:7a:15:f6:b0:3f:cd:8b:07:d2:
         46:2c:f2:6d:ef:85:d6:54:17:75:55:34:60:2e:ff:d4:ff:00:
         12:c6:f6:29:59:01:0d:48:ce:5e:7f:c2:ea:87:5b:ec:d9:93:
         be:85:96:75:f8:02:f6:ee:bc:66:14:1d:c4:2d:5e:67:1f:38:
         b2:a1:b6:6c:b2:cb:29:c4:f8:38:20:b1:ff:0e:34:48:4d:de:
         2e:9d:9b:ee:58:00:9a:be:dd:7a:79:4f:1f:d0:ba:a9:21:8f:
         65:c2:c0:ed:c9:6b:04:44:cf:a5:27:1f:b7:1c:a3:ec:9c:a2:
         6a:7b:83:1e:08:64:81:67:19:b9:70:26:e3:56:89:23:d8:0e:
         7d:73:f7:48:2e:61:aa:36:6d:2f:33:6f:2c:de:c5:3a:16:b2:
         e7:b3:ca:3e:a8:c1:1f:da:cf:9e:63:ca:d5:d8:12:14:78:69:
         22:70:19:7b:ca:13:48:50:ea:a5:f7:cf:35:e7:26:c3:7e:5f:
         3e:fc:6b:4f:b9:38:cc:11:f1:d6:bf:ef:2f:af:32:8b:e1:e2:
         1a:59:7c:b7:44:01:a7:d2:9b:e4:ed:7e:72:cf:9a:d3:ab:58:
         22:88:ed:29:57:23:c1:b0:9c:c7:d4:07:9a:29:5e:96:6b:db:
         1c:01:98:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:49 2024 by rpki-client on console-fra.rpki-client.org