Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa
File:                     416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa (raw, json)
Hash identifier:          h2D/R6o7IXpEz4CJX/LPj4Z/Yk3WIImHGjm0pBhTxeI=
Subject key identifier:   BA:0F:D4:1E:F3:1F:DF:08:AF:E9:59:1F:DD:1B:57:2A:13:1A:D5:52
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285844EA9FF14ADACEF46A0F10EEE4
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa
Signing time:             Sat 17 Feb 2024 02:00:27 +0000
ROA not before:           Sat 17 Feb 2024 02:00:27 +0000
ROA not after:            Fri 17 May 2024 01:00:27 +0000
asID:                     1239
IP address blocks:        172.98.189.0/24 maxlen: 24
                          172.98.167.0/24 maxlen: 24
                          172.98.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Apr 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ea:9f:f1:4a:da:ce:f4:6a:0f:10:ee:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Feb 17 02:00:27 2024 GMT
            Not After : May 17 01:00:27 2024 GMT
        Subject: CN=1e974af4-754d-455f-b71e-4755e6329356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c6:f5:0c:6b:52:70:af:67:f7:f5:e6:61:79:
                    19:47:d9:46:c8:3b:f7:31:41:e6:24:0d:1d:f4:57:
                    99:7f:c0:f9:47:d7:c6:89:c3:7f:bd:14:9b:84:c3:
                    87:b1:69:03:ec:e7:28:fe:db:38:06:68:4c:2c:84:
                    88:6b:c1:21:f4:58:46:34:2a:af:fd:dd:cd:8a:60:
                    82:0d:90:d3:65:7f:01:a7:53:a0:bd:66:02:15:10:
                    5b:42:d3:80:70:8b:00:85:4b:7f:e2:a8:b7:22:21:
                    f7:fe:b3:42:1a:ff:b1:d6:d3:e8:56:ea:8a:39:55:
                    d7:21:e6:87:7e:d2:82:06:35:2b:84:fe:63:d8:19:
                    7c:3e:23:c2:53:5c:db:da:4e:88:64:7f:ff:3a:7b:
                    24:f4:21:64:7f:54:95:1b:a5:23:3b:0e:99:c3:43:
                    aa:be:3b:91:45:63:c3:f2:df:75:2e:ed:0a:b6:f8:
                    42:12:3f:f4:b6:ba:7b:5d:b7:73:74:1f:d9:b4:26:
                    d6:ab:90:c7:77:d5:51:b0:78:4d:13:02:49:3a:51:
                    ad:48:c0:d1:ce:9e:0e:2e:aa:90:d1:b6:b3:7d:5c:
                    87:37:12:91:30:37:bd:76:04:5b:6e:5d:1a:46:5c:
                    68:ac:7c:2c:53:86:d7:bd:e5:7f:42:96:83:12:64:
                    bd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0F:D4:1E:F3:1F:DF:08:AF:E9:59:1F:DD:1B:57:2A:13:1A:D5:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.161.0/24
                  172.98.167.0/24
                  172.98.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:20:d4:8e:c3:f0:25:52:ba:df:87:3e:30:c2:3c:83:e2:3d:
         35:2b:61:5b:b6:02:1b:06:5d:0c:d9:11:16:ef:5c:0f:12:39:
         e7:52:b8:da:3a:9b:c1:25:7f:e5:35:8c:63:05:a1:f2:29:88:
         9c:0d:6c:01:f1:8b:d9:ea:26:e7:66:8e:2a:57:41:31:4d:e0:
         a5:8b:a8:b1:95:47:75:31:5f:07:e6:db:7c:6d:3a:5e:5c:44:
         48:f6:11:a2:9d:b4:f3:47:dc:f2:b9:35:17:96:8e:02:d1:cc:
         8a:28:31:21:7d:b2:68:5a:4c:4e:97:5f:11:33:16:cf:af:47:
         30:f6:64:81:c0:59:1b:f7:10:82:53:45:24:38:1a:30:ba:8c:
         29:55:fa:a0:1e:38:d3:c8:39:54:f6:b3:67:cc:fb:55:c5:13:
         13:fa:d7:f5:1d:21:4a:76:8f:b2:09:d2:8c:f2:40:f6:7f:ce:
         ab:76:39:20:b7:e1:a9:20:5f:bb:14:59:4c:10:86:09:94:46:
         96:25:96:14:8a:6b:6a:8c:ea:09:96:bc:cd:17:ea:e6:45:95:
         5f:00:9d:7e:15:0a:2b:7e:3e:7c:5b:fe:4d:b8:dd:63:7a:dc:
         a9:13:b0:1e:6a:15:ec:4d:15:e9:d7:c8:50:cf:bd:46:bb:e8:
         16:cb:18:ca
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWETqn/FK2s70ag8Q7uQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI0MDIxNzAyMDAyN1oXDTI0MDUxNzAxMDAyN1owLzEtMCsGA1UEAxMk
MWU5NzRhZjQtNzU0ZC00NTVmLWI3MWUtNDc1NWU2MzI5MzU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcb1DGtScK9n9/XmYXkZR9lGyDv3MUHmJA0d
9FeZf8D5R9fGicN/vRSbhMOHsWkD7Oco/ts4BmhMLISIa8Eh9FhGNCqv/d3NimCC
DZDTZX8Bp1OgvWYCFRBbQtOAcIsAhUt/4qi3IiH3/rNCGv+x1tPoVuqKOVXXIeaH
ftKCBjUrhP5j2Bl8PiPCU1zb2k6IZH//Onsk9CFkf1SVG6UjOw6Zw0OqvjuRRWPD
8t91Lu0KtvhCEj/0trp7XbdzdB/ZtCbWq5DHd9VRsHhNEwJJOlGtSMDRzp4OLqqQ
0bazfVyHNxKRMDe9dgRbbl0aRlxorHwsU4bXveV/QpaDEmS9QQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFLoP1B7zH98Ir+lZH90bVyoTGtVSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNDE2Zjg2NDEtYTBlZC0z
YmMxLWI1ZGQtM2Y5NTczMWEyYzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQArGKhAwQA
rGKnAwQArGK9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAGgg1I7D8CVSut+HPjDCPIPiPTUrYVu2AhsGXQzZ
ERbvXA8SOedSuNo6m8Elf+U1jGMFofIpiJwNbAHxi9nqJudmjipXQTFN4KWLqLGV
R3UxXwfm23xtOl5cREj2EaKdtPNH3PK5NReWjgLRzIooMSF9smhaTE6XXxEzFs+v
RzD2ZIHAWRv3EIJTRSQ4GjC6jClV+qAeONPIOVT2s2fM+1XFExP61/UdIUp2j7IJ
0ozyQPZ/zqt2OSC34akgX7sUWUwQhgmURpYllhSKa2qM6gmWvM0X6uZFlV8AnX4V
Cit+Pnxb/k243WN63KkTsB5qFexNFenXyFDPvUa76BbLGMo=
-----END CERTIFICATE-----
Generated at Tue Apr 16 01:34:31 2024 by rpki-client on console-ams.rpki-client.org