Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7c2ce0da-4e4b-34e8-b633-ded5bea07c83.roa
File:                     7c2ce0da-4e4b-34e8-b633-ded5bea07c83.roa (raw, json)
Hash identifier:          bHkAOSXjeXr7TPCrV9vHSdDSdUpBDPhTVXTdorR20LU=
Subject key identifier:   51:E2:19:FE:8E:35:F7:76:F0:2A:0C:BB:D0:D3:F6:9C:42:6E:4A:FC
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285847BD915AC91658761B7C945780
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7c2ce0da-4e4b-34e8-b633-ded5bea07c83.roa
Signing time:             Sat 02 Nov 2024 01:00:31 +0000
ROA not before:           Sat 02 Nov 2024 01:00:31 +0000
ROA not after:            Fri 31 Jan 2025 02:00:31 +0000
asID:                     264617
IP address blocks:        172.98.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bd:91:5a:c9:16:58:76:1b:7c:94:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Nov  2 01:00:31 2024 GMT
            Not After : Jan 31 02:00:31 2025 GMT
        Subject: CN=bd5d702f-02f6-4fbd-bbfb-bba64fce1a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ad:8f:9c:5a:d0:ff:1e:9a:43:77:48:b1:7d:
                    fe:87:fd:c9:97:9e:10:0f:82:ef:af:9b:31:34:29:
                    81:80:c7:7a:ed:9b:d2:ee:dc:6e:94:a5:f9:19:c3:
                    be:0b:6b:7d:8d:d8:f5:28:e7:86:aa:40:9d:9c:23:
                    64:f6:e8:93:0e:a1:89:df:a7:61:e2:f4:75:77:05:
                    a3:d3:5b:46:95:f6:af:98:df:84:d6:08:e5:ff:8a:
                    08:a5:de:e4:4b:d7:58:72:71:bb:a7:dc:2d:e5:92:
                    0f:07:b8:35:75:59:43:11:49:62:da:1d:0e:3a:39:
                    f5:ae:89:00:00:d1:07:53:18:2b:f0:61:ee:5b:b7:
                    40:0b:2d:84:7a:aa:02:09:a2:a3:bd:33:fb:c4:a9:
                    80:c6:c0:77:39:c8:e9:b2:6c:5c:dd:e8:b9:99:92:
                    ba:b7:4e:ef:c0:8c:04:c3:29:f0:6e:6c:ed:b0:6c:
                    f2:c3:5e:b7:1b:31:2e:21:40:82:21:f0:02:89:a2:
                    81:d8:ef:7e:df:22:eb:ae:01:86:34:21:f0:3c:61:
                    38:5a:2b:f0:80:41:a9:28:53:4c:5d:a8:ba:05:d5:
                    c5:86:7d:19:0b:99:5b:4b:b7:6e:a2:8e:f4:51:ab:
                    3e:37:99:8a:a7:76:16:b6:8a:0b:f3:88:cc:de:dd:
                    81:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E2:19:FE:8E:35:F7:76:F0:2A:0C:BB:D0:D3:F6:9C:42:6E:4A:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7c2ce0da-4e4b-34e8-b633-ded5bea07c83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:3b:c9:7b:29:92:2f:11:bb:50:a8:1a:a5:da:70:e2:54:e9:
         d1:e5:a2:fa:6c:fd:82:84:9b:20:8d:11:84:fc:35:29:82:fd:
         07:80:61:96:eb:42:38:81:8b:55:66:b2:aa:d3:dd:d9:f7:b0:
         b8:f9:d9:58:bb:ed:7b:a0:d2:26:60:e0:50:0d:f7:1b:1d:c2:
         2e:d8:0c:2c:0d:6b:37:e4:70:b3:a3:c3:5d:6d:95:3f:16:5a:
         2a:58:81:d9:ff:cf:d5:63:0e:1c:1a:39:65:10:3b:79:5c:97:
         58:bc:63:85:19:4d:34:8f:35:1f:5e:12:b6:39:28:89:3a:df:
         e4:e4:2d:33:10:e2:92:3c:fa:af:86:6e:6a:90:98:65:d9:a2:
         3b:09:50:f5:bf:8d:82:ee:74:a3:92:96:dc:a8:1a:78:f5:12:
         7c:8c:e6:03:1c:33:df:35:2f:8a:fc:b9:67:a5:f5:da:ce:b9:
         f5:dc:a9:0e:5b:4f:f8:ec:02:4a:04:e2:6e:bf:60:3b:9e:db:
         86:e0:60:f8:43:5c:5f:cd:c6:3f:9f:f3:5f:90:90:2b:46:8d:
         03:35:7e:4e:df:b1:f0:88:f7:54:53:16:93:27:72:53:e3:7b:
         00:05:1f:d9:9d:d2:ad:c8:b3:21:88:be:42:28:d2:5d:b9:c3:
         76:85:3b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:57 2024 by rpki-client on console-ams.rpki-client.org