Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/2bdf5da3-7278-3180-9d5c-727f67919ebc.roa
File:                     2bdf5da3-7278-3180-9d5c-727f67919ebc.roa (raw, json)
Hash identifier:          oUco6g+S4uXZuNFSFv0HqMMXkR47AphJOtYFrP6Hs+E=
Subject key identifier:   92:21:48:19:63:05:06:3F:91:A6:6A:E7:29:8D:FB:12:5A:9E:F5:F1
Certificate issuer:       /CN=328ebe8e-32d9-4873-ad53-1a5e421126d5
Certificate serial:       010D0C9F43285847600B9DD88909770870782C00
Authority key identifier: 88:80:4B:02:44:DA:7E:76:D7:64:EE:31:28:48:B6:17:EF:DD:EE:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/2bdf5da3-7278-3180-9d5c-727f67919ebc.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     13631
IP address blocks:        198.22.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:9d:d8:89:09:77:08:70:78:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328ebe8e-32d9-4873-ad53-1a5e421126d5
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=c004c68c-7c4d-4825-af5a-757e24af26bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ae:46:41:5d:58:7a:90:bb:84:62:7a:d2:66:
                    62:71:7a:f8:df:8d:cd:38:19:5a:42:de:e0:8b:5d:
                    2d:de:0c:e5:2e:4b:84:4e:30:19:05:24:0c:09:f1:
                    20:38:7e:94:72:c1:7e:05:cd:d1:56:cc:04:46:ee:
                    2e:af:13:0f:0c:73:4c:50:b9:bd:99:ac:bc:c5:c4:
                    55:e9:77:5c:b5:f6:df:73:dc:79:03:45:b6:a8:29:
                    07:38:ba:74:e9:61:ff:17:b1:ba:4f:1c:6d:06:00:
                    93:f6:f5:38:98:8d:d4:20:4f:3d:ce:c6:37:9f:74:
                    cb:60:8b:cd:97:72:e9:79:16:47:20:05:7e:f0:b5:
                    df:63:fe:33:c3:cd:d8:42:6a:92:9c:9a:c6:65:14:
                    24:15:f5:57:e3:98:6b:d0:40:85:85:6a:9b:e9:79:
                    67:18:9d:19:b9:2d:bd:dc:aa:be:13:2e:fa:8f:b9:
                    5e:c7:c1:e7:76:e6:6f:94:92:06:72:a2:5c:fe:54:
                    bd:09:91:f4:77:37:8f:f3:87:ad:72:ef:95:35:c0:
                    d2:08:8b:5a:a4:1a:f3:72:6a:57:3b:b1:fb:7a:fb:
                    5d:5a:26:23:70:d5:35:1b:56:d8:49:62:4e:04:52:
                    bf:94:86:c3:5d:7d:ac:cb:4d:52:c0:3d:80:4c:d2:
                    07:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:21:48:19:63:05:06:3F:91:A6:6A:E7:29:8D:FB:12:5A:9E:F5:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/2bdf5da3-7278-3180-9d5c-727f67919ebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.crl

            X509v3 Authority Key Identifier:
                keyid:88:80:4B:02:44:DA:7E:76:D7:64:EE:31:28:48:B6:17:EF:DD:EE:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.22.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:6b:05:64:4b:9d:c1:ec:8a:be:7f:3c:0e:aa:bb:7c:7e:a5:
         83:bb:bf:a6:b6:40:79:cc:1e:3f:49:d9:1c:26:25:66:32:bf:
         b5:b5:2e:c6:01:56:c4:3a:09:17:17:8a:89:04:c9:48:a2:d0:
         02:32:34:6d:bf:51:4a:35:cd:f8:6b:4d:e6:79:4c:45:d2:6b:
         e1:8c:3c:80:f5:f9:56:f8:d5:df:81:db:a7:62:92:25:f0:04:
         db:63:85:33:ca:7d:b1:34:2f:ea:dc:e5:1e:ff:49:32:72:98:
         bc:e7:87:46:80:c6:32:0e:f4:f2:ce:52:86:ed:ad:39:91:a6:
         dd:b0:cf:3a:c1:d8:0b:b4:52:12:27:e1:3a:56:83:2b:07:e5:
         57:a8:32:36:3b:1f:6d:7a:2a:17:61:d2:d0:dc:74:20:b7:9a:
         34:8a:81:ce:c3:ab:2d:be:74:99:f8:d5:27:fd:53:87:14:44:
         0a:fc:e1:ad:52:51:9f:f9:0e:a7:64:28:bf:56:78:ec:97:87:
         d3:7d:a1:04:c5:46:75:c4:ee:57:2c:d3:f5:5b:fb:06:70:8c:
         d0:69:7d:50:89:6f:1d:36:4a:e9:ee:b4:45:68:76:04:3d:60:
         1e:c5:72:5e:3f:e1:1d:a6:0a:0f:e3:67:11:3c:d3:b7:8a:a8:
         f3:70:b4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:17 2024 by rpki-client on console-ams.rpki-client.org