Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/030fc748-abaa-3cea-bd4c-e3f3aff66c3f.roa
File:                     030fc748-abaa-3cea-bd4c-e3f3aff66c3f.roa (raw, json)
Hash identifier:          495KDN4dnnnqtqlCjsPzTeBrXpd1eI6LXuivIA7IoYY=
Subject key identifier:   FC:1F:6A:AB:12:F5:56:69:46:55:3D:5C:55:BB:0B:91:AF:35:EA:4A
Certificate issuer:       /CN=6511a5cc-df0b-4c6e-a228-2902fbea4263
Certificate serial:       010D0C9F4328584819CFD77B92B1D8D52C871F80
Authority key identifier: ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/030fc748-abaa-3cea-bd4c-e3f3aff66c3f.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        140.98.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:d7:7b:92:b1:d8:d5:2c:87:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6511a5cc-df0b-4c6e-a228-2902fbea4263
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=6a9adf49-a38f-48b7-b110-37f4865aed04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:83:94:97:e7:8e:c0:04:ff:42:b3:eb:62:c4:
                    5f:e9:9d:fa:38:c5:f0:fe:a8:ae:15:33:f7:c5:6b:
                    b4:68:0d:ec:e0:8c:30:e1:6d:fa:8f:7c:45:0f:d6:
                    8b:10:a3:7d:77:7c:b2:08:33:50:8e:a3:e7:2f:b4:
                    27:61:24:f8:ec:10:09:8b:40:1f:ff:cc:9c:5a:9c:
                    bb:73:12:61:9f:9d:ad:ac:fc:42:3d:88:e4:b7:6b:
                    f3:40:7f:0d:8c:85:79:c9:0e:49:c8:70:5a:ed:2f:
                    f0:0c:25:b6:6c:cf:cc:37:55:13:fc:88:09:50:de:
                    2c:4d:f2:c0:52:1a:ab:a4:7d:0a:3b:5c:03:22:a3:
                    2e:16:be:17:0d:9f:b1:8d:45:92:4b:10:e3:37:b2:
                    09:30:de:97:46:a7:7e:16:5f:c5:49:61:94:47:7a:
                    29:9d:80:70:9c:23:17:44:34:0c:68:c9:1c:64:7b:
                    78:2d:05:a6:3f:82:0b:09:bd:68:e9:bd:ff:df:2e:
                    2d:ba:5b:d1:e3:a7:1a:1f:44:e9:30:69:db:79:32:
                    9b:9b:76:fc:bc:47:f3:e8:c4:8a:36:04:87:8d:cb:
                    9f:e6:0e:ef:35:0e:85:0a:ce:42:79:e9:c1:c1:f9:
                    cb:40:d0:2d:73:75:22:48:14:6a:81:54:85:32:92:
                    94:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1F:6A:AB:12:F5:56:69:46:55:3D:5C:55:BB:0B:91:AF:35:EA:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/030fc748-abaa-3cea-bd4c-e3f3aff66c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl

            X509v3 Authority Key Identifier:
                keyid:ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.98.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:74:c2:11:a0:84:ae:b9:79:94:c3:a2:45:ce:ff:63:e9:66:
         cf:32:8c:ab:d2:7c:61:6a:00:43:cb:5d:f3:e2:ff:b5:93:39:
         3f:be:d2:07:9b:9b:f0:95:30:63:a9:5f:f0:a2:dc:38:35:ff:
         f6:70:b2:d3:b2:38:c3:cb:4a:b5:79:de:d3:d2:9b:4e:35:da:
         4f:4b:16:94:15:f4:01:8b:01:06:6b:7c:2c:f9:91:1f:66:90:
         db:4b:0f:09:7c:4b:4b:c9:4b:a8:d2:c3:ad:d8:26:50:67:e8:
         68:41:96:3c:e1:3d:6d:44:97:6b:06:ad:56:01:13:89:69:ca:
         4c:50:81:f5:db:d0:e9:8f:92:b0:9c:43:ee:81:4d:d0:73:f5:
         9a:67:13:d1:c3:f9:6f:f6:40:a5:bc:51:f0:b7:a1:37:d5:81:
         72:f8:8b:b2:16:a9:71:90:76:7f:52:00:3c:e0:3c:3c:19:db:
         78:83:a4:aa:74:1e:88:f9:f7:c2:63:ee:28:e4:dc:89:1a:64:
         14:63:10:08:33:ed:d5:d0:ec:23:15:77:79:da:02:fd:9d:ff:
         22:a9:44:d8:b2:cd:59:9c:d1:d7:73:c8:02:dd:01:24:bc:bf:
         93:a1:69:ad:8b:b0:52:b1:bd:30:62:17:80:a9:41:95:cb:60:
         2b:93:87:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:44 2025 by rpki-client