Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/d7d19c6a-acd3-3622-8cf6-c0e01fce1b12.roa
File:                     d7d19c6a-acd3-3622-8cf6-c0e01fce1b12.roa (raw, json)
Hash identifier:          DFaDJMDOk3tUF9Hfl31SCfF+b90znzp+JVB6TNgaLCA=
Subject key identifier:   FF:4C:5E:39:B3:FF:B9:BC:1E:83:BB:40:1B:BF:5A:B4:2E:88:E8:09
Certificate issuer:       /CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8
Certificate serial:       010D0C9F43285845CB3E4C06548E82FEB740DB80
Authority key identifier: A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/d7d19c6a-acd3-3622-8cf6-c0e01fce1b12.roa
Signing time:             Tue 07 May 2024 13:00:35 +0000
ROA not before:           Tue 07 May 2024 13:00:35 +0000
ROA not after:            Mon 05 Aug 2024 13:00:35 +0000
asID:                     55101
IP address blocks:        198.97.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:3e:4c:06:54:8e:82:fe:b7:40:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8
        Validity
            Not Before: May  7 13:00:35 2024 GMT
            Not After : Aug  5 13:00:35 2024 GMT
        Subject: CN=9dc000bf-b761-43ea-990f-34296bf43baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b2:4c:32:67:85:fd:e2:7d:0a:ea:a6:81:5a:
                    f3:09:03:01:53:0c:1d:4f:9a:c8:24:f7:81:71:72:
                    fa:8e:9f:74:b4:f4:c1:bd:b0:e8:8d:31:78:d6:1e:
                    77:64:34:1c:de:fb:e9:2b:c6:88:c1:44:ad:1f:ed:
                    f1:5d:55:cc:08:4c:e1:55:16:33:1f:8c:6e:d0:ad:
                    37:95:55:51:47:03:4d:80:f3:ab:53:0f:43:a0:c4:
                    7e:ca:3e:8d:68:9f:18:03:ae:9e:b1:51:1e:75:3f:
                    14:08:cf:50:26:83:9d:cb:ae:65:68:c3:d5:3a:2d:
                    6f:6b:93:43:b1:8e:16:2e:be:7c:d3:94:52:a0:c1:
                    92:2b:2b:45:15:77:c2:87:40:1c:b5:ab:cf:97:14:
                    85:af:66:5a:bb:80:1e:d6:00:5a:db:a2:fd:5f:78:
                    b1:8b:62:0b:59:fe:6a:c5:bd:c5:07:c9:20:eb:63:
                    66:d7:b1:0c:d6:08:24:73:48:ca:d8:b4:9c:1a:4b:
                    f1:7f:50:5e:19:4f:dd:86:a6:d0:84:69:e5:31:ce:
                    99:f1:4c:af:34:87:bb:6b:00:64:e5:59:6b:7b:2f:
                    4a:d6:8d:d4:99:5d:40:68:c6:0c:7d:9e:d3:c7:5f:
                    7b:15:27:55:d3:7f:d9:71:22:a0:1d:a2:a2:e0:78:
                    27:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4C:5E:39:B3:FF:B9:BC:1E:83:BB:40:1B:BF:5A:B4:2E:88:E8:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/d7d19c6a-acd3-3622-8cf6-c0e01fce1b12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl

            X509v3 Authority Key Identifier:
                keyid:A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.97.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:67:78:36:f6:22:cd:c2:99:d6:6f:e1:5f:b7:1f:0c:bb:a7:
         73:d4:ae:76:b7:73:23:d6:9a:ea:b4:6d:40:20:c5:70:c3:28:
         a9:e4:41:00:52:01:2e:40:ac:d6:97:57:17:12:18:ba:30:c6:
         02:62:4b:54:9a:09:10:15:95:87:24:b1:96:1e:c6:ca:e4:dd:
         44:52:87:75:cc:b1:34:87:73:96:a8:23:40:c4:b3:20:f8:fd:
         e9:b9:d9:33:9a:ef:db:9c:4e:f6:15:85:4b:33:84:0a:69:bb:
         43:a6:60:41:fc:b9:17:fc:56:d0:ea:bd:ad:90:81:3b:8e:c5:
         9b:aa:f0:f6:1c:15:9d:a8:5d:a6:f4:91:04:63:db:d9:21:e8:
         51:8b:00:7d:fd:4b:eb:58:27:89:5a:0c:bb:10:06:9c:0c:a8:
         64:16:de:73:cd:a9:93:36:29:de:34:73:74:67:cd:5a:62:31:
         4f:bb:45:0a:5a:ca:cc:50:17:5a:23:bc:18:e6:6a:74:3f:0b:
         32:c9:01:52:71:52:cf:18:a9:eb:fa:b3:c9:8a:fd:d1:67:29:
         c8:7c:ac:58:2b:c9:cf:c3:f7:2a:9a:61:a2:ca:94:0e:69:49:
         ae:b6:d1:fc:67:87:a1:f2:50:49:de:9c:8b:d4:ff:0f:29:5e:
         bb:88:ee:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 18:48:34 2024 by rpki-client on console-fra.rpki-client.org