Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/edf7a120-a151-375d-869c-0b92a25fccec.roa
File:                     edf7a120-a151-375d-869c-0b92a25fccec.roa (raw, json)
Hash identifier:          H9wKszjPZCOgDYIo2Me7/hpQKBIVcGs7CkoxBIjyOS4=
Subject key identifier:   17:53:C1:82:8B:82:AF:24:EA:3A:CE:E0:93:6F:B5:AD:AF:9A:26:0C
Certificate issuer:       /CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8
Certificate serial:       010D0C9F4328584789EBFDB1D25AB95B61907860
Authority key identifier: A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/edf7a120-a151-375d-869c-0b92a25fccec.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     55101
IP address blocks:        198.97.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:fd:b1:d2:5a:b9:5b:61:90:78:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=a0fadd3d-cacc-4590-a554-be6d582438a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6f:09:df:df:aa:06:ca:16:42:09:95:d5:45:
                    75:37:02:f2:f9:47:6c:94:b6:f0:8e:23:2e:75:4c:
                    f5:3a:3f:9b:60:25:2c:f1:5d:9b:bf:cb:40:1f:ab:
                    7e:2b:f4:bd:b5:6f:12:ae:73:a6:61:07:6c:de:85:
                    3c:02:a1:6d:58:e4:87:f5:75:15:4a:2a:3c:1e:30:
                    6f:7e:df:96:63:44:83:00:ca:66:2c:d4:99:6e:78:
                    e5:df:f2:b2:75:ef:5b:a2:43:d7:30:16:57:48:8a:
                    d7:bc:17:83:fa:1c:e1:72:2e:6d:04:ed:cc:f5:1f:
                    0b:8a:66:9e:f6:98:e4:f2:d2:dc:4a:66:7d:af:20:
                    5d:e7:ea:f1:bd:40:46:cc:18:cb:48:a4:dd:00:a0:
                    27:c9:a1:4b:1c:66:56:e9:aa:26:39:6c:76:64:ab:
                    2e:e2:6f:12:f7:a0:36:a3:dc:e4:f1:1b:8d:c3:e0:
                    c8:9f:f3:47:06:3e:86:4a:e5:33:59:a3:8d:35:8c:
                    33:0f:9b:e9:41:d3:e2:0d:05:71:11:cb:df:26:f3:
                    5d:f4:e8:df:dd:06:db:07:49:ff:15:e0:2b:6e:54:
                    eb:f3:a0:21:a4:28:14:3b:c4:91:79:2d:e5:e2:49:
                    30:d7:4d:ad:71:68:b5:fe:22:3d:cc:48:7d:bf:32:
                    77:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:53:C1:82:8B:82:AF:24:EA:3A:CE:E0:93:6F:B5:AD:AF:9A:26:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/edf7a120-a151-375d-869c-0b92a25fccec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl

            X509v3 Authority Key Identifier:
                keyid:A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.97.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:04:96:49:b0:da:08:38:6e:c0:b4:54:aa:f6:ae:7b:3b:e0:
         57:ec:4b:d2:cc:d3:37:20:08:f6:a7:9e:a8:6e:85:21:07:a0:
         02:c6:8c:44:5b:35:59:8b:c4:94:4e:98:e7:19:f1:fa:f8:b8:
         e5:a6:ba:a3:f1:22:aa:85:93:d6:36:54:7f:a3:9c:99:9e:85:
         3e:42:e4:81:64:39:81:b2:ac:46:df:51:1d:67:f9:31:fd:21:
         6f:d0:c5:81:ba:8a:43:bb:69:bd:9b:58:10:ac:12:f1:4b:c3:
         28:bc:a6:f6:8d:f6:dc:09:05:55:18:80:6a:ef:c9:37:d7:a0:
         26:7f:2c:5e:2d:a2:e3:a5:45:f6:76:20:4e:27:79:34:b2:dc:
         9c:8a:de:e5:d1:28:8a:fc:34:77:34:3f:93:c7:b0:b3:4f:bf:
         ec:38:05:3a:89:14:86:88:d7:d1:67:77:c8:33:ab:82:ac:ac:
         0c:21:c9:aa:2e:4a:eb:af:4c:bd:0e:b3:78:92:b7:8a:52:c8:
         62:a6:64:3f:aa:91:68:35:3b:21:31:2a:e9:6d:4d:d1:74:17:
         eb:17:1f:9c:5b:4f:ac:53:08:3e:56:42:12:d5:6f:c1:f2:55:
         e1:42:aa:19:91:c7:e9:55:ba:5f:b9:88:96:e9:4e:18:ad:39:
         63:46:91:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org