Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/f22cd3f7-789c-3752-839b-38ae727d4e3e.roa
File:                     f22cd3f7-789c-3752-839b-38ae727d4e3e.roa (raw, json)
Hash identifier:          zmaaWnk1O7m+mmnKIET/BV5dANOOj9izvToVQ9oT08E=
Subject key identifier:   AE:4B:9B:C1:79:6C:A9:F0:1B:0F:EC:B3:17:AE:39:BE:34:D5:26:13
Certificate issuer:       /CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8
Certificate serial:       010D0C9F43285844EA9FE8201F8D921551662F40
Authority key identifier: A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/f22cd3f7-789c-3752-839b-38ae727d4e3e.roa
Signing time:             Sat 17 Feb 2024 02:00:27 +0000
ROA not before:           Sat 17 Feb 2024 02:00:27 +0000
ROA not after:            Fri 17 May 2024 01:00:27 +0000
asID:                     14618
IP address blocks:        198.97.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ea:9f:e8:20:1f:8d:92:15:51:66:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8
        Validity
            Not Before: Feb 17 02:00:27 2024 GMT
            Not After : May 17 01:00:27 2024 GMT
        Subject: CN=7881e20c-35ce-4bd8-8a22-e6de0be4997d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4a:1a:e8:93:c8:8d:f3:8e:8f:74:47:48:33:
                    9e:b2:80:bf:2a:6f:0c:c3:dc:97:67:be:70:26:d8:
                    47:d8:67:77:a8:7a:2d:bc:02:d7:00:74:94:1a:85:
                    62:f6:41:93:7d:2b:eb:c4:5f:12:75:87:0e:bc:b7:
                    4e:de:a7:fc:02:6c:62:cb:49:3f:a5:73:4f:fd:f6:
                    7b:aa:2a:b5:82:ff:0e:73:3b:19:bd:74:6a:fd:c4:
                    86:4f:7b:61:ad:32:55:f1:35:be:20:f4:04:04:93:
                    ed:7b:77:5d:1f:b1:7b:18:95:5c:3f:1b:b6:96:c5:
                    a8:b9:5d:a2:f6:50:93:01:d4:50:42:19:bd:14:6a:
                    41:a9:7e:79:b1:b6:3b:18:4a:9d:ef:74:0a:d5:f0:
                    36:67:12:a3:27:72:e5:d9:69:6d:70:a9:2d:53:98:
                    b9:ed:61:b2:1e:ed:c3:19:29:32:b2:41:a6:11:9c:
                    c6:6c:6b:e8:69:18:32:0e:47:9b:05:f4:97:59:ae:
                    af:73:81:cc:e4:af:a3:b3:8d:59:e0:5d:cf:0c:46:
                    c4:55:3c:b4:48:94:92:6d:a2:1e:e7:0f:39:52:c5:
                    99:d1:a7:9d:68:b5:3a:e5:03:db:dd:98:78:25:6f:
                    0c:f7:99:72:4f:1c:c3:4d:3d:dd:38:28:7f:62:e3:
                    e2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4B:9B:C1:79:6C:A9:F0:1B:0F:EC:B3:17:AE:39:BE:34:D5:26:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/f22cd3f7-789c-3752-839b-38ae727d4e3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl

            X509v3 Authority Key Identifier:
                keyid:A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.97.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:27:c6:06:19:71:50:42:61:01:c0:9b:34:8d:8c:55:cb:f1:
         15:b1:4a:6d:ec:50:58:d8:aa:77:46:68:6c:c2:22:b1:82:b9:
         42:08:3b:85:e7:4f:71:31:c1:43:5d:9f:39:e8:4d:21:48:cd:
         7c:5b:9b:ec:8d:b9:b4:fa:c0:1c:86:5e:74:81:4f:87:92:11:
         f5:78:b4:04:ab:e1:f0:46:a6:d6:9c:05:e0:32:c9:da:bd:3d:
         b7:50:f0:de:2c:12:4b:fc:55:ef:d8:68:84:38:4f:ae:1a:b4:
         f8:66:fa:bb:ac:a4:dd:93:91:5a:b1:a6:39:fb:13:a1:80:65:
         1b:61:30:b4:2b:a5:03:61:e2:7d:19:8e:41:e1:82:af:8a:d8:
         ff:c6:ef:80:77:9d:03:e3:44:62:37:4b:8d:5b:fd:d6:8e:20:
         b3:eb:83:50:6a:9b:34:22:af:1c:fb:3f:0b:2a:4f:4c:77:44:
         48:03:6d:5a:47:e7:c6:7e:35:cb:27:5a:c4:3c:81:bf:fa:f2:
         1e:4a:40:66:f3:dc:18:b9:5e:98:1a:7d:d4:62:c9:c2:d9:72:
         e5:cd:c0:7a:f4:89:c0:e8:49:ce:f7:02:14:45:41:95:b2:10:
         6c:9d:ae:46:7c:2c:79:e6:17:1d:5a:90:7e:90:d6:d5:2d:1e:
         fd:b6:6d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:31:48 2024 by rpki-client on console-fra.rpki-client.org