Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/dded8e61-2654-367c-8bf2-b7c820c106cc.roa
File:                     dded8e61-2654-367c-8bf2-b7c820c106cc.roa (raw, json)
Hash identifier:          GRyG2ij5q2Fk2rvqnOvtg81r6oVJkcWuqXWqCNmZ2gI=
Subject key identifier:   49:7C:20:BE:BB:65:36:B4:72:C0:E2:35:85:20:1A:F4:AA:1F:4F:D2
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F4328584548081A97920C80FF4CD35900
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/dded8e61-2654-367c-8bf2-b7c820c106cc.roa
Signing time:             Thu 21 Mar 2024 13:00:33 +0000
ROA not before:           Thu 21 Mar 2024 13:00:33 +0000
ROA not after:            Wed 19 Jun 2024 13:00:33 +0000
asID:                     16433
IP address blocks:        198.89.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:08:1a:97:92:0c:80:ff:4c:d3:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Mar 21 13:00:33 2024 GMT
            Not After : Jun 19 13:00:33 2024 GMT
        Subject: CN=0b8e9305-1081-4de1-8e75-eb946be10493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e1:99:de:fc:4c:f3:fe:9d:ad:f6:65:cb:7f:
                    d0:60:2f:97:8a:63:d5:84:35:40:4a:c4:e5:79:c4:
                    d2:1a:90:16:c5:0d:56:8b:4b:36:9e:12:f0:5c:cf:
                    7a:30:a9:e5:47:65:e8:d1:2f:ab:8b:cd:13:b6:03:
                    33:3f:85:e9:e8:f5:18:3d:3d:c7:cd:ce:1c:4d:83:
                    e0:32:8c:3c:7d:02:73:97:02:bc:af:16:c6:41:5e:
                    ad:7b:26:91:39:4d:7e:30:91:d5:99:89:9f:cc:41:
                    89:cf:84:de:b4:be:63:50:0d:99:4d:cf:b6:f4:cb:
                    23:4e:4f:d8:17:e8:b9:e3:92:a5:1f:93:c4:69:6d:
                    38:63:76:30:b1:17:6b:3f:6b:07:11:b9:f6:91:45:
                    f5:59:6a:04:cc:55:47:b0:8a:02:2e:34:ba:cc:7b:
                    ca:ba:4f:03:5d:c7:9b:a9:7d:e1:d5:14:06:5b:78:
                    c1:c6:d6:2e:ee:7f:29:75:c5:1b:e1:81:20:48:29:
                    0c:13:f9:f9:f5:5c:d8:5f:70:ef:b0:6b:4a:6a:1b:
                    34:09:4a:26:84:48:de:11:a0:10:ec:8c:88:ce:05:
                    e3:66:8d:7a:3e:94:1e:5b:87:3a:80:17:82:e6:58:
                    f2:6c:be:ae:ae:b5:3a:7f:c6:12:b1:99:fe:cf:e9:
                    19:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:7C:20:BE:BB:65:36:B4:72:C0:E2:35:85:20:1A:F4:AA:1F:4F:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/dded8e61-2654-367c-8bf2-b7c820c106cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:a0:61:3f:2c:95:7c:6c:1f:95:d2:f1:b4:77:bf:22:a7:fa:
         75:61:0e:40:c8:67:98:a0:70:e8:e3:10:6a:5a:b5:52:51:2a:
         cf:01:d3:f6:54:18:41:51:4e:ba:81:5b:2e:b8:ef:49:cc:3c:
         f0:74:c7:b2:bd:81:d3:02:76:cc:98:55:a3:46:6c:14:e4:b3:
         6f:fb:d1:bd:3d:2b:f4:1c:b8:d1:ee:d4:8b:0c:ed:c2:8c:21:
         25:cd:cf:52:04:00:f1:b5:11:f0:b2:ea:ad:19:77:ac:55:3f:
         a2:83:22:96:2d:b8:b5:3d:ce:e1:f1:40:47:64:df:d9:ae:1e:
         d8:cf:81:29:ad:fd:e2:74:d4:be:34:b9:fe:6a:43:5d:5f:20:
         a4:12:8e:88:b5:a3:88:73:03:4b:98:73:7a:70:07:f3:1b:48:
         f8:08:c5:25:c3:75:25:44:8d:01:e4:e4:02:c1:43:92:c8:e3:
         d6:d5:56:9f:b3:67:5d:dc:b1:ca:7f:c8:ad:13:4b:5c:3a:ea:
         9a:c6:da:4c:8f:ff:15:b9:d6:ce:be:50:72:0e:a2:b3:11:ac:
         16:ae:35:71:30:93:80:c8:88:e3:fd:7b:dd:0f:3c:c8:01:99:
         30:4e:4b:f8:0e:22:4c:a9:50:58:46:f6:14:67:f6:39:7a:e3:
         3c:f7:2f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 18:48:35 2024 by rpki-client on console-fra.rpki-client.org