Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e44d89d1-294f-3176-8a80-725875ef32c9.roa
File:                     e44d89d1-294f-3176-8a80-725875ef32c9.roa (raw, json)
Hash identifier:          Ie197IySx9mx5t/L5yrEMUGbliqQvgJp7SkSrfLr9QQ=
Subject key identifier:   C8:F8:2C:45:C6:CC:E6:F2:B6:24:8D:1F:66:7F:59:84:AE:E9:DD:AF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847EFEF8F3EA8AE45D569391A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e44d89d1-294f-3176-8a80-725875ef32c9.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     21342
IP address blocks:        173.223.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:8f:3e:a8:ae:45:d5:69:39:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=8bfc08a9-baf3-4337-8514-e0df61847058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:97:6a:55:85:85:8e:2e:1a:6d:03:c5:86:7f:
                    7e:49:de:65:af:54:2b:6f:3e:d3:53:57:fe:7b:92:
                    0b:b9:1c:d0:4c:5d:0c:68:4b:51:ec:ee:f0:e8:63:
                    80:48:7e:3c:43:b9:67:3d:82:78:b1:6f:e5:22:28:
                    54:82:19:7b:07:aa:df:ea:a7:48:cc:85:be:8d:9e:
                    42:08:45:d2:d2:10:cf:3d:d8:8d:83:50:3b:a7:a0:
                    8f:c0:db:f1:48:30:e4:2c:df:dc:f3:1e:c5:60:79:
                    ce:57:ef:3b:93:16:fa:3e:a3:10:4b:98:ff:b2:52:
                    d8:0b:84:e4:b5:84:5c:bf:36:56:db:81:be:f3:98:
                    34:fa:7a:b4:a5:39:ce:ff:06:02:85:07:0b:a2:8b:
                    25:1e:a6:c6:3f:4c:95:ea:af:cb:2a:05:82:f3:05:
                    ef:e2:f0:04:0e:4e:2d:f1:be:64:f4:cf:02:61:2f:
                    24:d1:18:c5:ec:f8:f7:c8:5f:f3:47:68:0b:8d:fe:
                    d1:d7:42:93:25:8c:49:7b:ce:7e:3b:f0:40:82:0c:
                    aa:73:c4:61:e4:c2:9c:81:fe:d3:df:ba:8f:1d:61:
                    2e:fb:7f:cb:26:b6:88:95:d2:4a:5d:f9:f6:87:a9:
                    be:6f:7d:57:76:b7:45:9b:78:a4:d9:71:4f:f8:58:
                    27:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F8:2C:45:C6:CC:E6:F2:B6:24:8D:1F:66:7F:59:84:AE:E9:DD:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e44d89d1-294f-3176-8a80-725875ef32c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.223.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:37:fa:4f:17:c1:96:f5:31:19:35:7a:ff:67:db:b7:c9:55:
         64:e3:73:4d:9b:b6:c5:e3:26:c3:08:97:36:b6:df:5e:94:b1:
         95:24:cc:dd:45:11:d5:b4:a1:06:30:bd:c8:84:1a:81:99:4b:
         f6:7a:c6:ff:a3:85:89:ad:c2:af:e2:ab:db:04:9b:82:6b:cd:
         e1:f2:cc:13:33:4e:45:fb:b0:5d:a7:2a:1f:33:20:38:20:28:
         b7:e5:86:c1:44:16:bf:f6:e7:bf:0c:c5:60:d2:6a:ad:9a:7e:
         d4:cc:cb:74:dc:c0:ae:9d:ee:c9:4c:6b:b5:89:0c:8b:40:18:
         f4:c0:0c:98:72:5d:5d:df:d4:3b:00:52:19:6f:e8:45:01:d9:
         d4:f6:f6:64:97:48:c2:38:cf:c7:85:7a:d2:75:e1:cc:15:08:
         61:e6:21:e8:81:7a:b6:63:a3:55:ae:a8:d8:23:c8:27:df:d8:
         d5:bf:da:81:65:ed:90:7b:60:f0:ba:10:cb:c6:a9:3f:87:10:
         fd:1c:33:94:ce:ba:ea:e6:ac:3c:02:97:2f:c3:d7:16:5c:ea:
         88:48:de:08:91:17:c4:03:38:34:58:9d:6c:ba:43:29:7f:d8:
         86:26:ab:5b:f7:5a:d1:ec:e6:63:6a:da:12:bb:f4:84:83:68:
         ab:8a:f7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:17:44 2024 by rpki-client on console-fra.rpki-client.org