Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15243669-c19d-3041-b027-008c90f8ad1e.roa
File:                     15243669-c19d-3041-b027-008c90f8ad1e.roa (raw, json)
Hash identifier:          ze7X/regyU366FZEqrdZ0UELpAqeoVWMwRbZ2Xncjtc=
Subject key identifier:   0D:90:91:27:00:ED:4F:B2:8D:64:81:D1:2C:BE:8A:15:A4:E4:0D:4E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285844F5134B7380D465AA864F4EC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15243669-c19d-3041-b027-008c90f8ad1e.roa
Signing time:             Tue 20 Feb 2024 19:51:04 +0000
ROA not before:           Tue 20 Feb 2024 19:51:04 +0000
ROA not after:            Mon 20 May 2024 18:51:04 +0000
asID:                     8987
IP address blocks:        198.3.24.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f5:13:4b:73:80:d4:65:aa:86:4f:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 20 19:51:04 2024 GMT
            Not After : May 20 18:51:04 2024 GMT
        Subject: CN=dd1ceca2-a4e7-48a2-b10a-51e84e6130b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:aa:12:d5:4f:2a:5d:b1:a0:fa:54:0a:81:af:
                    a7:2b:fe:5c:9f:4f:71:45:2e:7c:2c:cf:c4:2d:d9:
                    f4:b7:78:03:55:87:4e:97:af:98:e4:c0:1b:ae:7b:
                    fa:2b:e5:0c:a6:06:16:da:f8:62:ac:a5:31:d6:fd:
                    89:27:34:86:35:75:33:6c:4c:88:1a:1b:fa:a4:e0:
                    3d:ee:95:81:bb:47:dd:9c:b3:02:4a:b7:5e:3f:6f:
                    bf:53:3d:1d:30:1d:ca:00:bf:0f:6e:a6:e3:0f:4d:
                    07:c4:c7:7c:c9:46:69:5c:90:ae:d4:b5:e5:65:08:
                    d0:72:b5:02:06:1f:af:a7:de:87:0c:e2:82:a9:2f:
                    97:41:c3:92:8c:24:c7:4e:40:dd:94:ad:d0:81:92:
                    97:79:07:51:5a:48:88:ae:28:e3:a2:b9:a4:54:d2:
                    3f:cf:73:cb:99:ab:fa:83:43:b6:fe:f8:e7:dc:25:
                    51:91:6f:8d:35:2b:bd:c0:b9:ac:bc:38:08:6f:3d:
                    ea:44:8e:bc:46:8e:50:d7:03:de:62:f3:ba:e8:2c:
                    8a:06:e5:d8:cb:fa:55:d8:de:f4:05:1a:8e:78:54:
                    0f:3a:83:9d:cf:fe:91:cf:a3:20:0d:46:86:1f:b1:
                    39:13:91:54:2f:9c:b7:a0:fc:d6:6f:65:55:e7:0f:
                    49:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:90:91:27:00:ED:4F:B2:8D:64:81:D1:2C:BE:8A:15:A4:E4:0D:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15243669-c19d-3041-b027-008c90f8ad1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.3.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:be:76:9b:96:f1:25:1c:01:cb:30:82:f8:f1:4b:76:d9:83:
         35:ad:6f:d5:ac:ad:49:e1:22:a7:9a:a3:c9:69:2f:9b:e0:0e:
         83:2d:8f:b1:83:1c:53:9d:57:d6:7e:17:13:e9:be:66:9c:86:
         7c:82:9d:ac:06:f9:45:ad:7e:12:dc:33:b9:64:28:45:ec:32:
         49:ea:a8:cb:3c:8e:6a:58:20:b9:f2:b9:99:1b:e8:f8:cd:4f:
         4c:65:ac:f7:66:0b:2c:0d:2f:cc:63:ec:65:ea:74:b7:bc:05:
         28:d3:b1:01:53:e4:71:0d:13:f7:c1:a2:7d:d0:a9:80:04:c9:
         54:67:bb:31:94:42:16:f8:f1:8b:5e:16:d2:dd:81:74:d4:fc:
         62:84:cd:b2:7c:11:dc:5c:1d:9c:63:50:33:9e:e9:f6:61:0a:
         df:a7:6b:d0:96:6e:26:dd:d5:d9:46:5c:af:f3:fe:ac:26:e4:
         55:5d:7a:93:93:b1:2f:b3:31:27:b1:2e:f1:eb:3a:06:4d:67:
         0c:9c:59:4c:52:4f:6a:f4:f0:35:a4:cb:64:c5:e7:3e:75:c6:
         b4:65:ba:f4:cc:87:42:2b:cf:40:c4:1b:2c:58:39:c3:04:16:
         d8:7a:73:f4:d8:49:a1:08:fb:c0:e5:c3:81:ba:36:f0:62:6d:
         bb:27:7f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:33:18 2024 by rpki-client on console-fra.rpki-client.org