Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf54aeee-0fb9-3513-aaac-f83e05b83f44.roa
File:                     cf54aeee-0fb9-3513-aaac-f83e05b83f44.roa (raw, json)
Hash identifier:          CPn+yc4ZWTNLu3D/iIHsi7/UQufl8QwUZyzs/Qu7boA=
Subject key identifier:   FD:6C:0F:4C:B9:E8:1F:C3:8B:7F:CA:99:E6:EA:00:95:24:27:8A:5B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B942833B5F84400654C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf54aeee-0fb9-3513-aaac-f83e05b83f44.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        98.114.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:94:28:33:b5:f8:44:00:65:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=ad5be963-f967-4e67-badd-cd2a2ceffc9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2c:64:f0:be:21:4f:c6:57:94:72:eb:a9:be:
                    54:92:60:da:40:7e:92:c1:75:53:ea:66:d0:3f:bf:
                    7c:6e:80:07:a0:8e:3d:a7:9b:bd:d3:79:bf:f8:1a:
                    e0:72:78:5f:a2:f8:f3:89:ee:ea:4d:a7:23:38:87:
                    aa:72:96:d6:5b:05:3a:a7:a8:d9:bc:36:08:2e:0a:
                    35:77:c2:e4:74:06:a4:ad:49:e6:8c:51:67:5e:5a:
                    46:88:bc:e8:e9:9e:55:cc:d6:60:eb:fd:04:d9:fc:
                    74:a9:3e:89:81:45:5f:41:34:cd:1f:b9:21:ed:2e:
                    da:38:30:f2:12:18:73:5a:b6:e6:35:97:59:a6:c4:
                    10:67:0d:69:3a:cc:07:8d:5a:d7:34:23:37:89:c7:
                    3e:25:dd:df:bc:a0:d8:bc:fd:f7:aa:39:e8:a6:72:
                    84:86:da:a3:e6:59:07:ab:68:83:12:cd:06:ef:9b:
                    b3:f0:17:3d:e6:dc:f9:40:fa:6c:28:5d:ea:27:a8:
                    5a:84:79:f4:d3:89:4b:0c:85:aa:94:ac:b5:cf:1e:
                    20:36:db:ec:54:b0:b7:68:df:9f:4f:8c:82:b7:0d:
                    05:ad:95:f9:60:06:4a:f3:02:8f:33:ae:8d:a5:e6:
                    c1:29:6a:65:f2:f3:86:85:ec:a2:f5:88:54:39:79:
                    9f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6C:0F:4C:B9:E8:1F:C3:8B:7F:CA:99:E6:EA:00:95:24:27:8A:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf54aeee-0fb9-3513-aaac-f83e05b83f44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.114.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:2b:47:1b:f3:9c:4d:7c:32:79:3e:f0:fa:88:9f:b1:6f:97:
         37:5a:30:60:b9:dd:93:d5:7c:b4:41:b2:83:6f:aa:f6:3c:7e:
         e8:58:f6:b3:7a:a1:7a:86:45:df:96:98:50:20:2b:7d:2e:bc:
         9b:17:a0:65:78:e1:15:ba:d9:a6:d2:4d:05:e7:07:8d:22:05:
         98:1f:e7:be:9c:4c:07:9f:d6:7c:8e:73:58:1f:be:cc:06:fb:
         00:df:45:59:8b:65:cc:25:55:24:19:42:5b:02:63:8e:04:dd:
         9c:20:4d:0b:42:0a:a6:89:24:09:d3:3b:93:14:e8:70:1f:be:
         c1:bd:03:a2:b3:4a:c0:76:a2:48:e0:14:90:1d:b6:89:b5:6c:
         90:b6:88:f8:ae:3f:db:f9:00:0b:1a:fb:36:e7:07:13:75:2e:
         2a:0f:d6:98:b4:8b:f8:5a:c8:3b:ba:b2:ef:25:e6:4f:b1:26:
         0d:9d:49:5d:28:0f:67:84:11:91:56:0c:65:76:82:b1:1e:85:
         42:fa:0b:f5:3c:ba:03:8f:0e:e4:8f:d0:e5:91:fe:da:b1:1f:
         73:63:91:19:0f:48:04:0b:06:ef:31:88:93:8c:2f:41:83:e6:
         b5:fc:fd:00:d1:8b:11:ad:66:24:19:cb:73:bc:63:96:43:06:
         89:2d:89:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:50 2024 by rpki-client on console-ams.rpki-client.org