Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f390329f-b1d6-3ae8-995a-b73d77e86d74.roa
File:                     f390329f-b1d6-3ae8-995a-b73d77e86d74.roa (raw, json)
Hash identifier:          3Qhuymv7smmPtUS5NL3UqCpBkKADhkAx8yAWx/O3BRo=
Subject key identifier:   EE:F6:A9:D2:92:CE:A5:E3:E9:88:CE:BD:41:60:0A:15:15:AA:93:96
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B90C1005971675CF24D40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f390329f-b1d6-3ae8-995a-b73d77e86d74.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        98.111.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:90:c1:00:59:71:67:5c:f2:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=9fd88f8a-83c9-449f-a4b7-f3a3868f97a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b5:b1:81:ec:a6:43:b1:3f:4b:86:23:4a:49:
                    66:95:e5:70:0e:53:bf:bb:ae:c1:c7:1e:34:f5:ce:
                    20:85:88:13:9b:cd:88:dc:d8:05:41:22:7d:04:a3:
                    05:3e:06:77:3a:1d:c6:d2:e7:0f:cf:b3:d7:ae:4a:
                    5a:cf:5c:d0:6a:db:1f:5b:c1:ce:90:d0:aa:96:a0:
                    c8:9b:12:1b:c7:47:49:29:07:3b:45:fc:2b:82:10:
                    94:37:be:f6:b0:de:88:99:3f:34:7d:1c:13:68:b7:
                    0e:42:f4:d7:50:f0:b9:43:2c:39:20:14:b6:a5:1f:
                    22:1b:7c:1c:7a:20:20:88:ba:24:7b:4e:42:2f:2c:
                    28:98:ff:a7:cf:f5:9a:5f:59:7d:23:0c:d9:78:57:
                    7f:c8:89:e2:13:77:6d:0e:72:62:56:5b:cf:5c:77:
                    c3:d8:b4:b8:af:f5:dd:6f:57:5c:92:eb:bf:1b:d6:
                    9e:31:4c:5e:be:f5:99:01:1d:92:95:18:ec:31:fe:
                    76:ef:1f:5a:90:25:6e:b0:3d:79:24:d1:29:5c:94:
                    89:51:8b:d2:7a:b8:81:52:22:2a:cc:ed:1c:43:0c:
                    94:61:88:96:75:8b:2f:92:d8:2c:b3:ef:78:1f:9d:
                    b6:b3:96:09:ca:ce:a8:8e:17:2c:0c:26:7c:24:9e:
                    52:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F6:A9:D2:92:CE:A5:E3:E9:88:CE:BD:41:60:0A:15:15:AA:93:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f390329f-b1d6-3ae8-995a-b73d77e86d74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.111.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:2d:21:e9:ab:92:fe:2a:44:64:50:a7:0c:52:c5:c2:87:b9:
         56:90:4b:66:14:39:e9:0b:b0:2b:4b:cb:5f:af:22:96:8a:d4:
         64:8b:d7:c9:36:9e:5e:84:08:e6:99:c7:ba:92:17:d7:d3:97:
         09:81:6c:4e:7e:4f:75:1c:84:bd:d6:42:6d:49:93:45:76:e2:
         4d:95:5e:1d:00:8c:17:c6:28:b5:d1:80:19:d7:13:60:8f:29:
         fa:80:b7:74:03:09:80:42:7b:24:e7:a7:59:b9:85:fa:53:18:
         0d:02:c6:0f:33:74:72:33:78:ef:8b:2b:ba:ac:9e:a8:f7:8b:
         2d:5c:5b:dc:53:86:99:4b:30:59:7c:25:8e:23:b3:72:2a:90:
         3a:65:d5:4f:e2:ff:e6:e0:a6:ac:59:a1:57:11:be:f7:38:3e:
         22:31:71:18:69:dd:fb:b6:9a:fa:e5:5f:04:63:71:a8:b2:cb:
         2c:1f:49:2d:e2:35:ac:55:5d:04:85:e7:14:3f:c1:c4:fe:fa:
         72:74:6d:26:df:9f:e5:89:94:1b:5f:d6:83:2c:74:23:07:30:
         53:59:25:54:cb:e0:44:be:ef:2c:ce:2f:40:68:f6:d1:6c:bb:
         06:8c:fa:34:24:7d:b8:47:41:36:aa:63:bf:28:de:72:d8:47:
         f4:9a:1e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:01 2024 by rpki-client on console-fra.rpki-client.org