Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/84617fef-aed5-300e-856b-34d46debd9aa.roa
File:                     84617fef-aed5-300e-856b-34d46debd9aa.roa (raw, json)
Hash identifier:          eNnRh8RGSpeufpFGaXfR6Z1YN//EFceUtd2M0TCQLms=
Subject key identifier:   D7:0E:EB:B6:D7:2B:E2:78:8C:ED:A2:62:4E:2A:63:A6:62:65:FD:15
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285846F29CF8B5E54415C5EBEDC280
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/84617fef-aed5-300e-856b-34d46debd9aa.roa
Signing time:             Wed 21 Aug 2024 08:14:55 +0000
ROA not before:           Wed 21 Aug 2024 08:14:55 +0000
ROA not after:            Tue 19 Nov 2024 09:14:55 +0000
asID:                     174
IP address blocks:        198.16.88.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f2:9c:f8:b5:e5:44:15:c5:eb:ed:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Aug 21 08:14:55 2024 GMT
            Not After : Nov 19 09:14:55 2024 GMT
        Subject: CN=072c96bc-b67a-4211-9fe9-8a76b51f51ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4d:d1:a2:17:19:fe:a2:5b:16:44:99:36:1d:
                    26:b8:14:96:c3:8e:b1:4a:3d:4f:e8:18:9e:05:df:
                    d9:47:99:ce:4b:7c:6c:43:1f:18:5f:ed:ea:47:eb:
                    72:55:18:b4:09:74:50:a4:43:dc:82:3f:1e:56:7a:
                    00:48:f6:3b:cd:ef:02:a5:cf:49:07:1a:01:46:b8:
                    bb:f0:11:eb:01:36:cb:6f:96:d6:f1:07:e1:3a:43:
                    5b:08:72:75:12:27:6d:71:cc:71:81:5f:40:cf:52:
                    49:2e:6a:39:de:d8:d7:13:d2:ee:d7:a9:30:9e:fa:
                    c4:d0:63:1d:97:14:8c:13:b1:74:fb:aa:c6:73:ac:
                    ef:08:dc:78:56:b7:02:e7:56:bf:18:48:e3:9b:87:
                    a8:0b:ba:a8:69:db:c1:77:f8:1c:48:93:55:c7:01:
                    da:39:09:57:d9:93:32:8b:30:8c:d5:71:4f:82:23:
                    a3:41:99:82:fd:ae:6d:83:00:63:52:63:40:67:0b:
                    6d:a8:f4:4d:59:5e:d6:c6:78:45:56:d3:1e:17:0e:
                    11:4a:38:c9:c4:67:ed:5b:f1:d5:a2:22:63:2f:0b:
                    7c:c8:4d:ac:02:d3:1a:1c:84:07:90:22:6d:37:6e:
                    d1:78:8d:c1:ff:c1:7d:65:4e:57:5e:ae:b4:20:50:
                    2a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0E:EB:B6:D7:2B:E2:78:8C:ED:A2:62:4E:2A:63:A6:62:65:FD:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/84617fef-aed5-300e-856b-34d46debd9aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.16.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:57:9b:12:a3:44:16:3f:ca:7f:52:99:ba:de:09:a4:60:8d:
         c2:4c:47:db:b9:ad:91:2a:17:5b:6c:ed:61:2b:ab:d1:76:c0:
         54:58:1f:28:3f:14:bd:b3:6c:cd:87:a0:fa:66:5a:08:03:9f:
         f8:42:91:14:d0:51:48:16:c3:e7:76:eb:a1:ba:bd:54:aa:7f:
         87:a9:03:b6:44:32:f2:fb:28:5c:0d:ae:24:a0:e6:58:47:d6:
         8d:8c:d9:04:b5:5c:94:0a:89:58:1a:b8:92:ba:6d:b8:01:1d:
         e2:6c:a5:4b:39:a6:0c:19:04:a4:d8:f0:1d:e9:08:f4:c4:bb:
         50:d8:0d:91:b8:be:1b:3e:3e:20:d3:d6:c0:45:7d:df:9c:5d:
         5b:52:c5:db:7c:63:cc:d8:00:d6:4b:85:0d:aa:ba:9b:2e:34:
         78:13:2d:34:47:a9:28:35:40:56:1c:fb:1a:8f:c5:6c:31:6a:
         dd:fc:14:71:59:88:80:56:be:e7:0b:f5:88:32:2c:32:ba:c7:
         bd:97:5f:a9:d2:38:4d:5c:73:22:ec:e9:12:be:c7:74:f4:e9:
         76:f0:0d:64:1a:cb:03:e5:b2:f5:03:04:e6:6f:8c:25:a1:26:
         c7:eb:12:7e:84:fb:e2:a5:a1:d9:7e:cc:08:bb:4a:e2:26:bb:
         29:cb:66:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 18:55:14 2024 by rpki-client on console-ams.rpki-client.org