Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/1d4a8338-4b3b-3b47-b750-7c001886ffe4.roa
File:                     1d4a8338-4b3b-3b47-b750-7c001886ffe4.roa (raw, json)
Hash identifier:          2qeoesS2nKrzxGEffZVluwifHl1Xqlm6x+47NyvR/90=
Subject key identifier:   AE:57:6B:02:CD:60:72:55:DB:86:92:A1:90:CC:B3:87:91:3C:44:83
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F432858464349AE8E1EF9874A7469DB20
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/1d4a8338-4b3b-3b47-b750-7c001886ffe4.roa
Signing time:             Wed 19 Jun 2024 13:00:34 +0000
ROA not before:           Wed 19 Jun 2024 13:00:34 +0000
ROA not after:            Tue 17 Sep 2024 13:00:34 +0000
asID:                     14956
IP address blocks:        172.86.64.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:43:49:ae:8e:1e:f9:87:4a:74:69:db:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Jun 19 13:00:34 2024 GMT
            Not After : Sep 17 13:00:34 2024 GMT
        Subject: CN=cab53aac-cf27-46b8-b1e1-f1f374064536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9d:f1:bc:a4:63:61:df:55:e4:c4:36:81:ef:
                    c5:e7:ef:ac:3e:bd:32:d9:f4:fb:14:72:c2:d0:ed:
                    7b:ba:93:4d:7c:95:de:e9:3b:60:e0:51:3d:15:fe:
                    92:c7:13:0c:b2:44:a1:9b:f4:35:44:bf:9d:75:ff:
                    20:05:bc:50:b2:74:d5:ec:39:7a:a6:04:68:17:5f:
                    02:28:d4:da:d0:7d:42:96:2e:7f:79:ba:8e:6f:1c:
                    5b:fb:b6:93:9e:74:92:74:34:de:5e:a5:42:59:cb:
                    db:3a:7c:2f:bf:2e:39:a2:de:9b:e9:59:7e:3c:2a:
                    ff:e9:4c:03:c6:1e:56:18:ae:e5:ee:d0:98:f1:06:
                    be:96:df:ed:0c:a0:d2:bf:64:98:08:75:6e:d0:ca:
                    3e:fe:84:69:ea:5a:81:d7:be:6d:ea:3b:54:12:5b:
                    e0:5d:c2:c7:21:b8:f2:8c:09:3a:43:76:be:61:ae:
                    61:99:52:7b:00:2a:15:ad:1c:89:06:6e:21:3a:aa:
                    69:59:fa:97:96:85:6b:f3:c3:e5:f2:58:1a:36:d7:
                    9a:cf:03:c7:e0:3d:24:fc:26:32:74:42:47:e5:e1:
                    c2:42:10:45:6c:7a:bd:db:e1:e1:19:79:d0:4b:26:
                    a5:16:d6:76:af:26:5f:2c:6f:de:9d:ab:b1:72:91:
                    64:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:57:6B:02:CD:60:72:55:DB:86:92:A1:90:CC:B3:87:91:3C:44:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/1d4a8338-4b3b-3b47-b750-7c001886ffe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.86.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:a2:1a:52:b5:7b:16:6c:6b:90:46:d1:34:1e:f4:70:9c:4c:
         53:0d:3a:50:9c:3c:5e:2a:cd:7d:95:0a:96:68:b6:47:37:b8:
         0e:f7:f3:b3:d1:b1:a6:17:fd:c6:d7:5b:0a:7a:e6:e3:5d:64:
         cc:5b:bb:8e:07:ad:19:89:6f:fe:ff:b8:20:0a:28:cc:00:dd:
         82:cb:e6:10:1c:64:2b:cd:b7:6d:1e:04:5e:fa:8f:4e:61:50:
         fb:71:70:70:7a:cf:95:33:89:cf:36:33:ae:19:31:2b:92:8b:
         77:91:fc:6b:25:36:c5:91:5f:08:e1:75:bf:b4:8d:7e:5d:9b:
         36:fa:e7:5a:f7:5c:1d:1d:77:fe:d9:10:2c:3c:b4:e2:39:bd:
         b4:80:a8:4b:41:4e:1e:5d:12:c4:fe:8d:2e:2f:fa:e3:f7:d7:
         ce:54:80:9d:a9:95:99:2b:4b:b1:2b:c6:3b:1a:de:6f:8d:0c:
         21:67:b9:1a:45:7f:23:f8:47:38:6c:51:60:86:a1:61:72:b1:
         10:de:fe:40:1b:8c:0c:c3:01:15:5d:ee:79:c5:e0:1e:36:07:
         2f:66:57:0c:3f:d6:a3:3c:ed:e7:36:1f:32:5b:2c:6e:b7:5a:
         7c:01:3d:ed:fb:67:fd:29:eb:07:01:fe:33:d5:fb:a7:1c:8a:
         73:d2:d1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:05:05 2024 by rpki-client on console-fra.rpki-client.org