Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/2498679f-c646-3f82-9b20-5c40474821c2.roa
File:                     2498679f-c646-3f82-9b20-5c40474821c2.roa (raw, json)
Hash identifier:          GqISeGHD4MPa3lbuNM8bkfAvnnIxqmK7DvRYXdEr9sQ=
Subject key identifier:   59:AA:CF:A0:2F:AF:13:FF:1E:A3:6D:98:BB:12:37:E2:72:64:73:0C
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F43285848143A81BC05CA8E3431C5C9C0
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/2498679f-c646-3f82-9b20-5c40474821c2.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     14956
IP address blocks:        144.172.80.0/23 maxlen: 24
                          144.172.82.0/24 maxlen: 24
                          144.172.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:81:bc:05:ca:8e:34:31:c5:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=3257cc41-7968-47cf-b969-9be0ec51a058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:16:1e:7d:53:8a:a2:aa:12:a7:cf:eb:57:0f:
                    67:21:97:a1:12:3b:2b:30:89:4b:33:3e:9b:06:30:
                    00:fe:de:3a:82:e6:d3:42:4a:98:03:0d:b1:8d:1a:
                    3c:c1:32:d7:58:f3:2d:db:f8:c6:c5:1b:81:9d:5a:
                    b8:fe:da:66:f9:18:47:01:af:b1:04:ca:32:f8:13:
                    55:f6:3d:5b:00:08:e3:ad:69:4d:53:6c:23:22:4f:
                    51:6b:27:63:92:a8:6b:19:63:bc:41:b6:63:e8:b9:
                    5b:4c:2d:c5:f4:70:79:a0:35:e7:92:eb:a4:70:86:
                    7d:53:34:bc:d2:b4:c1:66:ef:83:9e:d6:fa:8b:28:
                    f6:fe:c7:bf:49:12:66:96:cf:e4:4f:8f:34:ea:d4:
                    14:b5:f5:fd:5c:40:06:c7:c9:34:48:f0:cf:16:ac:
                    ce:62:4f:f9:72:f3:e9:67:2e:7d:50:71:a3:ae:48:
                    05:60:90:6c:46:9d:0a:5f:eb:a6:a4:b3:e5:18:ee:
                    83:46:ff:03:20:b5:92:e1:92:7a:fd:53:8d:19:c6:
                    9b:03:d0:7f:d4:74:b3:31:4e:94:dd:ce:22:36:0b:
                    9c:d4:98:27:18:55:8a:a8:c5:f6:b0:12:41:8f:2b:
                    7c:58:21:22:2c:70:63:76:9c:d9:a7:a0:80:40:88:
                    4f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AA:CF:A0:2F:AF:13:FF:1E:A3:6D:98:BB:12:37:E2:72:64:73:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/2498679f-c646-3f82-9b20-5c40474821c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.172.80.0-144.172.82.255
                  144.172.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:e9:20:70:5d:10:14:d8:74:da:9d:51:f6:d3:92:4d:60:ca:
         90:11:3f:9d:a5:5b:e7:23:69:73:cc:0e:43:22:a4:40:99:c4:
         00:4f:df:35:64:ed:02:72:a4:e4:14:6d:ba:c8:9e:73:1d:0f:
         27:b1:29:27:19:cd:7a:d5:8e:67:c2:65:ba:33:d0:9e:55:21:
         dc:05:c5:da:d4:76:d0:eb:9d:22:59:c8:bc:5c:b9:f6:42:be:
         1e:e7:66:81:be:5c:b4:bf:5d:b0:1f:b8:94:b8:bb:bd:17:df:
         3d:8f:83:e3:30:d6:5b:e3:63:07:97:c4:74:08:4a:cb:4a:24:
         c7:8d:48:c6:72:a4:04:c2:e2:f9:54:90:e7:53:e0:23:8f:68:
         dc:71:17:74:3d:53:ee:23:e0:41:8b:2e:74:2f:40:be:5d:fc:
         92:fd:2a:61:57:0e:80:0c:5e:f3:c1:fa:25:7d:c4:c4:c8:03:
         77:80:bc:e6:b6:74:7e:03:9b:97:14:fa:e4:9a:da:50:e7:0e:
         23:21:a3:cc:02:6d:4f:02:03:55:8a:dd:22:41:47:0e:b9:e7:
         cd:b3:a8:a2:34:70:ce:1b:97:f0:08:9a:a5:36:d1:76:0a:b2:
         4f:b1:a7:a3:75:16:cf:e3:88:7a:cd:c6:ad:d2:76:fa:d7:e6:
         d6:6d:6b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:06 2025 by rpki-client