Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/4886e627-f754-300f-a139-b0409146ac4c.roa
File:                     4886e627-f754-300f-a139-b0409146ac4c.roa (raw, json)
Hash identifier:          my1pthF6sutIsb4uBSrSeIHpH3MXkUoRKjvUrwEx98U=
Subject key identifier:   FD:19:C5:C4:4B:62:66:AD:0D:A0:2C:F1:B6:9D:5C:01:93:19:D2:43
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F43285847CA3F8A15F0B01F2351E99184
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/4886e627-f754-300f-a139-b0409146ac4c.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     53667
IP address blocks:        199.195.248.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:8a:15:f0:b0:1f:23:51:e9:91:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=173a332f-a542-4b5a-985e-785094cda711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:52:25:1d:ce:16:46:c7:89:67:34:f0:29:c5:
                    b4:eb:54:a9:bb:64:51:32:6d:f0:77:92:90:0f:c2:
                    42:66:1a:95:f8:68:ba:10:aa:4f:db:63:12:e9:b5:
                    46:15:d6:c7:5e:4b:21:f6:28:ac:82:16:2a:fc:05:
                    50:33:e1:5a:b6:a0:30:09:9c:25:87:ee:c8:59:42:
                    b6:5e:68:4c:79:c2:a4:46:e7:03:79:29:5f:6b:8a:
                    0e:a6:90:a9:db:4b:f0:bb:6c:ee:ec:71:ce:c4:34:
                    d7:00:9d:83:35:11:fb:d4:fb:79:97:d6:e9:72:ac:
                    39:66:22:22:24:7e:5d:b1:a6:d5:d3:0b:a0:7f:cb:
                    c1:3c:0d:69:70:87:78:d8:d9:93:41:62:5d:8d:cf:
                    e6:41:73:03:a9:61:70:cc:97:9d:4e:5d:76:4c:09:
                    4a:74:c5:de:1e:98:94:67:16:fa:34:5c:95:a6:f4:
                    24:b9:c3:48:80:f4:a5:cb:fc:f9:45:ab:4f:a0:52:
                    ac:85:15:b4:23:1a:d9:e0:30:06:f5:20:f6:63:dd:
                    40:d9:a2:00:5a:ec:07:39:13:76:d3:6a:21:ff:cb:
                    05:9b:07:9c:d7:f8:aa:c7:d1:70:29:44:4b:71:da:
                    3c:e9:d3:4a:08:56:16:de:86:9b:df:68:c2:73:d7:
                    85:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:19:C5:C4:4B:62:66:AD:0D:A0:2C:F1:B6:9D:5C:01:93:19:D2:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/4886e627-f754-300f-a139-b0409146ac4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.195.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:cf:0e:8c:63:fc:d6:2b:a0:ed:ae:b8:0f:8d:f5:9f:47:8b:
         08:d6:e4:9b:68:c9:b1:39:5a:17:48:d4:58:f4:70:76:4f:8c:
         2b:ec:29:8f:35:4d:d7:05:4c:ed:38:bb:9c:a1:9e:5d:22:95:
         de:af:04:90:d8:8f:49:21:4f:63:c6:26:d5:b9:89:a0:f0:d7:
         34:64:5c:a7:32:cb:08:4c:10:ce:00:09:3c:f5:eb:7a:01:15:
         de:61:1e:41:a8:41:78:22:7c:31:ae:e9:49:fd:20:dc:34:94:
         a3:2c:bf:6d:f0:62:f5:0f:dd:1b:da:cc:38:27:3e:1f:84:a3:
         62:8d:09:42:7b:2b:1b:fa:09:97:ba:43:ea:49:b6:e2:49:13:
         5d:bf:b3:b8:d1:47:46:fe:07:83:25:23:ed:89:c6:d5:27:9e:
         72:e5:e6:8a:da:94:41:a5:0d:8b:1f:fc:6b:66:5a:c9:a0:59:
         d3:a4:03:c5:ff:6b:13:55:64:d4:78:da:b7:95:d4:d5:0a:bc:
         3d:b0:09:84:47:70:a9:ee:8c:b7:d4:2e:fb:73:ec:22:c0:80:
         f1:5a:64:a9:b0:82:a4:f0:3f:a5:7f:85:00:9e:da:5a:c0:22:
         25:74:17:e5:4a:4c:d7:6c:2c:2d:e4:b7:c6:da:72:8d:39:63:
         0f:cf:96:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:40 2024 by rpki-client on console-ams.rpki-client.org