Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/c7ec4227-6559-3408-a496-1a34e31c4fdb.roa
File:                     c7ec4227-6559-3408-a496-1a34e31c4fdb.roa (raw, json)
Hash identifier:          CbD+wX+D7X/I4H3fNB+jjHzh0LbUVwZevs0f4Er5h9g=
Subject key identifier:   CC:2C:BF:AB:3A:FD:19:30:BE:07:49:65:B9:06:24:B4:92:A1:41:8C
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F43285848E8665DA1DAA1827F066A0740
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/c7ec4227-6559-3408-a496-1a34e31c4fdb.roa
Signing time:             Mon 17 Feb 2025 02:00:38 +0000
ROA not before:           Mon 17 Feb 2025 02:00:38 +0000
ROA not after:            Sun 18 May 2025 01:00:38 +0000
asID:                     198983
IP address blocks:        167.88.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:66:5d:a1:da:a1:82:7f:06:6a:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Feb 17 02:00:38 2025 GMT
            Not After : May 18 01:00:38 2025 GMT
        Subject: CN=3bb33d8b-d253-4f37-af16-e66cb59453cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:31:65:7a:9e:c5:3b:15:b4:17:e1:3a:3c:88:
                    f8:d5:87:81:64:fd:5d:dd:54:ab:b6:7f:04:b4:9b:
                    a6:0d:54:32:fa:53:4d:29:06:5b:ac:37:ba:76:a4:
                    af:f3:d3:95:2a:08:5e:8a:a5:00:7c:1c:4c:72:81:
                    dd:3e:52:60:6a:83:58:01:f4:c1:18:95:16:f3:e6:
                    da:f7:9d:5a:d3:51:ee:e2:d6:b6:03:a2:fa:fe:59:
                    f6:fe:f3:e9:b5:e7:f9:c8:01:93:76:99:5e:23:67:
                    8c:88:33:63:bb:7d:0c:c8:f9:eb:aa:6e:cd:3b:97:
                    ce:af:20:43:10:ae:3d:91:78:46:a2:04:55:c1:78:
                    30:c3:8f:60:b0:09:70:59:ad:9d:3d:28:e5:98:f4:
                    84:69:84:7a:e0:4d:36:3c:2d:f4:77:2a:97:75:53:
                    98:b7:d8:ee:d5:5b:18:75:66:b7:35:3f:8f:be:31:
                    95:e6:95:b7:4f:c8:10:a1:a2:69:7d:6d:ac:fb:02:
                    f2:ba:3d:52:c8:0d:2c:98:20:5d:fd:dc:1d:b4:69:
                    a4:64:64:5b:b1:32:5d:59:34:86:0d:18:67:6c:1b:
                    cf:9a:6e:f1:60:74:90:0d:47:fe:b9:cb:a9:7b:eb:
                    49:ce:0e:01:a8:81:7c:8b:14:4d:0e:ca:89:51:7e:
                    08:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2C:BF:AB:3A:FD:19:30:BE:07:49:65:B9:06:24:B4:92:A1:41:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/c7ec4227-6559-3408-a496-1a34e31c4fdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.88.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:fc:e5:4d:e4:e2:23:50:86:98:33:2f:45:e4:0d:6d:c4:9c:
         d0:ff:db:c2:9c:82:76:f1:09:83:a2:ed:d4:ae:6d:03:71:3b:
         d5:ad:e5:ab:99:2f:0a:33:64:5a:6f:d9:2c:5f:26:34:c6:85:
         1e:45:a0:4e:69:9a:cc:18:83:ab:04:b7:9a:35:c6:3c:3e:bd:
         f7:74:fe:66:e3:2d:21:fc:a0:ae:2e:af:07:f4:7f:7a:0a:6b:
         af:c6:44:68:b5:66:4b:7a:42:8b:dd:92:e3:e1:d5:e9:7c:92:
         56:36:57:71:95:d6:1e:0b:3d:a2:70:a0:2f:18:0f:4f:24:78:
         64:20:60:af:d9:eb:83:e6:cb:fa:35:a5:74:72:f4:47:75:62:
         64:2d:26:70:e4:e6:3d:05:62:c8:74:5b:55:c5:62:24:22:cb:
         ec:7c:99:a3:0a:b1:19:92:f7:3c:68:ce:0c:19:5d:83:df:51:
         26:33:a8:81:b9:00:ed:a9:6c:67:cd:82:04:81:1c:cd:60:38:
         90:66:2c:4c:81:bd:09:56:28:57:4f:b8:3b:45:b4:e2:a2:f4:
         1f:73:5a:6c:de:19:24:0f:5e:81:13:c7:db:f6:8e:57:2e:0e:
         8a:5a:f8:36:d7:8c:da:96:8a:08:80:3d:ac:4a:3b:33:98:f7:
         02:88:a2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:31:34 2025 by rpki-client