Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/14e815f8-9bf5-3679-b99c-adfb53e03dab.roa
File:                     14e815f8-9bf5-3679-b99c-adfb53e03dab.roa (raw, json)
Hash identifier:          DI4n/FNR08IR+GnagTYgIf4imonm38AONMdDzFlquPM=
Subject key identifier:   4F:FE:8E:F0:5F:83:48:DA:2B:03:FA:B9:AC:93:B0:27:54:B6:F0:E9
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584529528C3634A4A95A7F3DCE80
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/14e815f8-9bf5-3679-b99c-adfb53e03dab.roa
Signing time:             Sun 10 Mar 2024 13:00:31 +0000
ROA not before:           Sun 10 Mar 2024 13:00:31 +0000
ROA not after:            Sat 08 Jun 2024 13:00:31 +0000
asID:                     396253
IP address blocks:        138.43.98.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:29:52:8c:36:34:a4:a9:5a:7f:3d:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Mar 10 13:00:31 2024 GMT
            Not After : Jun  8 13:00:31 2024 GMT
        Subject: CN=9168c973-a021-440b-bef1-5bdd61d4e97f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:21:3c:5b:6a:e8:63:37:08:19:ef:f9:c8:58:
                    82:ab:71:41:fd:74:21:15:9e:a0:ff:bf:fe:2f:eb:
                    a3:61:7e:b7:0a:70:32:38:d5:af:54:e3:02:fe:e6:
                    a0:46:98:aa:0f:98:3c:85:4c:1b:14:d5:72:d7:bd:
                    98:96:a7:ac:7b:3e:38:83:56:f9:e7:d0:8a:36:27:
                    8d:7a:a1:b0:0b:7c:89:90:76:48:07:24:8b:74:72:
                    ab:0c:6c:b3:1a:df:90:c4:8d:37:e3:63:32:ae:b9:
                    18:f7:ef:2e:b4:8c:5d:c2:ef:fe:52:0e:69:bf:21:
                    62:e2:20:a1:fe:58:16:17:68:3c:3a:79:e4:84:3d:
                    22:d7:9e:96:89:a0:fa:3d:70:70:b5:4f:c5:a8:5b:
                    bc:fd:b6:f1:74:97:a1:54:de:79:1f:2b:1a:4d:75:
                    b4:54:b6:0b:5d:34:62:4c:b0:1a:2d:a5:de:57:24:
                    c1:1b:77:94:93:d2:c5:2f:21:f8:67:5c:19:4e:89:
                    60:c3:e2:ae:a0:3e:ee:db:0a:00:8b:d3:f4:94:e4:
                    e1:ac:69:ea:28:e9:57:1c:38:2e:2f:f3:fb:25:aa:
                    fb:b2:60:36:97:4a:be:fa:57:90:a8:56:5b:e7:6a:
                    a3:15:10:7f:52:a3:d0:5f:be:ae:60:02:13:ad:43:
                    bf:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FE:8E:F0:5F:83:48:DA:2B:03:FA:B9:AC:93:B0:27:54:B6:F0:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/14e815f8-9bf5-3679-b99c-adfb53e03dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.43.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:91:64:a5:93:ba:a3:d3:45:d5:c8:01:31:ce:b8:06:8c:18:
         21:3d:1c:12:35:1e:4e:dc:2c:6e:62:ce:a9:b4:b1:4c:87:f6:
         4f:69:55:91:20:f4:cd:02:c8:e3:78:f7:cb:5d:e9:9d:66:3e:
         0b:46:3a:b0:29:8b:2d:59:0d:a8:51:ac:fa:72:99:43:77:c0:
         9f:56:ea:47:d6:90:ee:1a:08:f2:92:53:35:54:7a:62:1e:92:
         07:1b:3e:22:f4:1f:ae:fb:5d:57:1d:6c:a9:f9:0a:36:d7:61:
         1e:27:97:cb:58:70:63:9e:54:2d:70:2a:12:47:19:5f:8e:1f:
         0e:05:e6:5f:c2:0b:42:4e:fc:bc:d7:cc:66:49:5f:b0:38:f5:
         c5:01:9b:56:78:19:c4:42:7e:35:d8:55:33:9b:50:c0:61:81:
         2f:0c:45:b5:8f:0f:14:a2:35:89:69:f6:9e:d3:78:b7:6b:58:
         67:db:15:ba:88:6b:b2:a7:6f:7e:47:c6:92:84:81:1c:70:06:
         8c:a7:36:e6:1b:1f:34:a7:9c:b3:5b:d4:19:18:8f:64:8b:3a:
         80:b7:4d:75:67:96:9c:a3:01:74:d5:5a:3e:a9:b9:ca:f4:1b:
         da:2e:c7:84:4e:dc:a4:18:05:14:06:60:0b:ab:23:f7:a3:a3:
         3f:1d:f0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:32 2024 by rpki-client on console-fra.rpki-client.org