Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/ceaf2de1-b23e-39d9-87b6-5c722c950c8f.roa
File:                     ceaf2de1-b23e-39d9-87b6-5c722c950c8f.roa (raw, json)
Hash identifier:          cO+36rujn+VpgZy1961c72mC9oloqKTjYoAyJYrPCK4=
Subject key identifier:   13:55:40:F0:63:BE:99:81:EA:7A:4C:93:0B:DE:5E:B6:4B:60:96:CB
Certificate issuer:       /CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
Certificate serial:       010D0C9F43285845DBFE6D1189F9D633B10B5DA0
Authority key identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/ceaf2de1-b23e-39d9-87b6-5c722c950c8f.roa
Signing time:             Mon 13 May 2024 13:00:34 +0000
ROA not before:           Mon 13 May 2024 13:00:34 +0000
ROA not after:            Sun 11 Aug 2024 13:00:34 +0000
asID:                     7057
IP address blocks:        98.143.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:fe:6d:11:89:f9:d6:33:b1:0b:5d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
        Validity
            Not Before: May 13 13:00:34 2024 GMT
            Not After : Aug 11 13:00:34 2024 GMT
        Subject: CN=d30154ba-2244-457d-a3a7-58e4aa365c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fe:53:b8:8a:8f:d2:fc:18:86:01:1a:0d:6e:
                    b9:cc:60:8f:bb:65:ba:18:a8:dd:b0:d3:76:27:1f:
                    41:d1:6d:1e:2e:aa:3e:e3:e3:8c:ad:32:66:c5:da:
                    56:5a:76:1f:09:29:f6:83:25:6a:3c:35:cb:d0:76:
                    64:1a:67:56:cd:0a:ed:02:fc:24:5f:8a:4f:28:f9:
                    64:96:30:13:78:0b:c9:7d:b0:8c:40:9e:8e:9b:69:
                    56:37:76:aa:45:bb:ca:55:72:00:a4:88:94:76:32:
                    81:ca:84:31:94:6f:db:50:b8:ce:12:b8:b9:ec:10:
                    ed:95:a7:b6:88:0a:34:2f:06:75:79:ab:8e:49:b0:
                    80:af:67:95:9a:fb:57:0a:5d:1a:ca:8a:14:ae:39:
                    14:9d:7d:9b:95:63:f7:8e:48:15:35:a0:2a:a8:78:
                    fe:53:d1:2b:d9:0e:3d:a6:53:9b:0c:2c:fa:ac:2f:
                    03:ac:a4:75:ae:c3:3a:f3:26:b5:96:e1:19:31:93:
                    b4:bb:97:f6:19:a0:24:f8:75:47:cd:ad:d1:c4:58:
                    58:bf:56:14:17:ae:c4:11:83:3a:1e:77:ed:b8:ca:
                    05:4c:05:cc:14:ef:1c:61:e8:f5:ca:1d:b6:a3:f5:
                    fc:44:75:f5:2c:03:60:fe:1c:1d:f4:66:42:ea:56:
                    c4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:55:40:F0:63:BE:99:81:EA:7A:4C:93:0B:DE:5E:B6:4B:60:96:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/ceaf2de1-b23e-39d9-87b6-5c722c950c8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl

            X509v3 Authority Key Identifier:
                keyid:4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.143.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:0c:f0:89:5b:04:4e:42:e7:3e:4c:65:5d:d6:d7:83:e2:7a:
         b0:3c:80:49:7d:76:4b:3e:fd:40:27:20:ad:8c:23:cc:fb:86:
         4b:4a:60:40:97:88:22:93:bf:41:0a:79:57:37:d8:8d:2a:e0:
         07:ae:f6:8f:d6:b4:60:4a:84:93:f1:4e:4b:0e:20:a6:d4:cf:
         aa:c8:2f:29:18:99:8d:3f:30:e4:12:04:d9:2b:03:50:ed:f9:
         e3:34:b7:f5:d0:b1:11:62:9e:ad:77:23:8f:d1:7e:aa:6f:fe:
         c0:88:52:8e:06:e8:b2:72:2b:55:48:ea:0f:a9:18:1a:9e:d6:
         e2:3d:a2:9f:f0:7b:d4:17:a6:1f:f8:b6:bb:0f:b0:70:c5:6f:
         58:14:71:12:b9:12:77:e4:17:96:41:0c:8f:a4:4b:19:7f:08:
         32:a9:a5:da:f7:cc:78:69:af:31:3a:76:6a:61:6a:a4:fe:e4:
         bb:af:fb:31:65:e7:ff:26:39:73:da:76:54:4d:90:6a:88:1e:
         7b:ab:d1:38:15:90:26:16:b1:47:28:fe:91:2f:6e:84:41:f8:
         2a:ba:5f:5f:04:15:21:02:72:4c:d4:db:74:6a:31:f8:83:bb:
         19:c0:f9:cd:60:9c:70:ea:bf:c9:5d:85:dd:4e:77:ee:9e:ef:
         1b:50:01:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:00:02 2024 by rpki-client on console-ams.rpki-client.org