Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1115993a-80aa-3c7e-8810-7721567db8ce.roa
File:                     1115993a-80aa-3c7e-8810-7721567db8ce.roa (raw, json)
Hash identifier:          E71QFAMAj07Yf8VSJbusx9xTnnKbW8wGLSb+RM5nldY=
Subject key identifier:   5F:21:9A:FB:32:05:65:2C:32:6F:9A:72:08:73:7A:5F:96:F7:D9:EB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004C1C57B3E2C8497207C4E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1115993a-80aa-3c7e-8810-7721567db8ce.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     13367
IP address blocks:        98.240.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4c:1c:57:b3:e2:c8:49:72:07:c4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=48df2ca0-b66e-4002-bcc5-22966599834a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:a2:7d:eb:7f:9f:60:8e:fb:27:95:e2:fb:
                    31:b9:ce:c8:74:0c:62:7a:30:c7:24:f0:13:0c:3d:
                    47:13:a9:f3:0b:07:8b:e1:67:cd:a2:2e:f6:86:fd:
                    18:71:f0:9d:86:b6:1f:f4:d1:18:eb:7b:3c:ba:0c:
                    3a:ff:70:ba:03:a3:d4:a5:a5:f0:96:a5:40:2a:d1:
                    e1:d9:99:fc:09:1a:23:ef:74:8b:f9:82:71:38:9c:
                    51:c6:8b:24:47:ae:6a:de:8d:58:f7:c7:7b:ba:ef:
                    ad:e4:c7:65:4c:8a:1d:66:f2:e3:1c:ab:87:59:2a:
                    b8:61:ff:2d:2b:0a:d5:6b:2e:16:0f:47:87:2f:9c:
                    39:dd:70:3d:28:db:1c:37:df:43:b8:cc:19:7e:65:
                    e2:ec:e7:35:4f:f4:f0:6b:87:83:df:ca:90:d5:2a:
                    ab:9d:18:9b:3c:b1:06:f6:c9:07:d1:9a:ea:cb:53:
                    cd:ba:05:0f:b4:ca:cb:03:cf:c3:b7:ad:bc:2f:8e:
                    9e:f5:e8:55:16:6e:07:cd:70:6b:92:57:fa:6a:bd:
                    9c:2a:3c:c6:88:d6:8a:d0:ec:8e:c6:d1:82:d8:5e:
                    bc:d8:02:8a:03:18:2e:32:b5:00:51:e0:1c:9f:fa:
                    a2:ff:3c:84:e1:00:eb:1a:e6:67:38:07:3a:86:3e:
                    52:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:21:9A:FB:32:05:65:2C:32:6F:9A:72:08:73:7A:5F:96:F7:D9:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1115993a-80aa-3c7e-8810-7721567db8ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.240.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:3c:95:9b:99:47:c6:c8:bb:48:d0:d0:c4:07:d6:ba:15:59:
         53:8a:71:45:a3:a6:c2:5b:e7:87:3e:cc:66:ef:23:fe:41:ea:
         88:3b:78:e4:fa:5c:74:0a:00:d9:5f:78:67:ef:aa:a5:2d:df:
         ff:83:41:b9:1c:1d:cb:7d:be:11:8e:be:d6:cb:21:f6:02:6f:
         49:3d:cf:e3:fe:49:9c:f0:a2:53:35:ad:4c:34:88:72:64:cf:
         91:c8:14:2b:ef:49:e9:39:62:23:05:39:6d:2e:e7:fb:ba:b7:
         cf:8e:ed:4e:da:4e:7e:af:ef:e3:cc:8a:f1:6d:1e:f8:61:73:
         05:8e:b5:3f:b3:95:c3:60:c9:21:0d:cb:91:d4:d0:c1:e6:3a:
         d0:83:76:a5:96:ac:e8:b8:61:fa:e1:b5:a1:eb:f0:cb:9e:12:
         67:a6:3d:63:cf:76:76:ca:d0:f5:cc:4d:68:d6:2b:62:a0:f8:
         49:cf:f6:80:75:6c:70:54:a3:5d:90:18:09:6b:e3:4a:23:46:
         56:43:be:36:30:8a:f7:25:9d:bf:be:fb:ea:2b:a4:f5:d2:96:
         0f:cc:1a:99:09:34:cd:c2:c8:dd:af:c5:56:e1:7e:14:ef:30:
         bf:d6:5c:5e:87:c0:33:b6:21:d8:38:00:2e:f0:bd:29:74:1a:
         f3:09:ab:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:56:49 2024 by rpki-client on console-ams.rpki-client.org