Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d596930-92b7-32af-988d-46798e3f8fcd.roa
File:                     1d596930-92b7-32af-988d-46798e3f8fcd.roa (raw, json)
Hash identifier:          8xCJRHBqbBAQZx9tKHSErYlwJm6dybm9qG/UvrVNkVo=
Subject key identifier:   70:19:96:24:2F:B6:2C:F9:08:25:58:AD:8A:D4:45:44:35:8D:E8:7B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584600497C6CE3178B2C699F4C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d596930-92b7-32af-988d-46798e3f8fcd.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22909
IP address blocks:        98.40.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:7c:6c:e3:17:8b:2c:69:9f:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=f9a14f14-2edc-4654-b651-637809e96a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:16:33:3f:b3:28:0c:ba:48:b0:72:b3:77:58:
                    7b:c5:c1:63:6a:f6:ae:73:98:36:98:a1:c0:1b:22:
                    16:d9:eb:55:8a:c0:33:0c:ec:57:ae:97:38:eb:d6:
                    37:3c:bc:6e:49:00:44:af:e5:0e:3f:7f:f5:12:19:
                    ec:0b:bf:87:7a:fc:79:7a:ad:4d:4a:ce:77:0e:2d:
                    80:95:30:e9:12:ae:95:cc:07:37:1c:eb:5c:67:d3:
                    fb:04:bd:d5:ef:bd:0b:11:f1:44:50:85:30:ef:ff:
                    e5:05:dd:75:b3:1b:1e:09:5b:e2:f8:0d:e6:16:a4:
                    e1:96:21:66:6f:b2:67:67:04:89:bc:47:d7:58:22:
                    e9:cd:56:eb:23:d8:ee:03:c0:4f:28:c2:06:f3:14:
                    5d:e5:09:0a:31:6e:74:9b:af:19:8e:28:f4:7d:fe:
                    a0:ed:d5:7f:b8:b6:9d:1a:7c:bb:af:29:60:6f:24:
                    b9:46:a2:c4:af:68:18:75:56:ad:8e:e5:3f:0c:dd:
                    3e:ed:a7:49:c6:8b:ae:19:7b:95:ae:2a:13:d0:77:
                    19:a5:fa:dc:ba:1e:f2:55:f5:b4:73:98:f1:b5:eb:
                    f8:f8:82:59:c1:b5:2c:7b:88:39:72:76:83:db:02:
                    08:a2:e6:07:56:3f:2f:e5:ee:1e:af:16:32:87:11:
                    e9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:19:96:24:2F:B6:2C:F9:08:25:58:AD:8A:D4:45:44:35:8D:E8:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d596930-92b7-32af-988d-46798e3f8fcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.40.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:59:3f:c0:2f:0d:d2:0d:02:df:57:93:af:00:8b:4d:fb:7c:
         86:03:eb:1a:c0:28:e6:e7:d7:09:88:1a:48:cf:83:6b:64:a4:
         35:cb:3a:59:b4:2e:d4:b2:af:4b:d5:f5:35:d0:f6:41:bb:de:
         03:8e:5a:74:e5:4a:ff:a3:7a:e5:a6:fa:ec:1d:16:4d:81:e4:
         34:e3:6c:56:67:c0:8f:af:02:3c:bc:8b:7b:31:97:43:77:b9:
         32:ad:0f:2c:cf:74:91:9e:31:05:6c:a7:71:c1:08:bf:ec:ae:
         71:19:70:b5:b4:60:36:bc:1c:d3:80:21:39:b2:20:57:89:f9:
         3a:05:f5:e5:a1:fe:ea:7d:48:36:b8:ab:93:37:3e:87:04:8b:
         76:4a:0f:dd:81:eb:dc:e2:46:3e:94:05:06:b3:c2:ce:42:6f:
         a6:d8:35:fb:89:9c:b2:d8:32:b4:df:40:4d:62:84:8d:56:8e:
         21:de:51:b7:30:77:2e:15:56:d5:0d:de:1f:01:61:ca:3e:d7:
         d5:a6:71:c7:95:70:e5:d8:cf:ea:3e:ef:6f:52:d7:8a:ff:c9:
         33:ea:7d:67:44:47:5a:bb:90:f8:e3:61:c9:70:05:90:6c:77:
         2b:45:34:61:ab:f6:d4:28:7e:04:a1:54:7d:32:25:06:c9:20:
         6c:3d:e0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:29:00 2024 by rpki-client on console-ams.rpki-client.org