Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/588d46c8-502e-3bb5-b75b-5cca06a28a2f.roa
File:                     588d46c8-502e-3bb5-b75b-5cca06a28a2f.roa (raw, json)
Hash identifier:          3wjNFvfXmT0YKJUmau4RHUKfrTCU99ycUzRxV3zFZ3Q=
Subject key identifier:   44:F4:C5:58:B2:D2:B7:05:B9:74:A3:1D:8B:72:3E:4E:55:D7:0F:60
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A16B7FE11CDED4389AD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/588d46c8-502e-3bb5-b75b-5cca06a28a2f.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33667
IP address blocks:        98.244.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:16:b7:fe:11:cd:ed:43:89:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=30c4fddd-9fab-4ef1-a07b-ea1bec1094c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:88:f3:ca:f3:3f:45:50:32:c2:6e:ee:b5:60:
                    60:a8:1e:df:5d:a0:95:24:c9:da:9b:83:bb:ff:68:
                    43:7f:fc:cc:8f:9c:a3:d0:67:7d:62:e9:72:a1:08:
                    fe:48:a5:5e:e6:e8:44:b2:a4:2c:3f:1b:05:43:99:
                    80:9c:72:df:13:3e:95:5e:8c:dc:31:a2:43:3a:59:
                    5c:df:a9:40:59:1d:8a:90:56:36:1a:09:e7:0b:00:
                    f8:57:b1:e6:b8:8e:df:27:15:d6:03:61:cb:dd:00:
                    74:97:5a:d5:32:ed:71:80:73:41:9b:15:5f:34:8e:
                    44:17:17:3f:2b:4b:2a:d2:d7:38:df:31:75:cc:0b:
                    22:ec:07:c4:c2:03:93:01:e5:18:0e:18:af:e9:c4:
                    ea:9f:4a:78:ac:82:56:09:e2:f7:7d:8b:06:94:a0:
                    62:53:b5:0b:42:c5:23:36:a7:d3:39:3c:0b:29:94:
                    6b:a9:cd:45:6f:cd:57:55:b1:e8:f7:9d:16:57:00:
                    2d:f1:2c:a4:8d:46:e0:dc:0f:f0:54:c2:53:1a:fe:
                    da:4d:c1:ef:fb:24:cd:d1:8e:de:cd:3a:d5:2d:eb:
                    a3:ab:d8:0d:cd:e7:c5:ad:64:ad:19:6f:0d:d6:7e:
                    43:d6:27:c0:19:a0:bd:49:cc:b4:20:85:ff:61:50:
                    86:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F4:C5:58:B2:D2:B7:05:B9:74:A3:1D:8B:72:3E:4E:55:D7:0F:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/588d46c8-502e-3bb5-b75b-5cca06a28a2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.244.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:8f:a8:24:6d:21:86:19:27:77:d1:fc:78:20:49:bf:78:8c:
         91:73:37:ea:b4:85:1c:10:26:47:17:9f:68:f1:f4:a1:de:18:
         bd:f9:14:0c:05:d0:18:34:ed:b7:a9:af:d7:90:31:9d:3e:cb:
         34:d2:c0:a6:52:97:47:f1:a8:db:15:f4:f7:a5:82:dc:87:66:
         8c:ea:d9:ff:86:ae:4a:91:b0:71:b6:e3:93:37:41:b5:ba:72:
         bf:e2:27:b5:67:5c:7d:26:c5:92:8e:db:8d:29:64:42:be:f1:
         5c:d0:6d:6c:b7:85:c3:c3:79:7e:03:c7:61:17:15:c9:ec:a5:
         77:d8:2b:66:a6:67:e0:d9:0a:b7:7c:dd:bc:8a:34:a0:36:73:
         05:50:ad:82:db:d6:b3:29:dd:99:91:61:2b:93:c2:56:1a:26:
         5d:eb:a7:1a:75:5d:2b:bc:2a:5d:f3:53:4b:7a:ce:fa:d8:41:
         33:43:6e:3f:73:50:70:d1:58:15:87:52:b1:c2:9d:5f:7e:68:
         65:49:cb:bf:07:db:4b:d9:2d:e8:3b:8d:cd:22:37:a7:4f:bb:
         72:f2:6e:1b:13:c4:f9:b6:7d:75:11:6b:c8:c1:f6:8d:63:67:
         48:93:5e:40:a1:f9:8f:ee:09:56:d5:5f:bb:ab:af:49:ba:74:
         bb:18:de:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:10:12 2024 by rpki-client on console-ams.rpki-client.org