Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc234307-4436-3a1d-82b2-9c2339664400.roa
File:                     bc234307-4436-3a1d-82b2-9c2339664400.roa (raw, json)
Hash identifier:          pTQvmr10XYck7mEfr4SkD5mEbWJmKyFRP4BCGLe9oFw=
Subject key identifier:   48:2A:D3:F3:5C:CC:0C:51:1E:9A:B1:AF:F3:56:DE:96:74:88:AC:E3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004C1B56C0B20EEE2A0B7F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc234307-4436-3a1d-82b2-9c2339664400.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     13367
IP address blocks:        98.61.164.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4c:1b:56:c0:b2:0e:ee:2a:0b:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=aef18e34-a7ba-4dd1-8513-c2dbfbdd511c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:78:b5:f8:f3:37:38:2f:15:2c:3d:a8:15:8e:
                    c7:09:c6:5a:d2:28:61:b9:43:f8:ce:94:1a:cc:14:
                    31:39:f2:b0:8d:b8:8e:ed:41:73:99:70:93:7c:45:
                    76:26:89:fd:1f:70:6c:b9:51:f6:cc:7e:b3:2d:0b:
                    be:3f:fe:6b:5d:47:44:4f:ff:7c:40:66:c7:f0:32:
                    1f:31:c2:e1:c5:3d:fd:c6:69:43:f1:54:c3:81:c0:
                    fe:c7:7e:53:24:e9:8f:90:15:26:20:9d:a7:31:70:
                    c1:18:c3:80:bf:9a:64:45:e3:fd:a3:d8:ae:87:cd:
                    ba:4b:be:77:28:4b:04:54:5e:1d:f2:4e:4c:62:a1:
                    8e:6f:42:54:9f:14:ad:ff:49:c6:22:1b:f9:a2:33:
                    e9:fb:c0:99:d6:cb:35:60:ac:74:ae:e0:51:fa:31:
                    8c:a3:9f:d2:37:c2:c2:01:28:3b:85:3c:42:18:d0:
                    22:a1:13:82:d1:74:fb:4f:9d:01:d6:a4:48:a2:4c:
                    b6:45:9d:be:9d:fd:e3:15:dc:de:be:db:bc:85:af:
                    d5:a7:ca:9b:e2:ea:6b:3b:55:11:92:8e:2d:8b:8f:
                    f1:3b:99:48:7c:70:a7:48:cc:c8:6c:23:71:9e:db:
                    71:8f:96:09:73:60:14:55:47:61:97:7d:54:c1:8f:
                    f2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2A:D3:F3:5C:CC:0C:51:1E:9A:B1:AF:F3:56:DE:96:74:88:AC:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc234307-4436-3a1d-82b2-9c2339664400.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.61.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:b9:66:25:d0:8a:04:01:ff:55:eb:66:43:9a:e2:37:f0:ba:
         d8:72:a4:08:6d:bb:b5:16:8c:cd:40:99:85:46:d7:8d:0b:9c:
         e3:61:d2:12:ae:48:75:3f:5c:f8:08:55:14:76:a3:73:87:c8:
         c0:a9:1b:c3:62:0d:f8:bc:ef:88:31:cb:05:a7:81:e0:15:8b:
         77:43:e2:a6:85:5f:ba:aa:d2:b0:26:31:3b:fc:ec:13:dc:28:
         44:6b:6b:0b:19:fb:04:19:33:19:60:ac:85:2a:5f:1a:c8:c9:
         b3:93:f1:e0:67:ed:81:b9:9e:03:cf:34:ea:2c:18:93:0c:31:
         0a:ed:23:54:c3:18:7a:c9:fc:3d:78:aa:53:be:be:67:1e:f7:
         b5:14:d6:00:3c:aa:fd:9c:58:7e:a5:b0:ec:da:4c:bf:03:53:
         64:cb:51:a0:48:82:a9:e2:a2:c5:7b:d3:53:cf:05:bc:03:98:
         18:c5:26:7e:a0:80:8b:38:92:b0:08:e5:d6:c1:c6:f0:c8:7b:
         0e:3a:f9:13:ec:07:8c:2c:3f:64:2c:8b:e1:02:8a:83:1c:e7:
         6a:60:47:44:50:ab:87:83:33:a6:f0:2a:b1:9d:e5:8c:c2:7e:
         21:39:5a:31:68:25:33:fb:6a:74:23:9b:cf:52:07:03:5e:e2:
         77:0f:9e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:32:16 2024 by rpki-client on console-fra.rpki-client.org