Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0106caf-3b1c-3a47-b2ce-432316887375.roa
File:                     d0106caf-3b1c-3a47-b2ce-432316887375.roa (raw, json)
Hash identifier:          IyVy+uuoUnpJK3Ux8urvaRpmoqloqFEaNG6f5koBXFs=
Subject key identifier:   F8:5B:7B:8E:C2:89:72:06:92:AA:6B:6A:A7:2C:87:76:20:EE:EA:54
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004B1F5D121BD2076B725900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0106caf-3b1c-3a47-b2ce-432316887375.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22909
IP address blocks:        98.240.36.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:1f:5d:12:1b:d2:07:6b:72:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=488eccab-db21-4296-bbe7-41e92de87fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d9:3a:00:01:a8:e1:5a:46:56:7a:9b:00:e8:
                    6f:75:cf:e5:08:5e:62:a5:99:46:4b:b6:3a:53:2a:
                    fa:95:6e:b9:82:10:72:87:2c:d6:71:c2:b6:ce:cc:
                    02:c1:e5:fe:2f:55:cb:f1:45:1d:3d:fe:74:fb:4c:
                    02:e9:19:1b:9c:b2:6a:10:0f:0a:84:d2:74:88:66:
                    f5:d8:40:4f:f0:52:b7:8e:0a:87:df:5b:9a:e0:fc:
                    92:49:83:fb:01:aa:4f:7c:15:3a:dd:47:be:9d:f4:
                    30:62:b7:2e:fa:d7:b7:ef:73:84:b2:48:5a:b9:db:
                    93:59:3e:77:f2:94:82:c9:88:07:3c:e3:3e:9e:3f:
                    b9:a9:79:89:56:7e:98:b6:78:af:65:11:b6:11:60:
                    83:5c:10:ec:f8:23:d4:b2:f0:e0:8a:ba:de:4b:bc:
                    7a:c8:f4:9e:8d:a0:0c:30:12:d1:83:9a:ad:78:83:
                    70:64:04:51:4f:20:63:ae:48:06:09:51:b9:d6:fa:
                    01:64:07:31:5c:f0:a2:01:f0:94:1c:b2:85:69:06:
                    f2:ec:fb:6b:eb:09:d5:e6:2c:79:c1:c9:4d:f4:e6:
                    a7:32:8b:b1:f5:34:5d:a7:dd:b0:4a:38:f4:e3:67:
                    a3:9c:8c:e1:15:a3:d5:9d:94:43:7c:0e:3b:02:a5:
                    7f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5B:7B:8E:C2:89:72:06:92:AA:6B:6A:A7:2C:87:76:20:EE:EA:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0106caf-3b1c-3a47-b2ce-432316887375.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.240.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:cd:86:f5:b5:94:c9:b5:7e:16:9c:f9:52:e6:40:ec:bc:f5:
         fc:3e:71:2c:6a:a0:fc:75:1f:ed:c5:e2:66:29:ec:e6:1e:fa:
         28:a6:f3:3e:fa:53:18:7d:99:18:78:f6:08:ec:86:ad:55:50:
         33:69:b2:00:b3:fa:38:e9:69:25:06:42:d9:11:39:6f:80:2d:
         b4:0a:7f:de:d2:fe:7a:b6:4f:01:38:8c:ae:b1:61:b4:5d:35:
         70:d2:c9:e6:4d:9f:9d:0b:0e:c9:53:88:4f:7f:5f:7c:73:c3:
         59:b5:f6:9a:0d:38:73:ec:e2:0b:64:1b:de:22:aa:ce:a9:8d:
         b7:56:f5:47:0e:a2:44:aa:fc:5a:fe:5d:c9:d5:3f:ca:25:67:
         2c:6b:fd:94:d7:74:39:67:2d:a9:37:65:01:7b:15:62:38:4c:
         02:30:ae:f1:26:97:6b:84:97:f6:4e:e7:17:ed:2e:c7:fc:d1:
         f4:d4:57:11:60:ec:bd:18:ce:a5:b8:1d:cd:d1:d9:9b:af:46:
         aa:36:cb:ab:10:26:8f:36:9c:44:81:28:22:9d:dc:e6:ac:ab:
         f8:a4:30:c2:b7:8d:cd:56:54:12:d6:1a:63:62:ee:d3:27:cb:
         4b:fe:aa:32:28:03:20:3f:c9:d2:06:40:2e:a8:2e:36:2d:00:
         f6:73:46:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:32:47 2024 by rpki-client on console-fra.rpki-client.org