Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea08653f-839c-3f72-b8be-e9f5e135cba8.roa
File:                     ea08653f-839c-3f72-b8be-e9f5e135cba8.roa (raw, json)
Hash identifier:          X4t/2d+AC04pChPYVO7fzRA4JtL6UQJVe/qflZdA6Vo=
Subject key identifier:   39:4F:47:7A:E7:10:49:59:86:0B:85:0E:26:DA:E7:B2:8B:19:01:C6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004C1C28056DFA52DBF05F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea08653f-839c-3f72-b8be-e9f5e135cba8.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     13367
IP address blocks:        98.240.130.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4c:1c:28:05:6d:fa:52:db:f0:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=1a8db27a-645b-48e5-a659-e828f078015e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:16:e1:9f:8a:b8:49:11:2f:a8:df:1b:8f:af:
                    08:68:67:60:71:af:d5:95:91:f8:e6:a6:ea:8d:36:
                    cc:ef:39:f8:5c:6c:72:02:19:9b:f5:85:2b:28:e9:
                    7d:70:dc:27:45:b6:b7:13:f3:80:60:c1:48:2f:80:
                    56:1d:88:8c:13:c8:ab:34:fd:88:62:46:03:b5:8c:
                    10:e5:ef:1c:c5:ea:b5:42:b0:0b:b8:4f:54:f2:60:
                    f5:60:41:19:48:06:22:3e:26:0d:ee:17:c5:d9:a8:
                    41:22:c2:3e:d8:c0:39:af:26:6e:b6:a5:9a:6f:19:
                    63:f5:3e:eb:87:d6:c3:5d:60:9c:0d:50:dd:ee:2d:
                    fd:22:09:9f:c9:7b:31:44:7d:83:b6:a3:91:0f:bc:
                    c2:2f:22:21:a0:a7:fd:6b:6f:d2:f6:49:26:5e:6d:
                    93:dc:0b:af:05:26:d0:a6:8e:92:bd:54:27:ec:fc:
                    8a:b7:fc:26:4e:42:e8:ce:58:2e:13:00:f3:ed:83:
                    d1:f4:13:67:31:d3:41:d2:41:71:b7:3f:b7:2c:63:
                    f3:59:4c:c0:79:81:4b:df:36:54:e5:df:6d:a0:36:
                    0e:c7:79:e2:03:13:2c:84:eb:6e:51:23:1e:d5:87:
                    3b:fc:f5:b6:2a:22:9a:aa:7b:21:58:67:a7:78:aa:
                    37:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4F:47:7A:E7:10:49:59:86:0B:85:0E:26:DA:E7:B2:8B:19:01:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea08653f-839c-3f72-b8be-e9f5e135cba8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.240.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:a8:2b:bc:d8:da:b6:3f:53:3e:d4:a3:e1:15:a6:95:72:66:
         ba:ce:d3:6a:c9:52:5d:c5:fc:e5:10:f5:20:46:67:a6:f8:1f:
         d4:b4:e2:e9:eb:28:08:55:f5:1b:f7:bc:56:54:5a:ad:e3:02:
         bd:43:cb:02:de:2e:99:1e:20:8a:ca:d3:69:18:a2:52:16:c4:
         01:be:bc:b5:92:00:60:09:4f:2b:20:39:78:6d:3d:48:26:45:
         52:3d:27:a9:a4:14:64:c5:34:2e:82:8d:a9:6b:b7:2c:29:5a:
         5d:04:2b:a4:b2:ec:7c:60:26:b0:28:07:79:6d:72:f6:92:27:
         d4:ea:c0:16:09:89:16:54:03:03:e3:da:00:37:b4:c9:30:6a:
         45:e4:02:c3:01:81:35:78:ef:8a:61:4c:f8:6e:ef:de:df:39:
         01:b9:c9:da:82:44:b8:fe:44:68:60:ac:b8:ea:93:04:70:11:
         ea:a8:33:65:d3:e1:78:1d:d5:ad:c0:eb:c0:f9:f0:85:9a:7a:
         db:19:e0:1d:b1:14:30:92:c3:0a:35:78:2e:83:a1:96:9a:6d:
         2d:94:86:49:6a:73:b9:be:35:ba:4a:64:c4:b5:68:b0:10:ae:
         32:3a:07:bd:9b:5f:56:f9:b3:99:9f:c7:17:da:2f:04:b9:ce:
         d4:64:84:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:56:17 2024 by rpki-client on console-fra.rpki-client.org