Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/96c2d158-c3ea-3c40-b9b9-8b355b682476.roa
File:                     96c2d158-c3ea-3c40-b9b9-8b355b682476.roa (raw, json)
Hash identifier:          hNreIazLTL7I1M82TA3/F2wClOZjLKushP1QPbjLh5Q=
Subject key identifier:   B1:4F:8F:0C:50:A9:4F:B2:0A:04:DD:71:72:18:A0:2E:4E:15:37:C0
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285845E193CADEB057FA6D2B40F480
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/96c2d158-c3ea-3c40-b9b9-8b355b682476.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     62610
IP address blocks:        98.98.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:ca:de:b0:57:fa:6d:2b:40:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=d4b94ced-3cb5-4f4d-a715-2eee511774be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ee:ac:bf:61:93:c4:50:4a:b5:38:6c:a3:cf:
                    d6:b1:f7:21:b8:da:ca:8c:15:02:35:fe:35:fd:14:
                    87:7b:af:9f:08:82:51:4f:77:bc:e2:62:47:eb:f3:
                    ea:ef:44:01:15:90:1d:a7:4b:19:50:5f:cf:08:d1:
                    5b:90:86:8d:99:b5:32:f9:bd:0b:6f:92:6a:51:38:
                    52:4f:46:d2:3e:af:9f:68:9a:aa:7a:d6:ae:f2:3b:
                    fd:9d:2b:6f:c6:f3:6f:bf:41:37:83:e6:fd:d0:8d:
                    84:8d:49:61:ad:35:90:eb:33:69:8b:b2:da:94:a3:
                    02:e6:88:ff:1c:0f:54:42:2b:67:7d:2b:94:69:1d:
                    9c:96:7f:65:68:5b:ff:19:d6:10:4c:4d:bc:d7:16:
                    bb:77:51:63:07:45:b2:eb:26:e4:f7:e7:0d:47:3f:
                    b5:bb:c0:90:b0:48:de:36:35:58:2e:83:6b:e1:9d:
                    1e:61:4b:20:b8:4b:e7:77:de:75:f5:97:b1:c7:85:
                    3e:70:5b:da:77:69:85:61:c0:83:2d:64:5d:87:61:
                    2a:11:86:5d:1a:94:17:0d:91:97:c6:02:2b:84:bd:
                    6d:f7:67:f0:f6:75:1d:82:4f:bd:cb:2d:05:3e:b2:
                    f9:b5:14:96:15:94:94:33:ad:f2:64:0a:b9:26:b8:
                    de:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4F:8F:0C:50:A9:4F:B2:0A:04:DD:71:72:18:A0:2E:4E:15:37:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/96c2d158-c3ea-3c40-b9b9-8b355b682476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:d1:2d:26:73:47:60:1c:3e:46:16:c4:52:4e:04:ec:fd:d5:
         87:70:8e:17:04:76:7c:cf:03:2a:f7:66:42:22:46:83:2a:51:
         b6:50:c7:65:e2:c9:f8:1c:8a:e0:01:0e:8e:ed:76:78:1e:d4:
         a7:97:48:55:8c:1f:93:f8:4a:c0:cc:d0:65:87:3b:4c:11:17:
         70:da:25:01:68:e5:e1:fc:41:ee:b3:34:93:81:71:23:13:4f:
         b7:b6:7b:22:cd:c5:34:9e:9c:fa:32:98:e2:fa:ac:b5:19:d7:
         21:07:20:0b:86:c6:ec:6a:5b:24:ba:fc:5d:f4:6f:5d:dd:13:
         ce:80:c4:4a:ea:51:ee:cf:7f:2a:2b:5c:73:b7:4b:7b:e0:60:
         97:f9:e1:39:91:4f:fb:90:70:2c:ff:f0:55:f8:fc:47:3a:13:
         dd:91:da:63:9a:13:7c:5b:05:76:e2:a4:53:df:cb:d1:f5:ea:
         02:a0:00:dc:bf:b2:54:44:eb:53:1f:7f:35:33:2b:00:a8:23:
         a6:51:50:98:50:21:e5:ac:b6:9f:37:27:8c:fb:22:94:fe:1c:
         67:3a:ab:81:c7:a6:e4:e2:55:f9:ee:73:95:a3:b5:ea:93:42:
         86:ff:66:5b:94:7b:4b:e1:5d:54:05:7c:0d:07:a7:48:c6:09:
         7a:c7:58:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:14:34 2024 by rpki-client on console-fra.rpki-client.org