Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/f275c8a7-e426-3b4f-9c55-280d9bb1fbb5.roa
File:                     f275c8a7-e426-3b4f-9c55-280d9bb1fbb5.roa (raw, json)
Hash identifier:          okWOikQgIpetB4brofXJzO+sVk7DSitTtQ4zdgXmOfw=
Subject key identifier:   FD:FA:9E:A6:B0:F6:9A:46:92:7E:9C:68:D4:34:A6:41:F1:A5:EE:12
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F43285847A30BFB1189F6C01275B2F980
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/f275c8a7-e426-3b4f-9c55-280d9bb1fbb5.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     54913
IP address blocks:        103.98.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0b:fb:11:89:f6:c0:12:75:b2:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=925d4e86-4f8e-42e7-a6df-236e2ef62a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8f:a9:20:4a:c0:2a:df:28:df:19:27:50:e4:
                    95:46:c8:09:6c:3c:d2:f1:d9:cb:92:47:ff:0d:fd:
                    3a:5a:9e:48:5e:b0:eb:93:9c:6f:0f:ab:97:22:e5:
                    79:17:7f:cc:68:58:f0:01:18:a5:d5:0d:14:b3:1b:
                    e3:25:0c:4e:68:3f:ac:60:fb:8a:7c:e3:a3:f2:aa:
                    94:3c:22:81:ec:0c:52:62:f4:e4:95:b1:67:21:cb:
                    15:5b:e3:10:f7:49:d5:8d:1f:ba:8a:21:63:06:f4:
                    e4:22:fd:0c:3d:bf:e6:a8:3b:64:9a:e9:cb:ed:24:
                    41:c6:97:40:0e:6a:00:bb:12:69:4e:89:c2:c4:02:
                    b3:67:66:95:7b:a1:a6:ea:47:3d:4d:db:8f:c7:0a:
                    65:b2:81:87:55:83:1a:69:5f:fb:6d:d6:76:89:49:
                    50:a8:f8:ac:73:20:d3:de:3d:55:9c:62:6b:df:07:
                    0a:e1:b4:6d:6d:0e:a4:b0:f9:13:da:52:67:41:8f:
                    26:0b:7c:7f:7a:e3:0f:27:89:5e:76:7b:a3:4b:3f:
                    de:c6:52:89:62:29:92:4c:bb:fa:b6:d4:85:61:22:
                    64:54:22:b3:9a:9c:99:25:5b:5e:d4:3a:23:19:18:
                    e0:99:9f:28:bc:f4:54:6f:55:c3:51:ae:d5:77:ae:
                    35:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FA:9E:A6:B0:F6:9A:46:92:7E:9C:68:D4:34:A6:41:F1:A5:EE:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/f275c8a7-e426-3b4f-9c55-280d9bb1fbb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ef:81:c8:4b:c9:68:53:ce:09:c9:2c:d7:7c:a1:86:db:b4:
         43:f7:44:12:3a:8d:02:d3:e4:dc:16:62:88:67:33:0d:d2:bf:
         fe:63:c8:09:9f:de:45:31:d8:4f:6f:df:6e:19:1a:2c:49:3b:
         c5:b2:71:12:e9:1a:d9:93:82:39:d6:a0:47:ee:b3:42:20:8e:
         45:5c:96:3c:5c:d0:fe:93:39:b1:22:2f:97:44:57:ac:1a:9b:
         8b:28:66:e3:1b:9f:43:18:a6:7e:40:e9:c9:56:9f:d3:7e:ee:
         69:11:ba:a1:1a:a0:1f:1e:10:45:6d:23:6e:e9:ce:ed:2d:aa:
         d6:ba:fe:c6:f6:9a:e7:69:fe:b4:c8:50:87:54:84:89:9f:3d:
         df:d6:bd:fd:c9:e6:57:0a:69:2a:f6:9e:7d:b1:47:67:c1:e7:
         41:3d:b5:52:06:d4:01:80:2f:27:24:f3:1d:a5:22:f4:d6:1d:
         7e:7a:21:64:3c:39:f7:b9:ff:ad:bb:a7:33:59:34:29:c9:65:
         64:6b:3d:7e:ba:00:e3:77:df:e7:44:d5:e5:ed:58:c2:bb:ff:
         5d:42:f4:04:10:9d:15:49:dd:f5:73:c7:d4:95:54:28:21:ce:
         cf:f8:12:6e:f9:14:9f:4c:a9:13:66:87:ad:a1:37:ac:91:4c:
         9f:b1:4a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:13 2024 by rpki-client on console-ams.rpki-client.org