Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/6924619e-b6ce-3fb0-92e0-c20bbce6e352.roa
File:                     6924619e-b6ce-3fb0-92e0-c20bbce6e352.roa (raw, json)
Hash identifier:          9UYb7lx13nkRFTFolxEXxwt0Nf8E2czW2UV9x5N/+X4=
Subject key identifier:   21:29:19:38:F8:FB:79:30:68:E0:D4:24:45:DC:B9:7A:25:25:51:89
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F4328584754E0CFFB3436A6A6F385C740
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/6924619e-b6ce-3fb0-92e0-c20bbce6e352.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     14593
IP address blocks:        98.97.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:cf:fb:34:36:a6:a6:f3:85:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=c73dbe1d-e944-41dd-9775-261ea1875648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e4:96:4a:4f:86:41:ce:b2:5c:ef:ea:75:4b:
                    38:97:f4:e4:94:5d:39:c8:7e:af:1f:db:21:ea:2f:
                    83:ed:f9:90:f0:a2:2d:56:78:77:e0:71:8b:d7:54:
                    6c:ea:90:9a:95:cd:60:b3:b7:e8:01:4b:d0:72:cd:
                    40:9b:4e:b7:16:ed:a5:41:2e:b0:f7:c0:dc:c0:c9:
                    84:79:0e:e0:14:96:45:04:ee:0a:16:2d:66:64:f6:
                    d1:12:19:26:46:02:9f:99:b5:7f:be:4e:b8:39:16:
                    a8:49:89:6c:13:41:58:47:ee:48:25:10:0c:ef:b3:
                    b1:a8:89:2d:30:6a:c8:66:64:1b:a8:13:c6:5a:54:
                    bc:bd:41:06:45:01:8c:4c:6b:54:ea:33:0b:1e:4d:
                    fb:1e:13:88:48:c7:52:f6:ff:2b:12:c1:9a:e8:ea:
                    a2:22:4a:ca:a4:75:0a:91:92:9d:a9:c1:20:7d:0d:
                    b3:7b:cc:44:2a:da:99:2c:11:1a:19:4b:ca:b9:e4:
                    14:44:9b:71:58:a3:bf:f2:e5:bf:ca:d1:55:a3:ae:
                    bd:46:d8:f8:07:96:3f:a8:55:59:d0:75:ac:74:78:
                    29:b6:8e:b8:b2:08:8a:91:bb:c1:bb:58:83:65:20:
                    9e:7c:cb:8a:bf:e7:12:55:f0:87:3a:0b:ce:96:c2:
                    5e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:29:19:38:F8:FB:79:30:68:E0:D4:24:45:DC:B9:7A:25:25:51:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/6924619e-b6ce-3fb0-92e0-c20bbce6e352.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.97.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:64:7a:60:61:89:8a:c6:6f:0a:4d:f3:b1:fb:19:cc:b1:10:
         fb:be:84:01:70:c7:62:e4:7c:ee:36:5f:20:ab:f7:5f:67:c1:
         cd:42:4e:2e:c1:74:49:95:53:0f:e8:5b:f9:a4:c9:a9:49:a8:
         ee:f8:cd:e8:d4:ee:cc:6a:bc:36:c6:11:b1:0d:d9:1b:18:b8:
         cb:fe:7c:e3:bb:34:a5:1e:ab:67:bd:ff:97:0e:9b:f1:85:f1:
         cc:1b:37:05:5a:68:b8:e4:7c:0a:3d:45:3d:5c:af:2c:59:e8:
         8f:1b:03:bd:7d:64:a8:68:ba:20:8f:63:b6:68:ef:85:2d:b9:
         e6:36:28:9d:9c:a3:95:d7:2e:6a:82:1b:a8:54:3b:99:57:27:
         df:1a:62:c2:26:2e:e3:a1:49:f5:fc:30:ae:40:22:f2:60:95:
         bc:58:83:e7:c6:86:06:66:e1:da:eb:ef:36:9f:cb:8f:80:89:
         5a:3f:8b:24:26:19:81:cc:f8:ed:6c:91:90:ea:ec:f0:0e:4f:
         02:44:2a:53:ec:90:85:59:6b:31:d3:d7:0a:9a:cc:0e:08:58:
         2d:ca:0e:5d:8a:ab:d1:51:4f:a8:34:d4:5d:f5:c3:e0:00:4c:
         28:8d:18:14:87:7b:89:fe:58:13:4b:50:bb:74:a4:0d:e6:cc:
         f0:79:3c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:04:13 2024 by rpki-client on console-fra.rpki-client.org