Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/6924619e-b6ce-3fb0-92e0-c20bbce6e352.roa
File:                     6924619e-b6ce-3fb0-92e0-c20bbce6e352.roa (raw, json)
Hash identifier:          Z7YW6Q39Dr2SKDVwl86RfmQgN9gYaVObPxQgpWqmvlE=
Subject key identifier:   6E:95:31:22:AA:83:43:9E:6B:EF:DE:14:FA:58:22:10:E9:25:29:16
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F432858459633542580D62F6370D74160
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/6924619e-b6ce-3fb0-92e0-c20bbce6e352.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     14593
IP address blocks:        98.97.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:54:25:80:d6:2f:63:70:d7:41:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=aca7ca2f-54e7-4267-9c53-9328ccad93cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:22:9d:21:ca:12:22:ef:8b:c1:f9:62:84:
                    23:8d:b8:c1:f3:5e:00:3c:4a:49:42:01:9e:2a:08:
                    62:60:db:01:56:19:b6:d8:e7:26:fb:88:56:b2:39:
                    a0:67:86:5f:22:17:64:a1:1a:8d:e5:20:bc:40:cd:
                    e7:3c:d4:e9:3d:b1:34:7d:e2:b4:98:6c:a0:b9:d4:
                    ba:eb:da:c3:63:cf:eb:69:d8:81:7c:13:83:8e:e3:
                    20:8e:2c:f0:3a:96:82:bf:17:3d:64:d6:16:c2:48:
                    b7:d5:94:d3:4f:55:44:98:ff:61:27:81:ce:f4:5e:
                    ed:19:01:ca:a5:f5:bd:48:84:22:0a:0e:01:ce:2c:
                    bc:9d:34:29:1e:fd:0c:e5:c5:31:4e:ae:e7:8d:c6:
                    bc:23:b3:76:6c:d9:55:3b:bf:a4:f3:da:2c:46:de:
                    e0:ea:d0:50:cb:bf:92:d0:59:35:4f:4f:2c:6d:19:
                    2d:51:4e:f5:50:fd:7e:67:ab:48:57:71:35:62:ee:
                    6e:e2:01:7f:84:9f:8e:6a:7f:e1:c9:e0:16:c0:b5:
                    c4:dc:05:85:7d:d4:51:f8:8d:15:60:d4:ae:0b:1f:
                    04:29:f3:b2:96:d2:7e:f2:4f:b0:5a:03:e0:40:32:
                    f1:2e:39:42:44:ce:2e:23:82:12:ae:a9:ee:12:90:
                    d5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:95:31:22:AA:83:43:9E:6B:EF:DE:14:FA:58:22:10:E9:25:29:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/6924619e-b6ce-3fb0-92e0-c20bbce6e352.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.97.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:cb:52:95:ba:9d:24:c5:7a:39:0d:22:93:65:71:e9:83:be:
         77:71:62:19:8a:ae:f2:20:85:47:81:89:8e:48:2c:65:8e:4b:
         f5:b4:b8:96:de:31:35:40:3c:ea:46:d0:07:94:2c:b8:02:7a:
         a2:fe:e5:d8:5d:06:ca:1e:e6:2c:e2:a8:0c:15:e7:d5:b6:93:
         93:2b:d4:bc:b4:54:31:79:1c:17:c8:67:8b:5d:99:ea:bf:61:
         3c:42:d2:22:94:be:17:6f:ea:e8:21:dc:fa:46:2c:b7:28:be:
         b1:62:d9:43:5d:a6:8a:18:47:a0:6a:0e:6d:93:1e:6e:14:5e:
         15:01:7f:e3:37:de:15:d5:74:40:7e:da:68:c2:a7:33:8f:f3:
         7d:22:16:c4:cb:12:c0:e4:ff:ed:1f:89:e6:a8:08:b2:bd:6f:
         b3:77:d2:f0:df:37:b0:7b:89:78:43:f6:d4:89:62:db:fe:2b:
         41:1e:05:fd:99:a0:da:5b:64:d2:58:8d:f5:58:3b:9c:80:d6:
         5f:3c:75:d3:e3:b0:9b:8d:92:9a:f1:ec:b2:6c:d6:ed:20:fe:
         90:20:7d:32:a1:8d:32:fe:73:27:8e:38:b7:f9:bb:78:cf:c9:
         22:ff:49:bb:3d:1c:5c:e1:38:4d:4d:7a:1a:db:af:38:06:1b:
         e2:2e:b4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 19:14:04 2024 by rpki-client on console-fra.rpki-client.org