Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0195446b-1cb6-3f6d-8b61-79e071890606.roa
File:                     0195446b-1cb6-3f6d-8b61-79e071890606.roa (raw, json)
Hash identifier:          OKqbtY5lQ4+FfK7UUobONFDJbCMVoucxZuQaowHgg3Q=
Subject key identifier:   66:D9:BE:27:02:F2:71:60:D7:90:F7:D0:17:DA:D1:4E:D6:6E:90:55
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF85555C5EE19A9826E7780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0195446b-1cb6-3f6d-8b61-79e071890606.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22909
IP address blocks:        98.40.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:55:55:c5:ee:19:a9:82:6e:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=4c2cc3ba-6b56-44aa-ac6f-2109dc59f627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d7:c6:24:f2:fd:81:06:c2:d2:44:49:91:1a:
                    f4:63:6e:a1:34:59:35:8e:45:20:45:c0:77:a8:ca:
                    fe:96:64:46:79:69:2e:e6:42:9a:11:de:52:b2:ca:
                    82:49:84:bb:ae:5c:2b:9c:86:4b:56:e8:22:d1:61:
                    d8:61:3a:9f:88:b9:86:63:54:26:60:e5:8d:51:66:
                    96:af:e0:0b:1a:e7:01:8b:63:17:ad:c9:34:5e:ce:
                    72:b9:c5:20:ed:49:ba:1f:60:55:58:d4:7d:55:5d:
                    b8:33:6f:d5:0e:c8:7c:16:33:ba:e9:84:c5:32:cc:
                    f7:78:af:b1:a9:31:7f:a6:14:96:69:33:5f:eb:9d:
                    9a:97:96:f0:d9:9d:82:b1:d2:9c:80:00:75:c9:1c:
                    a6:16:d2:12:96:11:fe:aa:99:f7:b0:fe:1c:14:68:
                    ce:fc:68:fb:1b:61:a3:89:75:c6:8d:2e:7b:b4:0b:
                    9a:83:e6:4a:5a:61:89:ca:ab:a0:89:78:70:49:22:
                    dc:49:e8:9e:75:30:9d:43:0b:16:51:7a:b0:61:fd:
                    65:20:3a:f2:3e:8a:b4:5b:95:69:06:fd:ab:89:48:
                    0a:ae:ae:c7:1c:a9:49:85:09:52:cf:f1:cc:2b:15:
                    15:68:55:fe:96:fc:d5:af:53:cc:39:2c:3a:cc:17:
                    a9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D9:BE:27:02:F2:71:60:D7:90:F7:D0:17:DA:D1:4E:D6:6E:90:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0195446b-1cb6-3f6d-8b61-79e071890606.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.40.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:68:84:94:75:b0:7e:3f:21:85:ca:7e:94:41:12:b0:6d:5e:
         49:d1:09:cc:3d:e3:a2:18:38:8c:42:8d:77:c8:87:85:67:82:
         15:04:c6:ee:33:68:96:74:cd:4f:f4:0e:83:8c:14:2b:26:49:
         41:ba:4b:d6:f8:98:ec:1a:9a:b5:86:32:e7:eb:f3:7a:be:78:
         4d:5f:5b:5b:da:38:ef:c2:26:f5:2d:8f:32:db:61:1f:ca:3a:
         74:d2:12:e1:22:53:97:01:e2:4e:f9:b7:78:2e:d6:6e:f4:94:
         86:40:d1:dc:5f:04:ea:86:e8:f9:90:b5:19:e1:47:f8:fb:12:
         c5:28:50:8b:77:5b:93:6d:42:6c:38:09:bc:98:c2:3f:6b:39:
         06:8d:a7:d3:9a:08:22:ea:c2:aa:b2:25:8b:6b:dc:d0:a1:91:
         73:af:18:29:28:dd:86:ce:b1:94:75:3d:35:7f:d8:fa:11:d4:
         8d:8c:88:fa:55:a3:a5:13:dd:37:cb:24:9b:51:bb:61:ab:85:
         27:63:f7:60:d5:87:2e:17:07:bf:68:b5:be:ef:93:53:b7:7e:
         d8:8a:2f:4c:f0:6a:1a:21:56:61:75:07:a8:0b:30:9a:a7:be:
         db:bf:f3:fa:4e:be:a9:a8:ce:6b:22:f7:1d:52:0e:35:45:bd:
         e2:35:67:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 03:50:48 2024 by rpki-client on console-ams.rpki-client.org