Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b914816-16f5-38d1-9335-33e3f6b7aa7b.roa
File:                     0b914816-16f5-38d1-9335-33e3f6b7aa7b.roa (raw, json)
Hash identifier:          xsTxJqJcVWwYZGSyZTv28u0Xa6RnQWbk28a2Cn3VmCg=
Subject key identifier:   12:4B:A4:35:E8:86:C9:92:AB:C8:94:A7:C6:37:2C:1F:40:5E:9B:99
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D9C79637610D3E2E67380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b914816-16f5-38d1-9335-33e3f6b7aa7b.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        98.42.142.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:9c:79:63:76:10:d3:e2:e6:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=d69b09b2-e0d5-4c45-997b-610c01bc6569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b9:7c:d3:e6:7d:84:af:12:59:37:51:a1:d1:
                    9a:96:30:b3:0d:cc:f0:c9:37:82:89:fd:ae:07:ee:
                    ef:9d:de:48:a0:74:05:dd:65:bb:50:47:d2:19:7e:
                    fc:7c:8c:5e:b1:d3:ac:8e:c3:e6:a4:b1:2c:ed:dc:
                    6c:4f:b5:54:ec:63:07:f1:77:1c:cb:dd:04:b7:7a:
                    92:6b:a1:18:6e:49:e7:77:b8:58:11:78:dd:1d:18:
                    d9:31:5d:5b:90:cf:cb:67:57:7a:99:e4:4f:46:b3:
                    03:bf:2e:1f:61:03:b8:5a:b0:c1:52:e8:b8:61:3e:
                    0f:bb:a1:8a:51:31:cd:8b:9f:c4:1f:6d:1f:79:6a:
                    c7:1a:67:0b:a3:90:31:a3:c1:fe:32:47:0e:ff:7e:
                    f6:06:70:44:a5:30:dc:92:e3:0f:96:79:64:96:54:
                    db:6d:be:42:92:d9:cd:5b:b7:d6:9c:07:a0:49:a4:
                    27:a0:2d:9f:cb:53:35:e4:87:6d:eb:5d:bf:5d:74:
                    f8:ec:40:41:22:7a:a3:4d:77:40:27:6d:7a:48:05:
                    e6:11:cf:ef:ca:b7:44:c5:63:00:8e:51:db:89:37:
                    94:d6:41:31:b5:bd:62:47:bc:f8:5a:36:be:e7:95:
                    59:91:b2:24:82:e3:26:a8:01:0f:d4:2e:06:59:de:
                    f4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4B:A4:35:E8:86:C9:92:AB:C8:94:A7:C6:37:2C:1F:40:5E:9B:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b914816-16f5-38d1-9335-33e3f6b7aa7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.42.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:49:33:0b:54:37:f3:57:8d:cc:6f:6e:95:75:c3:79:cc:9d:
         62:67:67:95:62:a6:cc:d3:2e:75:c8:26:82:81:22:e3:91:c4:
         35:a6:da:62:14:c1:23:c7:af:0a:af:d3:f0:1e:b0:39:02:c7:
         03:2d:d2:69:bb:84:4e:77:c8:02:d7:81:9b:f5:29:c0:83:0d:
         19:a5:8c:40:b8:90:0a:1a:a3:4d:17:99:15:d5:d0:70:21:c3:
         5c:46:e3:06:fb:40:ab:75:c2:7d:40:9f:4f:d8:6f:f2:f6:20:
         b5:72:08:4e:b0:c2:4f:d6:af:96:18:03:69:3d:78:93:bc:f1:
         f9:30:3a:21:ec:ce:63:58:20:7a:fb:53:b6:70:56:3e:ef:ee:
         f5:de:f3:fd:9f:85:58:a9:7f:0c:f5:01:19:7b:05:f8:5d:e0:
         f5:3b:bc:f2:42:c1:48:49:23:f6:f3:44:24:7a:f1:ea:df:2e:
         f8:5a:ed:10:09:40:3c:da:9d:3e:92:7c:47:52:af:ad:81:35:
         c3:29:6d:7c:9a:e9:a4:4f:74:8e:5c:c7:a4:59:2c:66:b9:f1:
         f6:78:81:ad:ec:56:54:a6:30:3c:aa:fd:17:5e:6d:d6:68:fa:
         6d:c2:8d:59:a1:62:87:0b:d0:c8:1c:49:61:32:0b:90:c7:54:
         af:9e:8f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:18:44 2024 by rpki-client on console-fra.rpki-client.org