Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10abf6e9-761e-3a06-b557-dc3321c9477c.roa
File:                     10abf6e9-761e-3a06-b557-dc3321c9477c.roa (raw, json)
Hash identifier:          HibB3z2qQqV/Atispt2V/Ro2aTETUoatBbIgeh86lqs=
Subject key identifier:   D2:0A:FD:36:67:93:D8:B5:B0:32:DD:F0:79:D3:DE:49:23:29:0C:8D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C75AF8DDFC0041F3A30780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10abf6e9-761e-3a06-b557-dc3321c9477c.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        98.229.192.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:5a:f8:dd:fc:00:41:f3:a3:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=b6ff2a2f-990d-4e0a-9c8d-5207af287d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c7:e2:26:50:3f:e7:97:5a:1b:15:e3:26:12:
                    96:bc:81:28:d9:9f:e2:a9:62:6a:54:e4:22:0c:cd:
                    ad:d0:19:d0:48:9e:34:2f:2a:17:43:ef:88:c7:a9:
                    76:01:47:c8:19:d2:79:50:87:8d:e5:99:cd:41:36:
                    af:b3:7e:af:af:b1:f3:dc:d1:86:8f:e9:29:69:bf:
                    37:20:14:c4:c3:72:50:2f:ec:d4:58:43:aa:03:78:
                    9c:85:b8:bb:8d:e5:45:1f:ff:c7:1c:57:dc:bd:1e:
                    af:82:f0:f6:63:05:41:19:d1:cc:b6:76:45:b3:07:
                    55:51:38:a7:d0:ad:76:8b:93:c1:1e:ae:47:7f:34:
                    92:57:37:ab:c4:63:a8:2c:67:f3:11:9d:28:fb:3c:
                    73:77:74:dd:07:31:6e:da:5a:df:64:79:99:b4:bb:
                    de:d8:c5:de:2c:5b:1b:74:0d:81:2b:52:0e:62:a5:
                    15:0d:22:de:08:6d:fb:a1:ef:bc:29:73:6c:fb:69:
                    a9:7b:2f:5a:61:8c:27:3f:f3:34:14:c2:5c:7a:70:
                    9e:0b:76:81:9c:06:b4:12:f8:0d:fd:7b:98:f0:2e:
                    1b:94:62:53:6a:f0:e7:fd:73:ce:e2:fb:b5:80:d0:
                    69:e9:b6:69:a9:2d:c4:fa:2e:22:c4:10:4f:e6:ca:
                    9a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0A:FD:36:67:93:D8:B5:B0:32:DD:F0:79:D3:DE:49:23:29:0C:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10abf6e9-761e-3a06-b557-dc3321c9477c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.229.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:de:0d:ca:61:b3:fd:93:62:7e:d2:08:0f:99:aa:5a:5c:cd:
         b8:7f:ac:04:ff:c0:d7:04:d8:44:7f:19:e9:70:88:7f:33:71:
         11:ce:45:f9:59:cc:13:2a:e4:5e:7d:ea:0d:88:8a:e3:ee:8a:
         fd:46:12:da:40:0e:28:b6:a2:c7:aa:44:22:c6:78:8d:7c:14:
         f0:59:01:75:f9:56:23:b4:cd:40:b9:a9:df:fa:9e:2a:7f:f0:
         12:31:3a:f1:02:7e:57:f3:13:01:bc:cd:d4:0d:c6:95:da:50:
         29:63:8a:5d:4a:44:c0:5f:f3:3c:46:2e:1c:63:1c:8d:a9:47:
         3e:ff:fc:17:81:02:21:db:c8:9b:a9:04:cf:3e:50:e7:44:94:
         b1:c9:9f:7f:54:03:50:47:ad:39:52:db:71:83:9c:07:8c:a1:
         2a:8b:54:a8:63:85:a7:80:9e:0c:4b:9f:cb:1c:5d:aa:ad:27:
         b5:37:df:d6:ad:e7:68:69:1d:24:3f:3d:cc:62:46:ec:20:d7:
         88:be:49:be:68:f9:c3:0e:23:72:d0:c1:67:c1:92:8a:0f:1c:
         e4:d7:79:24:5f:f0:4a:28:1f:53:6e:e9:fc:45:a5:d5:82:ef:
         54:5c:12:7d:a6:98:a1:d4:f5:89:c2:a5:8f:6e:65:b0:fa:d7:
         23:b6:29:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:49:29 2024 by rpki-client on console-ams.rpki-client.org