Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14127a6a-39fc-39b5-b2da-b01b09c11a50.roa
File:                     14127a6a-39fc-39b5-b2da-b01b09c11a50.roa (raw, json)
Hash identifier:          oI7OCDChxiHFFO/12qUx76gb3mx4ehcY8jOoHaSfJr4=
Subject key identifier:   35:BA:43:AA:94:7F:05:EC:54:AD:89:79:1A:AD:E7:D2:93:18:5C:AD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848116FF020E5A02B14B04FEFE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14127a6a-39fc-39b5-b2da-b01b09c11a50.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     22258
IP address blocks:        98.239.16.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:6f:f0:20:e5:a0:2b:14:b0:4f:ef:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=b208ed0c-6a4c-4513-aac0-4c5bbdc2658e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ba:7e:77:b4:61:d2:c4:79:50:81:9d:db:62:
                    60:89:34:d7:2d:af:93:ec:f1:94:99:ce:b4:7e:b0:
                    ca:75:63:71:ca:a4:53:8c:71:ca:38:fa:82:d7:18:
                    73:0b:9a:94:7a:a1:61:79:c6:16:c0:c4:c3:6e:4a:
                    f3:6a:ee:98:fe:e7:7d:5a:da:57:05:9c:81:a3:dd:
                    ab:de:22:d4:04:ad:f1:00:98:09:c8:5d:99:4b:94:
                    2a:2d:ae:a9:4c:94:32:1d:91:45:a3:73:c2:ad:b6:
                    3a:ed:a4:02:56:17:0a:c5:eb:3b:1f:5f:f0:0c:d7:
                    ce:b2:a3:15:5e:d5:e3:81:30:8a:ed:52:fc:98:3e:
                    9a:85:2a:ed:f7:ab:df:94:62:ea:b2:30:c1:b6:50:
                    df:12:ef:02:74:69:94:a7:8e:2e:3c:5f:7b:54:e3:
                    bd:d6:69:5e:b8:c8:8a:9a:40:f6:cd:7e:ff:4a:82:
                    d2:9a:05:60:0e:c4:d2:ab:0b:7f:e8:54:d4:b0:ac:
                    67:09:84:19:d2:ff:82:10:9f:c3:d6:ad:08:f6:58:
                    3b:03:8e:13:fc:6f:61:28:88:ba:30:99:54:54:f3:
                    a3:70:61:8a:3c:ed:c1:71:58:31:0e:ff:89:22:7a:
                    bd:f3:01:90:29:1c:50:4b:45:3e:80:bf:83:aa:8b:
                    dc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:BA:43:AA:94:7F:05:EC:54:AD:89:79:1A:AD:E7:D2:93:18:5C:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14127a6a-39fc-39b5-b2da-b01b09c11a50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.239.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:c8:54:45:ae:ff:a0:f7:1f:83:5e:52:7e:35:97:70:03:fe:
         ec:e1:67:4e:d0:31:06:ca:bf:20:8a:93:37:28:a8:64:a0:72:
         65:d3:46:99:b4:c7:43:76:16:e7:a9:cf:75:86:d1:be:1a:14:
         88:ce:76:5a:88:55:3e:ea:0e:aa:0f:84:d7:a5:3d:bf:42:6d:
         41:15:2b:1d:45:cf:c6:00:ab:93:f5:bd:28:48:44:2e:e2:6f:
         7f:c2:77:18:13:3c:02:77:df:d4:36:83:4b:b8:7a:8d:7e:d5:
         17:fa:96:23:76:0d:1a:43:d4:fe:49:ad:30:7e:0e:ed:6d:15:
         7b:e3:70:91:cc:ee:c6:62:6f:ae:e1:97:bf:32:bd:ec:6a:bc:
         83:19:92:15:22:3a:88:e1:bb:bd:69:01:74:d8:ca:6b:fc:99:
         cf:98:5f:d9:2b:c0:9e:3e:6f:49:8f:f5:f2:16:0d:9b:14:60:
         37:69:8f:7e:e2:b1:b1:3e:ed:90:54:cc:75:00:86:d7:df:9a:
         cf:3d:50:b6:13:e6:a8:d6:25:5d:5e:2c:12:72:b5:61:78:ad:
         95:14:70:24:f2:ca:8d:70:53:91:bf:91:ae:f5:bc:ef:2c:ca:
         6f:14:98:b4:d7:37:af:e2:b3:15:00:77:71:41:97:e7:7a:ab:
         13:f1:dd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 03:53:15 2024 by rpki-client on console-ams.rpki-client.org