Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fc45172-f7fa-3343-82d9-cbec9412e3ba.roa
File:                     1fc45172-f7fa-3343-82d9-cbec9412e3ba.roa (raw, json)
Hash identifier:          NAzJEQSBx6HIx9UUpdGd22YQcopaUBSv2Wo9NvuVgc0=
Subject key identifier:   86:4E:3D:61:8C:2D:CB:97:F0:89:B7:55:47:FC:B1:3F:AF:51:58:4F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D9BF373F27031549AB720
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fc45172-f7fa-3343-82d9-cbec9412e3ba.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        98.42.0.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:9b:f3:73:f2:70:31:54:9a:b7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=9e6fbe75-d07e-478d-a66b-e2da5fbf78eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a6:81:2e:5e:dd:1d:c4:f9:09:5b:9a:0f:5e:
                    52:2e:23:b8:57:dd:33:03:a2:47:ba:d3:6f:ca:77:
                    a5:70:db:17:ce:ae:3f:01:1a:4b:32:b8:b7:cc:56:
                    21:8d:6e:83:6d:f9:9c:90:55:7d:41:5f:6e:05:eb:
                    2c:03:f7:13:d1:e1:94:6c:ce:97:af:74:3c:83:7a:
                    ec:5d:78:98:f1:5d:fb:fb:26:89:d2:b4:4b:79:91:
                    d3:6a:fd:c4:34:a2:c6:63:70:dd:dc:a9:59:dd:49:
                    12:67:d5:f1:00:2e:b6:be:21:a0:b2:32:8c:35:b2:
                    a1:df:f2:72:b7:43:cb:c8:38:75:23:71:05:e2:12:
                    77:ed:23:f6:de:5a:90:f7:31:95:a6:99:35:13:bf:
                    2e:69:91:0f:80:1e:f9:0b:9a:eb:22:8f:8f:5d:df:
                    80:8f:3f:b8:3c:f4:da:01:f4:db:09:eb:3b:3c:29:
                    65:84:dd:21:62:fa:9e:cb:12:b2:e1:29:3a:eb:e6:
                    fc:91:ac:b0:ed:48:25:31:23:8e:e8:6f:cf:ac:d4:
                    6f:23:72:93:ce:25:e9:dc:66:e6:95:38:3b:9c:9f:
                    a0:f1:de:b6:af:17:fa:36:f8:1d:61:6a:0e:8a:d7:
                    e1:2d:b0:85:9f:d6:f2:ec:cd:36:4f:9b:9d:fc:54:
                    76:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4E:3D:61:8C:2D:CB:97:F0:89:B7:55:47:FC:B1:3F:AF:51:58:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fc45172-f7fa-3343-82d9-cbec9412e3ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.42.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:3d:ce:2b:f7:6b:02:66:f0:60:fc:72:2c:72:93:e1:05:28:
         b1:f8:55:f7:a4:e3:21:67:9d:1a:28:43:f7:7d:cc:83:99:32:
         6b:8f:a7:3f:10:b6:e0:62:61:33:bd:ac:51:8d:6b:09:90:a8:
         e2:ba:64:4f:be:8f:6a:ac:b4:05:d8:4d:cf:10:b0:44:4c:54:
         0a:ca:00:54:9a:60:a8:a2:48:47:27:c9:36:0a:88:2f:2d:56:
         f9:5c:95:11:bd:0a:0e:a8:a6:57:7b:46:fb:b2:09:42:22:6c:
         be:65:19:37:52:51:be:a4:f8:25:46:b6:a7:7e:e2:36:6a:04:
         48:3c:6e:ff:e7:77:5b:0c:d3:7a:c2:79:cc:2f:64:a0:66:a3:
         20:56:79:5f:be:3b:b5:3d:c8:27:d4:ca:92:7e:51:83:0f:2e:
         cc:e3:6a:23:01:ca:dc:b8:6a:5a:c0:e8:2d:4b:6b:1e:66:7c:
         ca:da:ab:49:13:ee:3a:52:a8:5d:25:16:51:71:72:af:28:2c:
         2e:d1:b3:ab:96:31:a7:94:7a:db:7e:23:a6:82:60:9b:0d:84:
         d1:ee:0f:b1:cf:93:0c:7f:ab:e2:2f:e3:00:64:7f:1c:8f:48:
         f3:e8:83:f7:17:53:69:9a:de:1c:49:cc:13:74:d7:22:db:c2:
         08:54:c2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:50:46 2024 by rpki-client on console-ams.rpki-client.org