Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/275b6e8d-79ba-3f77-8cc6-44b08daf5387.roa
File:                     275b6e8d-79ba-3f77-8cc6-44b08daf5387.roa (raw, json)
Hash identifier:          /XNsrO7r8CgRNdR10j3z8D4/yLjH9dQA76oNTFU31iU=
Subject key identifier:   12:07:91:F2:71:79:DE:29:43:99:C2:DA:C8:65:2A:99:98:89:F8:62
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D8DA50100ED388A1216CE
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/275b6e8d-79ba-3f77-8cc6-44b08daf5387.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        98.234.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:8d:a5:01:00:ed:38:8a:12:16:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=0eea8569-c404-410d-8590-629f83c703ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7a:46:0a:54:59:d8:b9:fd:ac:23:5d:69:d4:
                    3f:6b:ac:60:9f:e6:c9:8c:64:47:03:18:37:b5:46:
                    6a:8d:6d:b8:d0:67:21:5d:f3:59:c9:cc:38:bf:78:
                    aa:19:6a:1e:23:9d:e2:c5:1e:a4:71:4c:8d:53:c6:
                    b0:06:85:d4:e0:79:f7:c1:f3:ec:d2:6e:db:33:35:
                    d9:ef:6d:59:e2:da:e4:61:08:07:f4:4d:f4:81:49:
                    2c:50:df:75:6a:1e:62:e8:89:a6:f3:df:de:17:0b:
                    49:f0:e5:44:af:e4:f2:56:39:b8:df:53:09:10:55:
                    d8:49:c8:11:d1:bb:4b:8c:6a:4e:3e:7d:8f:89:f5:
                    44:39:a3:7e:02:bb:a8:7a:4e:9d:9e:29:15:74:03:
                    9e:f8:f1:0e:96:b9:a3:e3:61:fc:b6:f7:95:63:4f:
                    bd:f1:d2:d3:df:a4:60:bd:af:82:6d:1c:22:4e:0f:
                    b4:3e:ab:a7:21:5d:89:54:aa:f0:99:db:5c:9a:ac:
                    f6:ee:2d:75:44:61:e6:fd:6f:5e:f2:b4:91:70:dc:
                    1a:24:22:bc:66:3a:ab:b2:94:c6:49:a0:14:e6:2b:
                    52:2e:d3:5a:1d:ec:cc:f0:00:ca:54:67:69:08:26:
                    d0:f1:5c:46:b4:fd:c5:eb:69:01:9e:75:f6:47:1e:
                    a1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:07:91:F2:71:79:DE:29:43:99:C2:DA:C8:65:2A:99:98:89:F8:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/275b6e8d-79ba-3f77-8cc6-44b08daf5387.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.234.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:3e:35:89:8a:df:97:ab:94:02:ba:b5:7a:cd:07:57:58:b2:
         de:70:88:71:0b:e3:cd:98:7f:b8:2d:0b:02:94:58:f0:7b:52:
         c4:20:d2:b4:59:a4:ee:81:88:fa:ec:53:2a:e8:39:d5:ec:e8:
         18:2b:77:ff:58:fe:20:4f:cc:b6:d5:1c:59:70:50:49:ad:fb:
         d1:da:48:59:6f:5c:11:a4:c3:a8:fa:6d:16:dd:6b:d0:21:d5:
         69:21:a5:eb:c8:4b:9e:af:c0:99:fe:f0:cb:9f:e1:7c:55:8b:
         1a:da:3e:ba:a3:95:c6:bb:2b:39:2d:6c:26:ec:7c:34:02:aa:
         22:3e:20:f6:b4:3a:50:d9:02:9c:b4:44:f2:f2:b9:77:14:6f:
         38:94:c8:88:95:41:d2:77:df:26:c8:00:f2:a5:6f:7a:fe:7d:
         1e:a6:83:b4:a2:0f:71:ee:53:6d:35:1c:d3:0c:e0:d8:e6:a4:
         75:f4:02:12:da:ea:96:02:c1:39:c1:f3:49:3c:99:e4:e8:f8:
         e1:cc:9e:b2:c7:7c:6b:7a:5a:fa:2a:79:f4:5a:56:a2:25:cb:
         61:ed:3e:a5:a3:7f:16:be:70:e9:fa:e2:9b:da:21:a6:cd:00:
         a1:4d:4b:b6:54:82:41:26:48:03:f3:be:32:28:51:de:14:c7:
         7a:28:2d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:21:08 2024 by rpki-client on console-fra.rpki-client.org