Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27f22749-2b70-3377-bb57-b43ff5a0a540.roa
File:                     27f22749-2b70-3377-bb57-b43ff5a0a540.roa (raw, json)
Hash identifier:          Ik6cabm3CbV1U7QL8MPFVzAtEG/GBzJtU1RGjmjrdVs=
Subject key identifier:   C9:FE:04:F4:7E:39:80:4E:73:62:EE:29:2A:63:6C:33:C1:02:16:D3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C878CC97963E0EB0961B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27f22749-2b70-3377-bb57-b43ff5a0a540.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        98.44.50.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:78:cc:97:96:3e:0e:b0:96:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=43dd4895-4102-4328-9839-f3444d3fa9c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a3:82:34:d3:f7:76:ea:cc:7f:9b:ad:31:c7:
                    a8:45:f6:d5:e3:7e:7f:0e:cf:16:d9:c5:6d:d3:b9:
                    93:7e:89:96:a2:ad:f2:07:75:48:83:29:7f:58:b8:
                    9c:e9:8d:a5:a3:d5:e7:b5:cc:76:cf:ed:8b:88:57:
                    d5:49:3f:88:3f:5e:a9:ce:b7:6a:4a:04:7e:92:d7:
                    36:78:ec:12:d8:42:39:b6:ca:b6:4d:17:e0:99:80:
                    b5:20:6c:62:e1:4c:db:54:52:68:ee:66:a1:82:be:
                    d8:67:85:23:c7:84:e5:fa:3a:f5:b3:3e:6d:90:85:
                    c7:84:90:cc:2e:44:7d:9b:51:b0:f6:c4:fa:cb:71:
                    d0:5e:37:1a:e5:61:d8:de:8a:79:da:6b:88:2f:89:
                    ef:9d:c4:5f:91:c9:6c:f6:64:69:cc:aa:54:66:e4:
                    97:0a:dd:37:53:6e:a3:32:a9:ae:76:14:46:90:1f:
                    18:5f:35:9c:47:6c:06:ca:87:66:58:7d:35:c3:c7:
                    c6:21:c7:83:89:66:fa:c3:70:56:38:25:60:17:fa:
                    83:9b:08:8e:af:b1:ff:80:9f:c6:69:1f:e3:e2:a1:
                    15:c7:5c:ec:8a:a9:39:bf:f6:52:2a:a4:f3:62:34:
                    dc:84:40:29:67:d4:0d:f6:38:c0:12:9d:e1:e3:d7:
                    c9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FE:04:F4:7E:39:80:4E:73:62:EE:29:2A:63:6C:33:C1:02:16:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27f22749-2b70-3377-bb57-b43ff5a0a540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.44.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:41:d1:cd:b3:71:d7:50:dc:24:6f:32:80:e1:74:7c:21:ae:
         87:34:18:d6:f6:c6:c6:94:a1:17:4b:6c:9f:99:f8:ac:d1:4e:
         dd:21:db:05:e2:57:a9:88:6f:f5:8b:9e:60:46:78:7e:79:22:
         b5:5d:85:8d:21:ea:79:0d:81:7d:bd:13:d0:5e:b4:01:77:29:
         e7:8d:48:96:dc:ce:85:7a:cb:f6:18:87:eb:9b:da:73:96:b4:
         ec:f5:25:f8:ed:f6:b1:da:01:af:b3:1a:7b:a7:85:45:27:87:
         59:3d:ed:de:fd:9e:ec:c6:a5:25:40:40:8b:69:b5:4d:60:cf:
         78:60:9f:62:1a:9a:66:9e:60:8a:d6:de:b0:d3:1c:3f:84:ee:
         de:f1:41:92:58:f7:9b:a9:da:aa:76:8c:72:3d:78:0a:7c:31:
         7e:3f:44:60:d4:cf:76:a3:73:79:17:0f:8f:7b:a2:95:2b:c3:
         a3:bd:c5:dd:e4:76:0f:5d:d7:16:3c:dc:3e:a2:6c:32:2e:6c:
         ac:6b:63:0a:9a:b7:26:63:4d:97:9d:d1:8e:25:15:b1:77:65:
         4d:da:0a:a1:60:ba:d1:af:2c:99:51:61:97:6f:de:f2:75:e5:
         85:9d:27:4e:1b:90:c9:b5:10:69:c2:41:c6:aa:42:f1:7c:db:
         90:0d:4e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:32:17 2024 by rpki-client on console-fra.rpki-client.org