Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b6a2db0-7959-381f-89fa-d2769dc5c59e.roa
File:                     2b6a2db0-7959-381f-89fa-d2769dc5c59e.roa (raw, json)
Hash identifier:          jqwdXef1xdIwT5eQgDnItl+pMIFNgnZZbbQPQ6lVaJY=
Subject key identifier:   31:A2:B8:E8:2D:5F:F8:8B:4D:C2:AD:05:ED:BD:26:BA:F4:FF:B8:A1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF70608676B1928E6D85480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b6a2db0-7959-381f-89fa-d2769dc5c59e.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22909
IP address blocks:        98.193.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:06:08:67:6b:19:28:e6:d8:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=d981cecd-8f55-4649-a361-752049dc141c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:49:81:1d:57:16:64:67:4e:20:52:66:c2:69:
                    ee:a1:1d:7d:72:3b:c9:fb:0e:80:64:d6:e9:ab:9b:
                    30:89:0f:38:1e:b8:3f:f8:67:9c:cb:32:d6:8b:00:
                    01:05:88:4a:a4:c3:9c:0b:8e:95:f4:87:2d:56:4c:
                    bb:04:1c:7a:69:b3:ef:d1:0e:4f:b6:2e:34:79:c5:
                    4c:b3:aa:1c:77:30:a5:3d:50:bb:2c:d8:48:97:32:
                    cb:72:9e:02:05:a6:38:55:f2:e9:d6:5f:19:d3:0a:
                    99:29:85:3b:fd:76:19:72:5d:dd:70:b1:a2:15:7b:
                    f3:4c:cb:1a:98:2a:0c:be:10:0c:76:0f:1f:18:69:
                    7b:d1:ed:b9:1d:57:6d:de:03:6c:bd:85:45:9f:45:
                    36:98:af:1f:a1:85:f6:0f:f9:71:db:7f:54:4b:84:
                    5a:27:a4:bf:48:f6:db:d4:41:d2:a1:c5:4d:95:5f:
                    a8:98:a6:37:ec:02:24:a8:3a:73:c4:7c:9c:6d:d9:
                    99:00:1f:87:81:1f:81:2d:df:d3:48:eb:f5:34:8b:
                    f2:b2:64:26:df:c7:42:b7:9a:85:ba:dc:15:7e:3d:
                    87:0f:e3:78:2d:b7:28:a0:4f:cb:87:a9:97:aa:68:
                    b6:f0:7e:08:82:5e:02:24:1f:41:ca:c0:b6:6b:1d:
                    85:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A2:B8:E8:2D:5F:F8:8B:4D:C2:AD:05:ED:BD:26:BA:F4:FF:B8:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b6a2db0-7959-381f-89fa-d2769dc5c59e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.193.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:20:33:5f:48:66:b6:e9:f6:69:72:96:22:af:ee:c3:d8:9b:
         b9:79:c0:10:28:09:4c:74:03:92:3e:f1:ef:b3:d7:d7:25:ff:
         f5:5b:62:df:f4:42:1e:d2:94:51:a6:6a:d0:4f:79:a7:c0:93:
         a6:9e:9d:78:7d:c3:ea:01:fc:99:75:83:6f:1b:11:42:08:05:
         96:37:bf:01:f2:03:9d:c8:76:23:66:76:81:30:f8:31:a2:05:
         45:78:97:a7:a7:b9:1f:67:78:3f:1d:7c:ef:e8:ff:8e:6b:5c:
         9b:4f:d2:53:df:00:88:24:41:2c:96:dd:ef:50:0f:12:99:26:
         37:b6:0b:a2:5a:53:17:89:2b:49:7f:dd:20:e2:67:f7:ec:ee:
         ea:92:e7:6a:be:d1:d4:41:4c:b9:07:8b:7a:4c:e1:c4:2d:32:
         07:d4:a4:48:06:7e:18:be:12:40:e9:b0:82:17:f5:b3:25:ef:
         b6:85:3a:3b:76:9a:ab:7a:f0:3b:85:30:02:21:e9:a9:9e:0c:
         a6:c9:10:82:12:f2:ba:3e:5f:53:75:43:3f:5f:0e:d3:c0:d4:
         07:b8:67:f4:75:bb:8a:0a:5c:9a:bf:7d:0c:19:66:c1:ce:61:
         02:cd:3e:56:89:ca:ad:69:6e:fa:bf:78:41:5e:ed:9f:49:c0:
         03:ff:ca:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 16:14:42 2024 by rpki-client on console-ams.rpki-client.org