Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37ad272b-211f-3748-a269-ec8f13201535.roa
File:                     37ad272b-211f-3748-a269-ec8f13201535.roa (raw, json)
Hash identifier:          /HVVI2zuI5lZqoKGhPPooGMj6WsUzclFDon1DA4aMZI=
Subject key identifier:   63:75:ED:32:C9:8F:D7:54:75:D3:C3:DB:2A:FB:8E:85:81:7F:A8:9E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FACF98BA8A19593D7D60580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37ad272b-211f-3748-a269-ec8f13201535.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        98.240.112.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:f9:8b:a8:a1:95:93:d7:d6:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=4d0796ae-bd8b-4b96-a856-82358c876118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:20:eb:2e:26:7b:88:14:33:b0:be:af:22:78:
                    c5:af:22:96:7d:18:bb:fb:ed:a4:59:a5:0c:ba:36:
                    bb:1b:af:e1:a3:e9:cc:4e:69:e1:fc:4b:f8:8f:f2:
                    f2:07:68:5b:14:59:38:9f:60:f9:df:33:85:11:d0:
                    c8:0a:d2:c5:7c:82:70:c9:92:22:8c:6c:de:c7:84:
                    92:e7:e2:ba:e0:ee:87:64:e9:f1:47:f5:e3:91:c3:
                    b5:bf:76:01:5d:23:39:97:db:31:a1:a8:d0:0e:ff:
                    8a:de:f0:69:4e:d4:41:de:06:4a:ea:5e:e6:6e:67:
                    f8:99:db:8a:e1:47:55:df:68:c1:35:2c:21:63:77:
                    8a:ee:a3:89:1f:7c:ab:02:8e:2f:bf:8b:09:d2:95:
                    38:fd:dc:5c:18:bc:c0:64:ae:f3:eb:43:ae:0b:3b:
                    aa:bc:05:3d:d9:63:a1:a1:2c:b1:71:b2:bc:6d:df:
                    86:80:e1:68:32:e7:92:7b:08:6e:f3:ad:24:7b:16:
                    d4:ba:47:57:8b:39:48:df:09:e7:14:87:28:56:54:
                    fb:f7:ea:17:a3:4f:28:0d:37:2d:d6:34:b8:50:9c:
                    a0:d2:81:38:58:10:65:6c:5b:c9:bc:25:49:32:34:
                    71:36:6a:16:58:5a:41:77:8b:5f:01:47:90:d6:6d:
                    9d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:75:ED:32:C9:8F:D7:54:75:D3:C3:DB:2A:FB:8E:85:81:7F:A8:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37ad272b-211f-3748-a269-ec8f13201535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.240.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:a7:bb:0e:d8:96:0a:93:8e:d2:76:09:08:2f:4f:5f:22:d0:
         44:79:ae:e0:39:9d:21:9a:9c:ea:af:2a:76:83:f7:83:9e:4e:
         2b:9b:66:09:96:81:1d:6a:c5:e0:17:fe:b5:75:48:b1:a4:42:
         28:a3:3c:ba:c8:4c:8c:a9:29:5f:31:b7:ed:f0:90:6e:9e:c9:
         f5:11:6d:db:b9:d6:69:0a:0c:7b:1a:b5:93:e0:cf:76:2d:87:
         1b:43:d5:5e:87:8f:61:4a:77:c7:63:1f:38:44:57:4c:f0:f0:
         2f:2c:24:fb:83:83:2a:59:3f:ac:64:12:cf:a9:39:8e:f5:1d:
         6a:37:ea:2c:92:33:83:37:af:7b:ef:5d:92:25:7d:d2:2c:21:
         3e:0b:8a:0a:82:e7:12:cb:c1:86:df:cf:6c:0a:db:c6:64:ef:
         5a:f0:34:5a:5b:3d:eb:04:4b:a6:7a:92:8c:48:ae:c1:39:dd:
         6e:c8:fa:00:2b:5a:ce:dc:ea:44:e5:45:02:ca:58:48:c3:d1:
         ff:37:18:5d:26:f1:4c:84:9e:2e:2a:90:e5:17:8e:19:e9:8f:
         2a:7f:71:46:e7:06:10:55:24:66:25:5c:16:52:2a:82:a1:94:
         58:52:26:24:21:a2:03:fe:15:78:75:64:57:fb:16:03:75:b8:
         43:ee:8c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:26:14 2024 by rpki-client on console-fra.rpki-client.org