Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af1eeee-6d0d-3740-87bf-42d71fc9ce09.roa
File:                     3af1eeee-6d0d-3740-87bf-42d71fc9ce09.roa (raw, json)
Hash identifier:          JePPMJzJDHq7CnBD0haefuN6gpHKbKYvEfuTF7GrDZA=
Subject key identifier:   82:29:44:38:B4:7B:CA:31:20:0C:0F:13:C3:45:72:67:BA:9E:81:B6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9CCC6E1B51C2B4F1312480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af1eeee-6d0d-3740-87bf-42d71fc9ce09.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        98.228.76.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:cc:6e:1b:51:c2:b4:f1:31:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=d7155b5b-035e-4aee-b8ca-ebc9a939dcd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7a:71:fd:81:50:db:4e:7e:75:89:62:1c:6d:
                    79:95:0b:4c:c8:ce:43:9d:29:60:f1:8a:f4:a1:aa:
                    1e:f3:e4:a8:fb:53:98:e7:4e:15:25:97:62:c1:c9:
                    c1:96:b1:0e:71:e1:72:9b:da:43:a8:80:d1:db:01:
                    24:4a:8b:98:28:b0:6b:e2:92:fc:f7:b0:37:c7:32:
                    d1:fb:b2:c6:67:a7:d3:5b:4e:7a:33:c1:0f:ab:fc:
                    c3:95:01:21:bb:d1:48:98:1a:d3:ec:c2:2d:4e:ee:
                    fb:a5:d3:18:8d:c8:6b:f9:ff:03:c8:67:69:d4:8a:
                    2a:7d:b7:97:55:6a:41:31:ac:8f:13:79:bf:61:a1:
                    76:c7:16:f1:f4:5d:a8:7a:b2:af:93:4e:e4:28:b3:
                    4f:e4:c0:e1:f6:21:82:c8:5a:a9:0c:61:1d:69:36:
                    9b:7c:09:6e:7d:87:09:8b:7c:68:7a:33:b5:33:a9:
                    83:dc:91:f6:ad:86:3b:ff:8e:dc:25:ca:c6:ab:03:
                    2d:7a:8c:d6:33:1e:44:f0:a2:7e:15:e6:67:89:c3:
                    32:12:cd:c9:1c:82:c3:0c:d4:61:84:3d:a5:45:a8:
                    b5:fb:fa:b4:65:10:8b:12:2e:6e:f9:47:44:df:cc:
                    4a:bb:91:e7:d9:76:d4:f1:80:14:1f:a7:6a:d6:34:
                    90:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:29:44:38:B4:7B:CA:31:20:0C:0F:13:C3:45:72:67:BA:9E:81:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af1eeee-6d0d-3740-87bf-42d71fc9ce09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.228.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:fe:a9:d4:d9:64:e6:dd:79:03:d4:14:a4:32:8f:f2:b1:9e:
         c2:b6:4f:38:33:5f:25:ae:40:bf:a8:4b:37:5a:e1:dc:6c:e6:
         aa:07:fe:7b:1c:9d:26:7d:1e:e5:f8:11:7a:bb:0e:b1:ea:d7:
         aa:f5:d8:dd:76:af:c5:9f:e9:62:31:a6:dc:f5:ef:19:22:59:
         09:5a:7c:52:af:d0:d4:87:4d:71:f4:4b:48:c7:ab:12:b4:56:
         31:c0:1d:d0:09:a6:75:76:4c:03:80:e8:df:09:70:8b:c2:ef:
         f7:de:17:c3:0b:0b:8b:3f:59:87:b1:af:31:c8:5d:d5:32:22:
         42:07:4f:60:60:57:f1:5f:6f:9c:f3:8c:76:17:c5:0f:36:df:
         c4:25:71:61:3c:7d:96:23:e6:69:31:1b:fe:1d:1c:f1:f6:91:
         ce:7f:7a:e5:13:a0:fb:60:3a:5a:7a:4f:58:a3:6e:74:8d:cf:
         d4:d8:6a:1e:4f:2f:7c:e8:09:71:32:2b:2f:36:02:33:e6:45:
         9b:ac:0a:6f:1a:ca:47:82:e1:df:98:8d:ed:93:b3:71:1c:e4:
         16:f1:84:2c:82:ac:f2:a2:01:62:f1:41:ab:92:7d:4c:b4:55:
         97:82:45:dc:d8:db:99:76:68:92:f5:e7:fd:11:e3:b8:74:ae:
         64:14:b3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:06:52 2024 by rpki-client on console-fra.rpki-client.org