Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fa11c27-8dc1-37b4-8a09-7fd253e27df7.roa
File:                     3fa11c27-8dc1-37b4-8a09-7fd253e27df7.roa (raw, json)
Hash identifier:          YQOkKpT1+D4foonWeN0EZB5JYvnlbwaSDwKmQce8m5U=
Subject key identifier:   8D:CC:69:2F:97:22:DA:C8:41:E0:CA:67:15:F3:DF:49:7B:B4:DD:CA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7E3F56492FA1FC35E8300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fa11c27-8dc1-37b4-8a09-7fd253e27df7.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        98.250.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:e3:f5:64:92:fa:1f:c3:5e:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=f5067d52-4fb4-41b0-b49f-95192806fbc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:64:82:c4:0a:fa:a2:e5:27:89:d3:0e:6f:e6:
                    19:c5:b6:ff:e1:c6:2c:9f:3f:82:da:ac:50:3f:b6:
                    08:31:7c:e2:20:74:2d:5e:a1:cc:45:be:6c:0f:88:
                    6f:63:2e:f1:bd:17:5b:c5:fa:e9:68:e2:35:7c:e5:
                    36:6c:16:02:3c:38:0d:c4:31:da:d2:ab:01:05:7a:
                    a3:77:04:e2:44:7c:3c:4c:98:ae:c3:04:6f:28:7a:
                    6d:bd:4e:bf:44:3c:48:e6:95:74:5a:a2:07:78:38:
                    74:5c:80:60:cc:48:f4:b2:18:6b:cc:9b:5a:fe:32:
                    1e:36:90:1d:0d:09:6f:06:64:b5:63:19:d5:f8:64:
                    6b:a9:3b:8a:64:eb:59:d3:0a:1a:6f:5e:89:1f:13:
                    2d:01:f2:16:66:62:57:70:3d:d9:92:1a:ae:cc:db:
                    cc:7b:0b:8c:a2:c1:62:b9:6b:45:b4:fe:b6:25:fa:
                    b2:a4:f3:fd:6a:0c:c6:31:6a:6b:4b:e8:03:18:66:
                    e2:96:70:90:74:2d:42:05:53:18:77:9f:d0:a5:6b:
                    c7:40:c0:62:cc:63:d4:2f:1f:8b:20:ed:36:5a:d8:
                    a1:27:6d:28:21:f6:03:94:11:dc:97:2f:78:0f:d9:
                    1d:8a:c7:c2:8f:01:15:5e:68:1b:59:54:a1:ab:da:
                    25:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CC:69:2F:97:22:DA:C8:41:E0:CA:67:15:F3:DF:49:7B:B4:DD:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fa11c27-8dc1-37b4-8a09-7fd253e27df7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.250.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:24:c9:de:49:37:d3:18:df:8e:b2:ad:50:43:d4:5c:9f:a6:
         6b:a4:24:91:9a:bd:28:b0:37:66:0b:8a:c3:f4:0a:53:b9:10:
         4c:ca:d3:c4:36:5d:0d:d0:b8:94:c6:e8:e7:c9:9a:df:bd:fd:
         ab:e4:39:a3:e2:ec:18:35:48:fe:7d:74:85:2e:43:de:87:38:
         e3:94:37:da:72:8d:ef:8e:53:2d:94:83:41:5b:55:5e:fc:ad:
         45:18:f7:77:03:74:b7:b2:2e:2a:ba:71:df:0c:4e:ab:83:e8:
         10:1a:99:2c:f6:f9:4d:ac:94:ca:e3:51:d2:15:a4:2e:f6:45:
         b4:c3:1a:75:62:a7:dd:49:4a:3d:9b:40:f7:12:33:8e:b6:95:
         1f:46:6a:3a:6b:ac:d5:ae:50:9d:c9:e9:9b:a2:a3:02:f5:b5:
         20:82:36:0b:f5:83:9b:3f:81:ef:b3:4d:20:3f:d5:be:c3:ad:
         2b:68:5c:28:ee:e9:9d:61:c4:a0:60:33:7b:17:c3:eb:ae:d7:
         b9:32:f3:a5:c5:c8:7a:28:e3:58:64:52:5b:be:2c:06:3e:9e:
         f8:43:e6:55:29:0c:3f:c7:f1:69:40:cf:fc:96:21:00:3b:a8:
         ca:0a:09:7c:bc:fe:fe:5b:a0:20:57:ba:97:88:cd:4d:6f:54:
         4f:30:a4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:45:10 2024 by rpki-client on console-fra.rpki-client.org