Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/427dd27b-30b4-37af-9bb2-1da24d4850f4.roa
File:                     427dd27b-30b4-37af-9bb2-1da24d4850f4.roa (raw, json)
Hash identifier:          OXT43TSfYvo+ycZJZz65R1NYs+nCKR7XA48HfwtDxKU=
Subject key identifier:   99:B9:9E:74:A3:58:6A:DB:C2:26:98:B0:2F:2F:E2:7B:9D:10:58:E2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFB73A0AB84CCA5ED460A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/427dd27b-30b4-37af-9bb2-1da24d4850f4.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     13367
IP address blocks:        98.240.142.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:73:a0:ab:84:cc:a5:ed:46:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=037596c6-38ad-441f-9043-10ac9de04658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:02:cb:d3:59:c6:b4:39:78:2d:3f:46:73:d2:
                    72:d4:95:d6:43:09:bf:ce:25:33:f8:ee:2b:3c:8d:
                    9c:12:41:4f:79:32:3d:66:3d:58:a5:4b:90:2e:6e:
                    13:e4:8b:ff:05:57:c4:58:d6:2f:23:c8:e1:66:0d:
                    0c:15:5c:16:8e:0a:c2:ef:2f:a5:7f:ea:2b:38:98:
                    b0:b3:12:23:8f:3c:ca:7c:af:ce:a0:6a:23:68:6b:
                    cd:50:db:ea:fe:68:04:1e:90:13:a3:e0:37:57:4c:
                    3d:03:33:78:68:e2:4c:43:2a:a1:17:a9:3c:0e:e3:
                    b0:d0:16:46:54:4d:2d:48:be:a2:64:7d:fb:dd:22:
                    33:19:cd:f3:1c:d4:8c:d7:b1:55:2f:3c:a7:4d:59:
                    6d:79:a0:07:ff:93:13:46:0e:06:97:94:eb:30:95:
                    a1:99:3e:3c:62:84:cf:f2:4a:64:fd:fe:c0:cf:58:
                    39:f4:47:1f:f6:84:55:7f:42:fd:1b:41:6d:15:97:
                    a8:db:89:7c:4a:9c:0e:26:ef:24:d7:fb:aa:2e:ce:
                    c1:4b:cd:5d:d5:da:b5:60:2e:e5:0c:4a:75:b1:0f:
                    6a:99:25:71:1d:c2:c4:33:d9:8e:f7:e7:bf:78:30:
                    bb:28:a5:e0:db:bf:bc:12:49:8f:e3:f0:86:d7:e0:
                    84:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B9:9E:74:A3:58:6A:DB:C2:26:98:B0:2F:2F:E2:7B:9D:10:58:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/427dd27b-30b4-37af-9bb2-1da24d4850f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.240.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:f7:c5:08:0e:73:f7:91:9c:76:dd:71:78:77:bc:5a:c3:63:
         2c:f6:e7:41:c3:7a:dd:54:21:8f:49:56:7a:a9:fc:ec:fe:f8:
         0b:70:9f:2f:71:04:5d:26:24:24:b0:25:2a:23:93:03:38:6c:
         be:4c:c6:97:52:91:40:83:f6:3a:65:ac:8f:ec:21:28:1e:76:
         6f:f5:c1:b0:6a:bb:aa:c6:49:c6:98:c2:c6:be:cb:04:11:dc:
         56:9b:6b:3a:c5:a6:ec:2f:33:9a:fc:bf:40:d2:15:73:1d:28:
         c6:e3:9a:32:f5:d3:b1:a0:a1:ad:af:2a:af:ae:fe:18:9f:b3:
         43:a2:fb:32:82:ff:99:a3:33:ce:d9:eb:67:da:6a:27:b6:36:
         a7:42:e9:68:3f:0e:00:02:3c:1d:9d:5f:88:69:a8:ae:49:da:
         a9:03:c9:a3:8f:c0:aa:50:6f:b3:99:1a:67:5b:66:4a:e8:ec:
         4d:48:30:2b:08:a4:b9:16:1e:17:7e:f3:d9:87:39:7d:76:ee:
         d2:ad:31:1c:45:2e:5b:f2:02:3d:b5:e6:0b:86:73:2a:8e:18:
         46:2c:c8:33:6b:51:2e:0b:e5:04:a3:79:66:84:a8:ef:15:54:
         53:ea:20:eb:7d:71:be:f6:13:96:ce:12:6a:c3:b2:55:84:6d:
         3b:d4:02:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 12:54:23 2024 by rpki-client on console-ams.rpki-client.org