Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a8e5e46-28d7-39cc-8879-7bcf3ca4e10c.roa
File:                     4a8e5e46-28d7-39cc-8879-7bcf3ca4e10c.roa (raw, json)
Hash identifier:          8zMIb9MruGn7vClEzveo0ncxwZBDLSS3yyExxw+Ycx8=
Subject key identifier:   B9:94:4F:3F:40:11:7A:90:DB:07:70:DD:90:13:EE:80:CB:A5:75:8D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C8759A8B369E6865C44D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a8e5e46-28d7-39cc-8879-7bcf3ca4e10c.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        98.44.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:75:9a:8b:36:9e:68:65:c4:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=70780874-93d7-43bf-a3c4-b3d0f8905eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8a:d3:e1:a7:b3:58:b9:2f:56:97:a5:e1:44:
                    05:aa:aa:dd:6d:89:b9:22:59:90:4e:ec:50:da:29:
                    d2:13:33:95:41:73:ce:06:f9:c5:30:71:77:b2:bc:
                    99:98:e3:21:11:19:07:24:fd:d2:d6:ed:7b:0b:6f:
                    1d:57:c9:77:c9:b7:28:81:a9:71:cb:f5:3d:68:59:
                    66:8a:f3:fb:88:0f:1d:02:cc:e5:ce:28:f0:6a:b6:
                    88:e4:cc:a1:92:42:35:2a:3a:96:28:db:48:6a:81:
                    b0:bb:5f:d2:75:52:af:fb:bf:06:14:ea:f1:ee:8a:
                    68:b3:e6:b7:a0:ac:91:55:6b:49:48:ff:29:c1:ce:
                    f1:50:8c:13:a0:b6:b5:3d:c2:e1:47:ec:3a:8a:11:
                    9c:ea:af:6c:b9:5f:4a:e7:e7:9e:15:6e:a6:a8:c6:
                    6d:ee:e7:f1:0e:ac:82:72:ec:a5:6d:53:04:bb:3b:
                    82:59:45:86:80:aa:0d:07:3c:45:78:d2:40:a3:98:
                    51:4b:ba:bc:4c:f7:93:fe:a2:3a:14:8a:8d:62:df:
                    36:79:7e:14:f1:af:4f:d6:61:d3:f7:95:48:47:7e:
                    c7:89:6a:7b:1a:d6:e9:f4:e7:98:9d:7e:df:d2:4b:
                    b9:d3:ca:13:27:32:53:fe:e3:97:14:d1:49:5b:59:
                    09:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:94:4F:3F:40:11:7A:90:DB:07:70:DD:90:13:EE:80:CB:A5:75:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a8e5e46-28d7-39cc-8879-7bcf3ca4e10c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.44.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:a7:60:ba:3e:0e:da:b9:6a:90:ea:9f:db:17:70:17:71:de:
         30:3c:73:30:94:9e:37:23:d3:88:b9:3a:74:af:bd:1a:77:0d:
         77:29:3b:36:e2:fd:95:d1:e4:ef:20:e4:3a:e5:77:46:5c:b8:
         15:53:f8:a6:f5:2c:07:bb:28:7e:96:69:b4:4b:37:4a:2b:3d:
         95:e2:21:f3:06:ac:c1:09:e3:03:84:fc:23:b0:5d:fc:1e:e2:
         8e:f1:f6:8c:bf:a4:3c:a4:93:5e:67:68:50:c4:6c:24:6b:52:
         d5:f6:36:61:53:93:3c:d4:34:6a:b2:82:e3:9e:89:fe:32:4b:
         00:bf:c3:9e:c6:e6:7b:d2:27:97:38:2e:32:0a:69:5d:70:a5:
         e7:63:e8:54:9f:05:e1:cf:c0:7e:da:74:9a:68:78:47:23:02:
         cc:bb:b7:13:b5:8b:4a:ae:4e:3e:13:51:80:78:6b:23:92:af:
         39:83:b7:36:6e:3e:3f:cd:43:18:b7:42:72:2f:07:01:86:15:
         82:c0:80:05:c2:ba:b8:fb:4a:c6:65:65:3c:a9:03:d5:63:95:
         b1:7f:4d:dd:45:07:46:42:9c:e1:bd:ad:a3:c7:41:8d:32:c9:
         c5:88:85:a6:d7:94:04:7b:f8:7b:31:72:4d:b1:0c:17:d2:22:
         6a:ac:0f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:01:15 2024 by rpki-client on console-ams.rpki-client.org