Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/511c655a-8878-3e55-afa5-5f292c89e260.roa
File:                     511c655a-8878-3e55-afa5-5f292c89e260.roa (raw, json)
Hash identifier:          fQK8tbI15BkmLR3KKFzrJPZxuD8eG5L5YTfmvLgl61Q=
Subject key identifier:   9D:16:D0:7F:D2:AF:68:FB:36:1B:AC:C5:5A:D3:52:7C:B4:42:FA:B9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C849F6EEC3637E54C41380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/511c655a-8878-3e55-afa5-5f292c89e260.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        98.195.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:49:f6:ee:c3:63:7e:54:c4:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=cc18dbe2-e30b-4655-ba97-aac812f7ddd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:46:d4:d9:35:03:c9:03:0e:a8:04:62:1b:ec:
                    0e:87:f4:55:36:3e:f5:16:dd:04:8b:a0:b4:85:ed:
                    3e:21:24:16:d9:37:33:0f:8f:a8:c7:5a:98:d3:44:
                    1a:b8:23:90:51:80:f5:44:fb:35:4a:e4:ac:0f:35:
                    e4:3a:79:25:a7:fc:8c:a3:17:b1:4b:68:e9:ef:e9:
                    ec:37:2a:f8:1f:26:85:19:3b:75:55:5d:1a:47:5f:
                    00:95:ad:76:1e:f4:20:5d:14:9b:c3:89:ba:73:27:
                    3c:4c:ff:f0:c2:98:48:c4:cf:5c:e0:16:ee:53:a6:
                    e7:29:93:a7:1b:5c:3d:65:86:2e:69:92:50:40:aa:
                    11:ae:bb:55:68:c0:1b:32:f4:07:92:3d:20:26:6a:
                    99:d3:58:73:b3:76:51:74:3a:35:8a:75:db:44:fc:
                    d2:51:80:da:fb:d4:30:e5:e7:2a:fc:32:3b:c4:e3:
                    79:45:3f:7d:a7:1d:e8:2d:ca:3a:13:26:c6:29:dd:
                    52:7a:cc:d4:cf:3a:cb:95:ed:5b:7e:ee:0c:bd:55:
                    01:c7:bd:78:6f:7a:de:19:53:82:f3:10:b0:64:42:
                    84:44:41:be:fb:51:07:30:d9:37:10:51:4d:c5:e5:
                    7a:1d:ec:18:71:e0:f1:36:fa:11:cc:ba:31:2b:83:
                    5a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:16:D0:7F:D2:AF:68:FB:36:1B:AC:C5:5A:D3:52:7C:B4:42:FA:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/511c655a-8878-3e55-afa5-5f292c89e260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.195.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:bf:7a:e9:d7:ec:63:62:19:23:05:b1:12:d7:2d:7c:34:fd:
         85:0d:db:fc:58:03:af:ae:6f:2b:05:e3:15:8a:a9:7b:79:7a:
         dd:b4:77:8c:6c:51:8a:64:97:c8:9b:c4:0c:91:2e:cb:cf:21:
         6a:05:70:eb:7b:12:54:ad:2d:4b:23:5a:a6:12:f2:d2:e6:e5:
         51:2f:11:3c:7b:ca:a1:b5:7e:71:7a:a1:aa:67:b5:27:2e:31:
         68:79:d0:8b:c1:59:56:06:f4:31:07:32:21:95:52:d0:cb:73:
         6c:4f:fa:70:a2:82:48:00:b8:fe:c9:71:bb:6a:23:c3:c4:17:
         5c:36:55:ef:5f:00:5d:5c:c0:e5:0e:73:e0:f5:8b:e2:f1:8b:
         58:ce:1a:f7:60:17:26:dc:0e:2a:d3:8e:1d:dc:8c:0b:79:0d:
         78:04:25:34:4b:74:d1:f7:3c:22:85:85:0a:07:29:1f:e8:9c:
         c2:86:d8:fc:25:f7:55:8b:44:69:4f:9c:11:f1:6a:b8:53:c7:
         b9:00:93:6f:88:1e:31:45:6c:33:86:1e:0b:23:eb:e6:c5:cc:
         46:e2:d5:90:be:02:95:ef:08:fb:56:25:ce:9d:5b:56:aa:a4:
         fa:ee:09:9b:bf:44:06:4a:b6:74:b5:ea:63:19:1f:55:0a:c4:
         46:e1:bb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:35:45 2024 by rpki-client on console-fra.rpki-client.org