Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/585686a2-949f-34fd-bd68-1135525aa8ad.roa
File:                     585686a2-949f-34fd-bd68-1135525aa8ad.roa (raw, json)
Hash identifier:          xQD9o8/DopTDkJEO6uRTPrPXOjJsLy8Q+i+xZ8J7YvY=
Subject key identifier:   24:0D:DF:0F:32:A2:09:0C:FF:B9:F3:AE:6D:8F:45:CF:08:43:D9:8F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E6074CAB3160B5C80D3FC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/585686a2-949f-34fd-bd68-1135525aa8ad.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        98.252.150.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e6:07:4c:ab:31:60:b5:c8:0d:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=675df12e-e2a1-433c-85fd-3f3fe89af8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:29:99:1a:1c:60:9d:1f:20:57:ab:d5:ec:36:
                    88:24:19:93:a1:82:8e:8b:0c:b1:5c:4f:cb:25:a3:
                    56:90:60:93:9c:31:84:fe:35:00:59:7e:31:f1:89:
                    81:81:e9:a8:06:2b:e8:ab:8d:88:8d:59:ef:bd:01:
                    9c:72:15:54:5e:92:5a:fb:f8:fc:83:fc:ba:15:34:
                    ea:bc:9d:88:ca:40:7b:67:2d:9d:bc:0d:df:df:f2:
                    a8:46:17:d2:89:0e:fd:93:bb:fd:79:ac:ff:9f:8d:
                    8f:f9:06:e4:a0:c9:9b:98:c2:d1:8f:fc:3e:0a:c1:
                    b0:49:13:b0:4c:37:69:75:a4:ef:d9:59:b4:a5:ee:
                    42:9e:30:59:cb:7e:ff:20:ae:0f:f7:9c:4b:7b:12:
                    ac:3e:f2:d0:9e:e5:b7:9b:47:64:97:49:7e:05:ae:
                    54:96:62:9c:f3:a2:bc:b2:c0:28:bf:d3:f9:d4:86:
                    0a:fc:e2:00:b6:2e:5d:fd:8e:2e:16:6c:a2:ca:92:
                    c2:b3:10:52:0c:1d:5b:55:6c:ef:40:a9:ea:81:47:
                    bb:f7:01:23:6a:58:49:da:28:f9:14:32:ef:69:ab:
                    c5:aa:43:64:84:1c:36:30:b8:62:12:ed:37:45:71:
                    fb:ff:bc:91:e2:a9:76:ed:a4:a4:2a:cd:eb:13:83:
                    34:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0D:DF:0F:32:A2:09:0C:FF:B9:F3:AE:6D:8F:45:CF:08:43:D9:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/585686a2-949f-34fd-bd68-1135525aa8ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.252.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:64:fe:c2:76:69:94:ea:40:8b:60:03:b8:9a:4d:e8:5a:f9:
         40:8c:60:7f:82:72:ff:90:83:b5:cd:51:63:19:c6:53:b2:b4:
         b3:52:56:eb:d4:d9:60:2a:80:43:81:b7:89:c4:44:a4:dd:ef:
         76:2f:37:3b:43:38:20:11:00:9d:d4:d7:e9:2e:3b:89:8b:62:
         08:61:4e:1d:ec:a0:e6:07:61:94:4f:a6:fd:04:58:e4:01:42:
         3a:3c:5f:d2:ec:69:27:54:a6:6b:85:ce:f7:d4:3f:62:93:8e:
         18:88:ac:e6:96:75:b4:9b:72:61:98:b6:91:e8:af:75:fc:9b:
         8b:0b:e1:dc:90:58:d5:19:f3:1b:2a:e6:65:e2:71:4b:ca:53:
         97:cc:0b:bd:0b:a1:0f:32:b9:ef:34:ba:68:f6:0d:5f:c9:c6:
         2d:84:13:b5:f9:06:a9:b6:b9:bf:9f:a3:7c:0a:fc:7d:12:d8:
         86:6e:5f:84:85:d2:16:3c:17:46:5c:a6:e5:87:07:db:d8:91:
         23:7d:a8:56:a6:4c:43:92:dd:dc:d1:c3:1c:08:84:fc:df:3d:
         88:15:28:8d:1d:66:02:35:43:44:ff:f5:fb:54:db:8c:cc:63:
         a5:0c:e1:a5:19:a1:43:36:26:a5:36:d0:bf:3d:f7:e3:a4:2c:
         fa:b2:1e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 16:23:08 2024 by rpki-client on console-ams.rpki-client.org