Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/667a6437-339f-3533-b0a2-11843c75c8c9.roa
File:                     667a6437-339f-3533-b0a2-11843c75c8c9.roa (raw, json)
Hash identifier:          X9itH8sXWcaKjmqoI9x2WWVCXr9TNORiXvxpRdREe7E=
Subject key identifier:   E1:63:B1:6D:12:50:F4:C9:05:EC:78:12:5A:F2:7A:02:D1:BE:13:C9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9CCF7CE6E89D5132DDDA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/667a6437-339f-3533-b0a2-11843c75c8c9.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        98.253.178.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:cf:7c:e6:e8:9d:51:32:dd:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=217174ea-792a-4461-9c3f-54ca921247c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0d:85:cc:c1:51:6b:2c:a5:c8:43:e3:d8:25:
                    f7:5e:ac:a6:ee:13:ca:7b:c7:e5:9e:d9:45:7d:25:
                    99:6a:0f:88:c6:30:5c:f6:ca:39:e9:a7:9f:a4:9b:
                    62:40:5a:6a:17:e5:f6:d7:37:57:67:87:2e:35:9a:
                    33:34:17:1e:b6:ef:2e:48:fc:97:0a:70:c5:6d:4c:
                    9e:d5:33:9d:52:28:95:22:ec:16:b9:32:54:dd:71:
                    a7:32:ef:89:36:35:d7:82:a5:bf:b1:a5:41:ef:65:
                    21:91:ab:15:cc:ce:69:32:cf:93:bf:d2:20:26:b0:
                    0a:3b:c2:64:56:c2:6f:a8:ac:cf:ac:d8:67:c3:3e:
                    8f:8d:9a:57:04:eb:36:20:33:45:81:66:11:c4:70:
                    b9:af:fa:f3:77:a2:73:5b:06:ab:69:e2:db:99:91:
                    a6:10:03:97:29:e0:8f:52:6d:61:74:c7:c2:b8:bd:
                    fb:48:48:8a:c6:32:26:48:47:2e:e1:cb:6e:d3:55:
                    d4:88:34:0c:98:10:2d:a1:6e:e6:c7:c3:25:ce:e4:
                    ca:6a:52:f7:d1:12:18:0f:15:78:f8:a9:41:8a:0a:
                    cb:a8:6f:29:58:d6:77:00:ee:fe:db:01:2e:0b:c2:
                    c7:35:ba:af:64:3a:de:81:f4:45:ec:a8:bc:61:5d:
                    80:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:63:B1:6D:12:50:F4:C9:05:EC:78:12:5A:F2:7A:02:D1:BE:13:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/667a6437-339f-3533-b0a2-11843c75c8c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.253.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:02:32:4e:c4:90:d2:d5:ba:5b:89:e3:5c:6c:91:9e:3a:ca:
         de:c1:9c:14:12:46:f6:c5:b2:ae:d7:8f:7d:c1:f8:87:ac:68:
         cc:c6:ad:ef:49:84:a6:7e:c7:d1:63:1c:76:da:aa:1b:be:8c:
         47:67:ef:2b:0a:26:26:30:66:59:14:38:6a:c2:38:9e:46:90:
         0a:cf:68:a8:f7:2b:6b:73:d5:27:c0:2c:ff:a0:ca:fe:de:67:
         5e:db:e5:30:94:43:fc:c9:eb:27:76:6a:05:23:b6:bb:01:59:
         e1:86:0e:33:7d:72:6b:de:8a:37:58:b6:c5:f2:9d:4c:76:b5:
         ed:a1:93:9c:f8:68:88:7f:09:59:7b:39:90:66:7d:5c:bd:83:
         f3:a7:e0:65:52:75:b2:fd:48:4d:36:05:5f:b1:6c:39:a6:b1:
         92:a9:f7:00:45:73:b9:08:12:96:9d:e5:a0:ab:dd:65:13:d2:
         1e:14:4e:5f:67:80:6c:9d:ee:f4:57:7c:07:3d:b2:62:14:22:
         8b:80:44:7b:09:1d:5a:54:b9:6e:a6:bd:10:6f:67:67:7e:f8:
         97:d7:7d:bb:08:4e:18:bc:d1:9a:ec:3e:1c:46:94:d1:39:b8:
         a2:81:1b:c9:bf:5e:fb:fe:95:94:b0:c9:79:77:60:b4:54:5f:
         40:98:24:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:14:17 2024 by rpki-client on console-fra.rpki-client.org