Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6925a58a-d7de-34f3-a333-954f2a118a49.roa
File:                     6925a58a-d7de-34f3-a333-954f2a118a49.roa (raw, json)
Hash identifier:          GzED3pSS7K3ZG7LHmlAvTmxR0rPP9vtflwr2kVzHJAw=
Subject key identifier:   59:86:AA:74:52:D9:74:15:44:1C:C8:A8:B6:12:D6:F8:B9:E3:9E:C5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C647B8F1E85AB6995C1900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6925a58a-d7de-34f3-a333-954f2a118a49.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33490
IP address blocks:        98.246.106.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:47:b8:f1:e8:5a:b6:99:5c:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=cdfd96a3-ecca-44d4-9562-db21f76f26c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dc:3f:d5:74:14:b5:49:33:d3:32:5c:b9:c1:
                    39:00:cf:be:d1:b1:e9:5e:78:8f:24:53:1c:a6:06:
                    2a:01:da:2a:a2:d7:dc:9d:40:26:96:07:7e:96:2c:
                    83:36:14:4e:4d:92:45:6f:b7:ac:48:5e:3e:4c:d7:
                    a1:77:00:99:16:32:94:f1:4d:66:8b:8a:99:a8:8e:
                    f9:a1:af:2a:5a:68:56:57:a6:25:72:a6:5d:54:18:
                    75:eb:a5:cc:f9:8a:5a:02:24:e4:90:2f:3a:a8:98:
                    76:ba:61:d1:66:31:2f:0e:4e:4e:54:ac:62:25:6b:
                    78:5b:c6:68:d5:d6:6c:c8:cf:77:03:9a:04:ef:0d:
                    6a:bd:8c:be:8d:08:4b:99:b1:49:9c:49:53:fe:82:
                    57:42:57:44:75:14:de:5e:7a:12:03:80:26:83:1d:
                    ee:d8:96:e8:26:3f:5b:cb:66:88:8a:f7:2f:b2:44:
                    0b:fa:27:e4:eb:00:b6:13:d3:b6:9c:46:59:87:95:
                    5e:b7:6b:55:73:3d:8e:e1:f9:4a:1d:8b:aa:76:3b:
                    72:25:06:ee:c1:39:61:b7:cd:ce:5a:5c:59:66:ed:
                    85:f5:fd:a6:69:68:48:80:f6:6d:67:2a:39:8a:fb:
                    3b:02:55:ec:b7:18:fe:e0:5d:75:3a:19:a9:b1:1a:
                    21:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:86:AA:74:52:D9:74:15:44:1C:C8:A8:B6:12:D6:F8:B9:E3:9E:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6925a58a-d7de-34f3-a333-954f2a118a49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.246.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:20:d1:6a:66:7e:90:9b:0a:8b:c9:8c:c8:0e:82:15:58:48:
         af:c9:e1:31:1a:91:59:54:0c:dd:52:e7:84:83:60:e7:99:49:
         ef:d7:d5:8b:26:98:4d:b5:94:a1:0f:96:58:d7:27:5a:74:4b:
         28:68:c8:27:c7:b1:af:2c:f7:ad:6e:88:3d:58:b4:49:f2:62:
         3b:d0:77:a6:d5:78:eb:1c:b5:66:f2:30:b8:d4:9b:8c:e7:6f:
         79:8e:32:c7:fd:36:fa:99:7e:24:6f:50:80:81:75:9f:a5:b0:
         e0:5d:dd:90:01:9d:07:2d:3e:4f:80:21:49:45:2c:b9:9c:d0:
         4b:90:db:f0:cd:e5:f9:0c:6b:a9:5d:ad:84:f9:8a:9d:8b:9c:
         6b:d3:18:8a:7d:5f:33:f9:f5:be:00:3c:f0:02:53:c8:bd:29:
         78:6e:8f:13:b7:94:2a:44:a8:33:78:6b:45:2a:95:15:08:01:
         bf:9f:65:c1:30:2b:ab:6b:39:11:5d:88:04:a2:76:65:e5:f9:
         e1:82:5f:3a:8f:8b:bd:d5:dd:7b:c3:3f:31:a2:9d:17:70:b4:
         9c:eb:9f:58:bb:5f:fc:d2:49:c6:8c:4f:71:7b:39:0d:94:c1:
         61:3a:49:1b:58:be:44:3d:32:ca:10:0a:bd:52:e9:81:71:5c:
         09:c2:8c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:26:47 2024 by rpki-client on console-fra.rpki-client.org