Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d7d9fee-a921-341e-9053-82b605b794be.roa
File:                     6d7d9fee-a921-341e-9053-82b605b794be.roa (raw, json)
Hash identifier:          /QV8C+GlAXUCZ3SDU2+kWKI9mf7GJ2Kv4n0dGD14NhI=
Subject key identifier:   64:CE:90:63:A4:5C:3E:5A:6C:69:99:8D:E7:65:FB:59:9C:9B:7B:FF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAD80583125B40A76BAD180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d7d9fee-a921-341e-9053-82b605b794be.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7016
IP address blocks:        98.237.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ad:80:58:31:25:b4:0a:76:ba:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=f52f6d27-f942-41e4-a527-f7dfadd9ffb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c1:fa:4d:da:d6:65:d8:d2:ba:b7:f9:d2:3f:
                    78:1c:5f:c3:bb:87:6a:1f:ab:a2:b7:d2:f1:5b:31:
                    8a:c9:2b:58:be:d2:bd:ba:24:f1:62:a0:ce:cc:42:
                    aa:ea:ed:bb:8b:99:12:40:2b:5d:4e:a2:07:70:81:
                    92:f2:f5:e1:eb:b5:5f:9f:31:21:90:d6:9c:2e:da:
                    c6:32:fd:49:a7:78:54:3e:fd:40:d9:38:16:9a:5c:
                    7b:8c:b2:21:a7:67:de:ca:ce:c7:6e:a9:35:df:cd:
                    9d:a2:16:33:5c:3f:ed:6d:d8:9d:95:bb:5f:43:fb:
                    fa:71:ea:fc:19:8b:ac:c4:cf:a2:6d:eb:7f:39:3f:
                    ee:a3:92:9b:86:2b:60:7c:0a:ea:03:56:45:cc:e0:
                    fd:d5:0b:72:c3:a2:8d:e8:e8:54:47:28:f4:43:a0:
                    c3:a3:03:9c:99:05:c1:cc:0f:f0:62:61:8c:65:bb:
                    bb:f0:7b:da:db:db:91:d9:0d:4b:0a:2b:76:3f:0b:
                    b8:bf:8e:31:12:e2:06:7b:da:0f:00:c7:5f:f5:0a:
                    15:ec:d0:4c:f4:e5:b7:22:0d:38:02:6c:ad:a7:93:
                    39:c3:42:cc:47:ad:54:ab:68:eb:73:e9:37:9a:7c:
                    bf:8e:53:06:60:e3:78:75:91:17:bc:c4:5c:62:73:
                    f3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CE:90:63:A4:5C:3E:5A:6C:69:99:8D:E7:65:FB:59:9C:9B:7B:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d7d9fee-a921-341e-9053-82b605b794be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.237.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:b3:cc:a8:51:39:d0:73:9e:37:19:a1:32:46:9d:8b:57:fe:
         d9:70:24:f5:de:90:0d:6a:d9:10:3b:75:6b:9d:0c:7e:0e:15:
         81:dd:b9:05:a1:b8:60:be:e6:ed:65:22:55:9f:8d:dc:a3:cf:
         b0:d2:a8:d6:6e:bf:b4:31:bb:0c:6f:d5:b4:79:77:21:8f:5c:
         9b:83:8b:ae:01:56:ab:9a:29:63:73:63:56:ad:f5:71:ae:3a:
         eb:3f:cf:73:14:56:6c:91:ea:c0:d6:46:34:49:fa:7a:32:f7:
         af:d5:dc:93:a4:60:14:89:96:c4:42:2f:49:59:93:e8:80:ac:
         9c:df:03:f4:d1:13:90:0e:9d:1f:e3:c5:87:48:dc:b6:13:95:
         1e:14:91:98:6c:32:0a:15:72:79:82:fc:91:eb:d0:4d:f0:85:
         a6:89:5c:c0:70:0b:76:a2:69:3d:33:57:72:7f:2f:72:df:12:
         1d:d5:25:0d:8f:dc:39:93:9e:03:e3:4e:61:5e:3b:72:da:b2:
         10:8d:40:ef:3d:15:8a:be:c7:e4:95:1a:8b:f5:76:3a:21:ac:
         87:27:96:72:42:d4:50:ae:5d:39:70:6e:2d:cc:92:d0:9f:22:
         dd:fd:14:45:72:4a:11:2e:3d:8b:f4:e7:7e:ab:21:f3:1f:f2:
         10:5a:4b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:50:28 2024 by rpki-client on console-fra.rpki-client.org