Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f1c95f8-d908-337d-b5af-1f8ab5187ea5.roa
File:                     6f1c95f8-d908-337d-b5af-1f8ab5187ea5.roa (raw, json)
Hash identifier:          xQs711CjB4vSigmvw815ezVba5uUy9Xb00FBlyha5os=
Subject key identifier:   0F:D0:72:A8:CD:2C:C5:32:AC:4C:EE:84:48:49:52:3B:D1:64:6F:A1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9DA378FBA87ADDCC14C574
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f1c95f8-d908-337d-b5af-1f8ab5187ea5.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        98.47.112.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:a3:78:fb:a8:7a:dd:cc:14:c5:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=af274bcf-7e90-49db-b1a7-319be3fddefb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:48:c8:15:c9:c8:ab:dd:8e:da:0e:1e:7e:4f:
                    5a:78:65:2e:95:67:9b:bd:eb:05:e0:aa:2c:66:d1:
                    c5:75:38:3f:9f:30:af:7e:3c:5a:da:36:07:57:ef:
                    07:0c:7b:81:b1:ef:80:80:f6:87:42:e3:a0:b2:3b:
                    a8:01:77:f7:da:83:e3:b9:eb:f2:be:00:be:69:fa:
                    56:35:47:ff:fc:ce:eb:bc:4e:3c:9f:e3:8c:50:1c:
                    e5:34:9d:e4:c0:a4:1d:bc:3d:9f:dd:43:a0:e5:b7:
                    dd:05:eb:3c:e3:da:d6:ef:1f:4f:a8:36:93:03:ff:
                    c4:bd:9a:93:62:8f:98:4f:a1:29:b4:8a:6c:3e:e0:
                    35:db:b5:e3:3a:2e:7f:ba:ba:ae:ad:73:46:7b:c6:
                    0c:d0:31:0c:c9:16:d7:f8:54:65:70:99:3c:75:87:
                    90:ff:4c:85:27:96:7d:e9:69:04:db:c9:74:53:fd:
                    2d:de:db:d9:4b:0c:d3:5c:5c:01:6f:e3:07:7b:05:
                    99:66:d0:fc:85:a9:01:13:95:cc:7f:ba:2c:25:62:
                    ae:3a:b4:ff:e5:b7:09:bd:c9:19:03:ce:e4:88:18:
                    bb:76:be:95:a7:e3:e2:04:d0:49:5e:f5:7a:a7:24:
                    61:24:16:15:0c:b1:97:1a:08:54:94:6c:7b:68:f5:
                    98:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D0:72:A8:CD:2C:C5:32:AC:4C:EE:84:48:49:52:3B:D1:64:6F:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f1c95f8-d908-337d-b5af-1f8ab5187ea5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.47.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:7b:c9:12:1d:93:6e:40:c8:44:15:86:04:38:29:6d:22:95:
         9c:17:61:3b:c3:c9:bd:7a:89:4e:35:33:59:53:4b:3f:8f:a4:
         be:d0:0d:dc:44:d2:35:8c:06:9c:ac:42:b5:43:0b:77:da:05:
         45:b1:c7:4f:6e:77:c2:d0:a2:e5:cf:fe:84:c8:59:16:91:02:
         fa:8f:f2:d0:7b:5b:d5:39:76:9f:48:b4:f9:1a:0d:90:64:dd:
         a3:58:d5:34:d6:fb:0b:5c:3d:75:fd:10:c4:31:04:fe:17:2b:
         1a:80:4b:5e:c6:a4:9e:30:53:24:ba:1e:33:59:2a:41:fc:9c:
         5b:12:b7:99:2e:c8:f1:1c:fb:e8:d6:73:93:03:5c:86:7c:58:
         57:c2:a0:01:a5:14:19:8d:8f:a8:31:4b:ea:1a:dc:24:11:b0:
         ff:5e:81:50:65:bf:5e:62:a2:e7:49:f6:7f:24:70:f5:03:52:
         aa:4a:a1:07:84:f0:bc:9d:17:ed:d5:ef:7e:ae:78:f3:0c:b4:
         f0:9b:2e:ea:9d:e6:78:f9:91:fc:05:82:18:be:40:6c:c4:5d:
         2d:8d:75:7e:3d:d5:e6:2f:74:2e:c8:c0:14:50:b5:a8:6c:94:
         c2:e8:5d:d5:c3:08:7c:d4:18:d1:b8:f4:cb:81:9a:9a:33:73:
         16:c7:03:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:57:44 2024 by rpki-client on console-ams.rpki-client.org