Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70faf5c8-33c6-3177-bd66-24215fd20c68.roa
File:                     70faf5c8-33c6-3177-bd66-24215fd20c68.roa (raw, json)
Hash identifier:          vgCbiQUSZCAQiLpBtK7VZK5Pl6L1skqx/Gp2g4CMxnY=
Subject key identifier:   7E:C4:80:DD:3A:BE:5D:1B:CB:1D:D5:3C:1C:E1:59:EA:06:02:A0:40
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C64943078D36F748FDA640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70faf5c8-33c6-3177-bd66-24215fd20c68.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33490
IP address blocks:        98.246.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:49:43:07:8d:36:f7:48:fd:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=ee7cd1f3-7d85-4a9a-ae99-7d41597fbe0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:05:6b:1d:aa:9c:c7:91:a4:40:df:9a:9c:d9:
                    cd:58:08:1b:c4:dd:15:26:10:6c:0a:a6:3d:67:e4:
                    c5:fb:b7:7a:c1:71:51:cb:c9:db:58:97:93:6d:58:
                    32:30:99:49:d3:ea:43:7b:f5:a5:b0:56:1f:a8:10:
                    17:42:9a:85:37:fb:6f:31:78:3d:ef:e9:9d:16:da:
                    42:60:2a:1d:66:6f:ad:23:4c:09:2f:c7:f8:b8:1b:
                    fb:2b:3c:89:10:47:d2:de:3b:ca:0b:af:80:8d:04:
                    69:c4:8c:4a:f9:df:93:ae:1f:2c:c3:88:d8:fd:88:
                    46:0b:ac:2c:21:3d:d4:e8:6f:d7:9f:e4:60:f3:e2:
                    49:74:c7:f9:fb:2d:83:d5:b5:b9:d5:22:85:12:8d:
                    84:12:1b:a9:cb:d8:d8:b5:8b:eb:47:ae:28:70:ac:
                    b5:51:6f:d0:a3:e8:be:56:aa:f2:5d:39:c3:18:0c:
                    c0:50:a2:19:cc:70:21:53:71:52:2f:3b:7d:9e:c0:
                    3a:6f:1a:27:76:ac:98:bb:4d:3a:0b:de:22:31:8f:
                    31:a1:23:a8:49:19:54:7f:47:d1:89:8f:09:e4:ce:
                    51:50:5a:fd:b2:95:07:9d:3e:6c:a1:3e:bd:84:19:
                    cf:24:f0:dd:38:40:ac:ff:de:b7:91:04:84:65:de:
                    b2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C4:80:DD:3A:BE:5D:1B:CB:1D:D5:3C:1C:E1:59:EA:06:02:A0:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70faf5c8-33c6-3177-bd66-24215fd20c68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.246.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:8f:9d:32:f6:f8:7f:b8:84:46:5c:e7:a9:ae:b5:cd:14:8f:
         27:6d:d9:48:8a:96:84:2f:73:df:50:a3:c8:46:dd:82:ea:41:
         69:a9:df:48:77:19:23:47:da:b2:d6:64:72:06:36:70:cd:49:
         87:b4:7c:71:89:b0:07:92:0a:a0:0d:58:3c:59:e3:61:40:82:
         e1:07:bb:44:6c:f1:3b:53:4f:32:d6:b0:22:ee:47:71:67:45:
         1d:0f:83:c4:70:d7:91:08:d2:e8:fd:71:e7:04:b8:49:eb:7f:
         2a:1c:a2:8d:de:26:1c:99:53:81:36:e4:3a:36:38:74:51:5c:
         0b:48:65:76:f8:87:53:c3:e4:07:88:1c:3f:77:dc:14:5a:19:
         f3:5f:8b:e0:06:ee:cb:0f:c7:63:58:15:70:90:57:7a:ef:d8:
         ee:c4:7c:82:98:e9:71:8c:76:7d:6d:b0:3f:a4:a7:db:35:51:
         39:2a:89:fb:2c:89:16:b8:9c:5a:e7:d9:ce:56:a1:8e:ce:b5:
         34:d7:e4:9a:9a:0c:5b:ac:5d:1b:46:02:0f:db:75:2d:a9:3d:
         b3:18:97:8e:5c:bb:e0:c8:a3:c4:0b:c8:c8:a4:dc:71:8e:7c:
         8c:35:d7:02:d0:af:58:8b:12:88:70:25:61:9d:aa:88:63:3d:
         ca:02:44:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:27:26 2024 by rpki-client on console-fra.rpki-client.org