Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a41e604-b54b-3730-a9b9-cbbc551bf985.roa
File:                     7a41e604-b54b-3730-a9b9-cbbc551bf985.roa (raw, json)
Hash identifier:          RYp1qoMBkyEfllLcTKrXU8qANARURbHMhDhBFZgUYY8=
Subject key identifier:   3D:0B:24:82:8D:A9:0D:07:74:23:64:E7:59:61:23:C1:36:D3:E1:19
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB23C997F1951D3D84D200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a41e604-b54b-3730-a9b9-cbbc551bf985.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        98.40.80.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:23:c9:97:f1:95:1d:3d:84:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=23cd0b9e-941d-4201-9eb9-1786f1a19c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:57:29:1d:25:b7:d3:78:87:65:51:7a:42:a4:
                    75:dc:46:f9:73:df:40:6d:19:04:73:f3:16:da:c6:
                    1c:32:db:53:bf:8f:10:7f:b5:d1:e4:86:ed:08:03:
                    0f:cb:68:07:c7:83:b7:c2:bb:6e:36:fc:92:c0:38:
                    4a:dc:35:5e:73:12:f1:05:24:66:ba:cc:80:2e:6a:
                    13:0a:ab:2c:2d:49:54:ed:0f:99:48:39:fb:9a:d8:
                    f3:50:f6:7c:52:b5:8d:f8:c6:19:98:c4:05:d6:7f:
                    29:c6:d5:db:0d:e1:27:23:2b:29:91:04:75:2e:97:
                    3c:d2:87:20:64:f5:23:aa:43:3c:71:19:43:24:53:
                    a8:62:78:26:0c:1b:ab:1a:7d:97:38:6f:46:73:2b:
                    bb:4e:df:c9:5e:89:5c:92:dd:6c:6c:cc:c8:1d:4e:
                    51:d9:06:ac:05:d7:c9:32:bb:6e:7f:4b:4d:6e:7f:
                    0a:c0:c8:e0:cf:6e:06:6b:e6:c2:b1:13:1b:32:a1:
                    4b:e5:23:e5:42:9b:bc:5d:a3:96:03:57:ec:6a:64:
                    06:43:58:48:60:85:8d:55:76:3b:2e:09:f6:5b:85:
                    db:f4:25:fe:2e:88:71:c5:0b:cf:e5:09:bb:45:4f:
                    38:73:b9:c4:9d:df:04:d7:2b:25:4b:93:da:01:cb:
                    59:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0B:24:82:8D:A9:0D:07:74:23:64:E7:59:61:23:C1:36:D3:E1:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a41e604-b54b-3730-a9b9-cbbc551bf985.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.40.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:7c:1d:9e:4d:aa:ff:fe:a4:da:78:19:7e:8f:89:27:9b:15:
         c5:c6:ea:0a:d4:d6:53:eb:a2:e0:04:61:93:66:c8:4c:79:3d:
         63:a8:43:b1:6f:a1:73:96:6e:65:fb:9a:6c:ae:3a:f9:d0:89:
         a6:4c:da:69:06:74:d1:8b:78:2c:74:3e:35:4d:33:a4:01:9e:
         62:c9:7e:ab:1f:d5:fd:c7:4f:21:19:16:1b:8b:a7:79:84:03:
         26:83:b1:cb:45:13:4c:8e:2d:94:f6:44:f3:a8:9a:45:3a:92:
         cb:e8:af:af:53:90:87:e7:3c:cc:cd:0f:50:3e:66:1b:c4:2d:
         8d:b0:4e:0a:3d:25:98:e0:b4:03:fc:1a:66:ba:00:4f:0c:f7:
         cb:8a:d6:29:7f:68:1d:d6:8b:70:03:99:12:8c:a5:32:21:ab:
         fe:25:a9:7f:78:a1:17:3e:40:b5:57:ad:ef:52:c4:a5:7f:fc:
         19:0d:23:98:e3:78:7c:b0:83:53:01:3e:0a:e3:79:6d:ee:5a:
         8f:ee:2d:4d:55:ee:20:c3:c6:f1:5f:8d:b2:58:53:4d:2b:6c:
         44:fb:b1:a4:50:a2:01:42:6a:34:10:b5:42:fb:2f:db:f8:5e:
         c5:b9:05:d1:40:37:74:45:a6:cb:54:43:dd:d5:f2:f2:96:de:
         87:97:22:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:51:18 2024 by rpki-client on console-fra.rpki-client.org