Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d38b721-5b7e-35a6-966d-8e023c84deb1.roa
File:                     7d38b721-5b7e-35a6-966d-8e023c84deb1.roa (raw, json)
Hash identifier:          iEzwqkVQ8Nife5m9Q1qUYR770Crp+S5BEqaPrjB1AOM=
Subject key identifier:   0F:37:90:7D:D8:E5:54:9B:CA:B0:BD:27:5B:FE:CD:57:25:F4:CC:5B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9DA926EEBC31FDC322EA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d38b721-5b7e-35a6-966d-8e023c84deb1.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        98.51.208.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:a9:26:ee:bc:31:fd:c3:22:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=206e7802-4365-4520-8c89-741ccb7fda02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b7:e4:55:79:07:18:6a:64:ee:7f:89:1c:e8:
                    d4:20:cd:c8:4d:59:40:02:1c:30:94:40:72:87:92:
                    5c:c9:18:1e:2b:ba:95:0d:f2:6c:0e:9c:b1:6a:63:
                    08:fa:be:5b:58:9f:14:86:3a:d7:62:6c:9e:9f:02:
                    ef:77:ba:0e:c5:31:70:e1:fd:85:5b:ef:b9:9a:e7:
                    d3:56:d2:52:b7:2f:cc:c9:87:11:50:68:af:fe:f9:
                    f2:a8:a8:e0:11:e1:ef:3b:a7:3f:f2:16:8e:be:0b:
                    3c:ee:e0:a9:19:15:f4:47:c1:6a:29:a6:b4:30:b3:
                    fd:02:dd:a5:66:77:79:6f:01:76:39:53:a2:40:1f:
                    b7:83:91:60:31:f8:60:12:61:ec:92:fb:55:91:a8:
                    cd:f4:90:45:99:cd:45:86:f2:76:1c:29:be:89:55:
                    9f:8e:0c:95:8f:06:b7:a5:59:43:a7:8c:f8:c2:b1:
                    b0:dd:1d:86:8d:79:d5:91:d2:88:d5:12:12:87:86:
                    a7:b7:f5:6c:16:e1:36:67:43:e4:4e:a7:18:bf:d7:
                    5d:79:f1:40:6b:71:2c:18:89:a3:5e:cc:49:1c:c5:
                    72:2a:c5:49:3f:c9:51:d7:17:59:25:a8:7e:04:e9:
                    b9:71:e9:b0:7d:5f:75:6b:f7:db:e7:bb:10:f1:0e:
                    ff:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:37:90:7D:D8:E5:54:9B:CA:B0:BD:27:5B:FE:CD:57:25:F4:CC:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d38b721-5b7e-35a6-966d-8e023c84deb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.51.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:c9:95:8f:bf:2b:f5:72:c3:e9:24:90:1a:db:63:53:37:bd:
         cb:e2:b9:c8:8b:a2:ed:cc:57:1d:65:d0:10:21:76:e5:d6:86:
         99:44:b9:b5:54:36:7b:05:40:19:d2:7a:92:7d:2d:23:92:ab:
         96:d7:27:e2:74:b7:7f:e7:d3:cd:45:a3:f0:29:0d:ba:e0:26:
         da:9c:97:79:32:23:52:15:75:56:95:bc:27:d6:40:81:c5:81:
         b0:98:34:c4:03:52:f2:28:c5:29:29:3d:b2:ba:2a:c6:63:25:
         d9:4e:49:8c:32:98:54:09:88:85:35:3b:a5:ab:e5:56:56:ea:
         a2:56:eb:1e:93:5b:15:e4:54:e0:f2:15:e0:65:10:e8:96:e8:
         d1:f2:33:25:0e:a0:a4:63:71:dd:2b:6d:2f:b9:47:8e:54:be:
         eb:68:be:87:9f:62:0b:0a:3b:b5:76:64:ab:de:1a:86:bd:1a:
         18:39:16:f4:ad:8c:fa:c1:9a:c2:39:99:69:64:a9:09:69:70:
         48:cb:14:b1:15:66:41:e0:1c:4e:9d:16:a7:98:f4:03:41:43:
         c5:6a:9a:4e:26:9e:c4:cc:34:7c:db:7c:d0:a3:18:d8:79:01:
         b6:8e:b0:09:4e:25:f6:59:2b:83:1b:0b:51:81:98:7b:b9:83:
         42:e0:38:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:28:31 2024 by rpki-client on console-fra.rpki-client.org