Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83c437cb-7c20-32a2-8e52-10a8343fb624.roa
File:                     83c437cb-7c20-32a2-8e52-10a8343fb624.roa (raw, json)
Hash identifier:          VvFqITOSzoWAjXdZeClntoWLgYeaS2Kg2TQNPwdXwz0=
Subject key identifier:   E5:77:2F:11:38:B1:D7:81:82:AE:FD:03:E8:11:D2:63:9A:5C:B2:F3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C845CCA0D1ACB9CCE03B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83c437cb-7c20-32a2-8e52-10a8343fb624.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        98.194.76.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:45:cc:a0:d1:ac:b9:cc:e0:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=14bcd75d-d9f0-4e81-827c-b59221222d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c8:b6:6a:2c:58:3a:13:a5:32:1d:5f:b5:4f:
                    7e:29:17:57:88:69:63:ab:23:51:ef:7b:82:0f:dd:
                    11:64:45:75:b3:aa:3b:45:cb:21:49:09:f4:71:6d:
                    df:4e:14:6f:6b:1b:af:13:8e:a3:c4:4a:cb:e2:50:
                    bd:3f:ad:ed:02:de:a6:82:12:29:ef:5a:2d:68:48:
                    dc:e1:75:39:14:9d:07:1b:a0:7d:de:2c:47:63:21:
                    99:c9:f8:bc:5e:d3:a2:27:d1:4e:fb:09:9f:7d:54:
                    fe:23:9d:09:61:56:94:6d:73:dd:f1:1c:e3:76:9f:
                    b3:52:b0:48:86:3b:e2:9c:9f:45:43:72:72:91:5a:
                    28:15:66:ea:27:7d:f8:60:c3:67:c8:f1:da:92:45:
                    6f:b9:9f:8b:65:35:b0:74:70:37:c6:e8:f0:94:f1:
                    3d:f0:41:1a:79:bf:3d:8a:f0:8d:20:3a:c9:df:77:
                    37:a4:57:a3:e2:25:71:ff:d7:fd:86:ca:ea:3e:54:
                    39:a1:87:ef:50:83:e2:14:df:4f:8d:c1:c4:56:3c:
                    c1:4b:61:1f:9e:99:1e:6a:77:cb:5b:2c:a0:21:e0:
                    7b:d7:11:a5:62:d0:49:10:02:a0:51:af:ec:a6:59:
                    ac:bf:42:88:78:26:b7:48:62:ff:d9:e3:89:3e:b2:
                    69:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:77:2F:11:38:B1:D7:81:82:AE:FD:03:E8:11:D2:63:9A:5C:B2:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83c437cb-7c20-32a2-8e52-10a8343fb624.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.194.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:46:3c:43:0a:c2:7a:68:79:5d:3c:af:9c:63:00:d8:52:ae:
         8f:89:44:b2:d4:e9:5e:58:59:06:97:35:9f:11:75:78:d9:e5:
         c1:0c:02:85:1f:5d:a7:3e:81:c6:33:f4:7f:bf:0b:07:0b:c7:
         e6:2d:82:da:0b:d3:0c:de:87:47:df:21:f3:bc:83:64:bb:08:
         ed:0e:16:6c:6e:93:1f:df:56:4d:68:37:81:e8:e9:7c:d8:ef:
         99:3f:59:4a:f2:c3:20:d9:fe:26:73:3a:ee:23:93:18:88:4a:
         ae:29:aa:7b:bd:3e:6b:30:6e:c2:9f:b3:53:62:36:f8:10:be:
         76:db:20:ce:15:1d:7a:b5:ce:39:99:cd:a2:38:57:a3:4a:e9:
         a3:b7:e3:d2:a5:ff:51:cd:d7:08:fd:2a:ac:78:cb:f2:b6:f9:
         a5:85:26:09:fa:16:25:73:d9:be:a8:93:69:70:e0:b7:a9:75:
         73:d5:c0:c9:5d:5b:96:c6:f6:b9:53:e4:37:27:48:63:2d:9d:
         af:cb:e7:5c:e8:7d:64:74:6a:13:f0:de:0f:8f:f9:f1:ea:9e:
         a9:f2:da:39:33:50:82:0c:05:2f:21:32:2e:c0:61:77:db:6e:
         12:88:f4:66:7f:19:0e:c2:b3:d7:be:11:df:c5:00:e5:84:c1:
         29:d1:5c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:06:19 2024 by rpki-client on console-ams.rpki-client.org