Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f4ed42b-3458-3ce7-9e5c-2f3a235dde8d.roa
File:                     8f4ed42b-3458-3ce7-9e5c-2f3a235dde8d.roa (raw, json)
Hash identifier:          kydc8oUca64zw2cjbcVoAasnVLg+XNedn3lhSboZ308=
Subject key identifier:   38:DE:48:D9:96:B3:41:B2:45:16:9E:EB:4A:F7:D6:5C:B4:45:56:AA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC88EE5EB291A80A092AFDC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f4ed42b-3458-3ce7-9e5c-2f3a235dde8d.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33660
IP address blocks:        98.33.226.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:ee:5e:b2:91:a8:0a:09:2a:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=519e19c1-4d5d-4375-8da0-d36d9c179acc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d5:7f:68:82:d2:8b:e4:92:6c:36:29:20:45:
                    6e:7e:07:26:27:93:63:d9:88:3b:e6:33:e9:9a:9b:
                    95:a4:bb:98:cd:47:15:44:4d:f2:e5:a5:55:73:6b:
                    1b:21:48:8f:64:d6:48:1e:b5:42:51:f6:ef:ba:91:
                    dc:e7:73:99:c0:46:34:ae:7d:fb:83:03:df:be:ac:
                    9d:93:56:af:8b:36:d1:96:b1:9a:d3:92:5d:cf:61:
                    e7:16:3d:b2:9a:82:35:d6:1d:66:0c:2f:e0:31:01:
                    f8:7f:18:75:c0:f2:7e:bf:13:c0:39:04:4f:58:e6:
                    27:62:ff:66:c9:63:9d:a2:5f:f7:9e:39:b2:a3:aa:
                    49:39:4a:09:16:61:96:a4:87:e1:26:38:55:b9:be:
                    6c:37:97:74:f4:2a:d8:3e:e2:0b:4d:93:e3:0d:05:
                    5b:7d:80:e8:f0:5c:a0:0b:56:e7:b1:1b:42:29:ae:
                    bd:05:ee:bd:39:b8:e6:13:eb:51:c2:71:a0:dc:f0:
                    8e:3c:c2:fd:40:d4:d6:83:bd:e9:0f:98:0e:bd:7b:
                    cc:af:2c:cd:a1:37:2a:1c:9b:1f:62:ed:57:44:bf:
                    db:91:3c:58:3b:89:a0:5d:00:10:e0:78:58:49:38:
                    23:e9:12:17:92:0d:00:1d:08:1d:75:0c:d8:58:a8:
                    4c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DE:48:D9:96:B3:41:B2:45:16:9E:EB:4A:F7:D6:5C:B4:45:56:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f4ed42b-3458-3ce7-9e5c-2f3a235dde8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.33.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:92:b4:30:3e:bd:c5:8b:41:90:74:d7:20:62:76:dc:f2:f2:
         4c:28:e5:ec:6e:c6:9a:6c:6d:66:64:c4:b6:be:8c:ff:51:86:
         06:bb:cb:79:d3:7c:21:14:63:15:2c:45:ea:5d:3e:3d:9e:59:
         f9:a6:13:bf:9a:89:7f:6f:7a:56:7d:c0:78:33:56:0d:0e:19:
         44:84:1f:b0:35:bd:59:fa:8d:fc:f2:07:aa:65:4e:8e:15:ce:
         da:4e:54:a6:74:59:88:7c:8b:57:21:77:21:8c:d2:20:ab:d1:
         0a:48:e9:04:89:61:2d:3c:e3:97:c7:00:9c:ca:0b:db:40:87:
         b4:0f:e4:16:39:3b:6c:08:f1:51:6a:69:f6:2a:d5:be:64:78:
         7e:a1:22:af:de:bd:1a:06:32:71:a9:08:7f:c6:c3:4f:85:1d:
         a7:a9:5d:57:5d:6e:db:a9:ae:be:8c:c0:3b:31:7d:ab:bc:3f:
         19:96:fc:39:bd:79:7f:21:23:87:85:13:cd:ae:10:95:4e:58:
         93:69:aa:3f:db:d1:8b:17:ad:f1:34:91:7b:69:76:ac:3c:85:
         b3:4e:9a:35:80:e9:14:be:8f:52:4e:11:cb:5b:c9:4f:ef:31:
         96:78:d6:2e:7c:96:ce:26:24:41:49:d9:f0:86:1a:c6:1b:f1:
         dd:62:28:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:54:27 2024 by rpki-client on console-ams.rpki-client.org