Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9811bac1-1a56-3e3d-83e4-c76092532f4a.roa
File:                     9811bac1-1a56-3e3d-83e4-c76092532f4a.roa (raw, json)
Hash identifier:          kUSwZmSkhph1gvCcghWFwc5P1/c8guqm1DR7TvYxFFk=
Subject key identifier:   A6:8D:CF:1B:D5:76:63:0A:96:34:B5:5E:FE:B7:BC:E0:D8:70:17:AF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C871DCA228ED686EA82B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9811bac1-1a56-3e3d-83e4-c76092532f4a.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        98.39.76.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:71:dc:a2:28:ed:68:6e:a8:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=5ea41c39-d89e-4655-a41c-21e04a9141ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2b:49:f7:1b:71:de:e3:2e:31:47:ff:a3:cb:
                    82:d6:9c:c6:3a:9b:fd:29:28:7b:2a:54:52:5c:28:
                    b7:cd:dc:d9:c5:bb:e4:98:5e:8c:c8:57:0b:59:0d:
                    42:2e:f5:8d:c9:5d:17:78:09:bc:ac:50:9c:21:f8:
                    3e:07:af:df:a7:8b:65:e2:04:91:79:c3:d3:30:7d:
                    15:a7:90:80:09:fd:2c:2c:67:29:f7:39:1c:e8:c6:
                    5e:6d:24:1d:51:9c:0c:47:23:7f:59:0e:cb:71:82:
                    95:51:5d:7d:ab:5e:ce:0d:e6:ea:3b:76:c1:34:ad:
                    98:d5:06:df:b0:17:95:88:80:c8:83:e1:d8:d8:0e:
                    8e:67:dc:4c:4c:6b:7e:eb:c9:c9:ce:f7:8e:51:62:
                    ec:fc:1d:72:9b:9f:83:62:fc:cc:2f:ac:30:d2:78:
                    3d:6d:de:25:4f:22:56:8b:50:d1:dc:35:7f:c4:26:
                    9e:cb:07:73:96:1b:c3:79:eb:75:71:d1:f1:06:be:
                    b8:36:66:22:61:95:ff:9c:fd:b3:1a:06:00:7b:2e:
                    d0:fd:12:18:e2:e0:ca:cf:8c:95:6c:17:a6:36:3f:
                    06:44:e8:ee:d9:66:e6:54:85:f2:71:95:1d:43:e2:
                    e7:71:3d:70:fb:cd:fb:fd:78:cb:84:46:e4:ab:6b:
                    f4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8D:CF:1B:D5:76:63:0A:96:34:B5:5E:FE:B7:BC:E0:D8:70:17:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9811bac1-1a56-3e3d-83e4-c76092532f4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.39.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:6d:5b:10:76:a3:27:96:e1:2e:bc:0d:52:6c:99:2a:21:2e:
         d9:be:83:d6:f6:e6:7e:c9:f1:17:1a:58:d1:02:cc:bc:5f:72:
         65:04:6c:69:34:81:48:cb:d2:cd:fc:3a:cc:33:49:45:09:eb:
         2d:fd:30:c8:ed:52:5d:18:e2:6c:e4:0c:0e:d7:5d:42:58:73:
         a4:bd:f8:03:96:0f:ed:b7:3c:28:59:a0:1e:26:26:60:f8:62:
         25:56:10:52:92:a6:bc:75:1b:5a:9f:89:94:60:fc:6c:8f:9d:
         af:b8:f9:05:5f:e3:6e:fb:fb:0f:de:15:2b:2b:65:58:b4:ff:
         9e:a1:92:5f:0f:a9:8e:89:b2:a5:20:12:d8:97:5b:f6:9b:a6:
         31:61:80:36:a3:39:1c:ff:70:09:a8:82:8c:be:b7:82:cf:55:
         9d:88:f5:54:f8:24:6d:d8:98:d7:d1:53:bf:09:92:b3:a2:a1:
         c2:1c:75:f1:6c:20:b6:ba:c9:25:79:04:6f:03:6c:c3:55:32:
         f0:a2:6a:66:62:0b:59:a4:d7:2c:33:71:87:08:08:66:ad:3c:
         e2:cd:56:e5:6e:8a:29:94:fa:da:fe:0a:f4:dc:93:09:3e:ce:
         3e:3c:72:7e:2c:91:13:f2:34:75:ed:ad:80:40:28:fa:7e:82:
         b1:fc:cd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:41:29 2024 by rpki-client on console-fra.rpki-client.org