Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cbf3995-f0f4-3269-a879-6b00efd6cfe9.roa
File:                     9cbf3995-f0f4-3269-a879-6b00efd6cfe9.roa (raw, json)
Hash identifier:          jJyPxSzAiS5r3QXnes3eBnXZuS2OqUYJkGSncX3B8jA=
Subject key identifier:   B8:76:1D:3F:CF:9A:5A:9B:9D:42:73:BA:4D:F5:FB:F9:BB:78:15:BB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC89883DF52B1901324BA080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cbf3995-f0f4-3269-a879-6b00efd6cfe9.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33660
IP address blocks:        98.202.66.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:88:3d:f5:2b:19:01:32:4b:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=dbc8a835-8984-4c82-af2d-a33e696b3349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a5:6e:4c:3b:ef:c7:17:4d:f5:94:f8:92:3b:
                    45:42:8d:fe:f0:cd:eb:bd:9c:d8:f2:34:bc:4e:9e:
                    46:c7:8d:39:cb:60:fd:fd:6e:76:72:8c:b4:b8:15:
                    6d:d1:3d:9e:36:b4:2c:d5:3b:c0:15:7e:9d:ee:2b:
                    eb:59:ad:54:23:33:f6:7b:ac:ac:46:1f:c2:bd:46:
                    7a:fe:de:a8:65:4b:c1:40:39:85:16:fe:58:7b:52:
                    f9:44:c8:55:1c:e3:19:da:df:ab:e2:7a:78:92:d2:
                    53:67:7e:23:74:f8:c4:46:89:bc:f5:0d:fb:38:69:
                    c0:cc:5e:69:88:50:6e:f8:a2:21:3d:ea:4c:01:e9:
                    57:af:e0:22:10:ef:17:21:5c:c3:ae:a6:3e:b9:e3:
                    ee:bd:84:47:2e:e3:64:6c:9e:32:c3:ea:26:eb:e9:
                    89:49:d4:eb:f1:7d:a3:e9:6c:81:57:ed:07:fe:67:
                    88:7f:90:c5:1f:b8:7a:4a:28:3f:37:b1:85:cd:0d:
                    23:14:6f:83:40:1e:99:3a:1e:a6:4a:4f:02:93:85:
                    90:ff:ec:e2:f7:18:c6:32:40:7d:71:61:4a:80:d3:
                    8c:b7:8f:4f:e3:32:49:fb:18:03:be:11:4a:65:69:
                    5d:70:4b:6d:e2:6c:07:f7:4f:ce:cd:69:06:fe:b3:
                    2a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:76:1D:3F:CF:9A:5A:9B:9D:42:73:BA:4D:F5:FB:F9:BB:78:15:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cbf3995-f0f4-3269-a879-6b00efd6cfe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.202.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:20:6b:fb:58:e7:7e:af:b5:5b:a5:e2:bd:69:a1:a3:43:8a:
         e2:b5:58:83:b0:33:6b:2e:b2:43:dd:8c:40:71:73:c9:2c:a8:
         4c:ca:10:45:22:0d:75:07:a6:66:ee:8f:bb:4e:2b:34:d5:b1:
         b0:94:8c:67:cf:28:fc:d9:47:bc:50:c5:61:16:49:95:ba:29:
         6c:af:b5:3a:bb:5d:2f:c7:94:9e:17:56:26:f0:91:fa:6f:b8:
         fb:33:d4:49:ce:47:55:11:1a:62:33:90:2c:b2:e3:f4:74:f8:
         db:47:0b:8f:d8:4d:00:3b:2e:da:2a:5a:6f:8a:b6:42:10:65:
         a3:78:87:43:6a:4e:fa:09:de:c1:4e:3d:50:97:e9:72:ad:59:
         3d:6b:73:fa:9d:69:98:71:52:d1:37:46:23:85:51:2b:a3:51:
         a6:54:b1:91:98:cb:11:19:d6:9f:23:77:dd:a8:0d:f4:c3:49:
         0b:74:e9:4d:89:dd:3e:82:2a:01:37:06:49:0d:4a:ca:34:0c:
         09:e9:ac:29:34:8b:a5:a3:45:ba:a1:e7:fa:a8:9c:dd:d4:2a:
         56:d7:2b:c1:cd:77:a8:e9:f0:72:41:54:96:4e:56:b8:f7:15:
         41:08:89:3f:05:ac:1e:57:df:e8:2c:9c:d0:a7:68:3f:37:88:
         16:e4:0a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:20:01 2024 by rpki-client on console-ams.rpki-client.org