Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ea9c1f5-8218-3949-80c6-fa1a77a2983d.roa
File:                     9ea9c1f5-8218-3949-80c6-fa1a77a2983d.roa (raw, json)
Hash identifier:          HDt8CcWoD3pqnQ96TyjIfVsPbLKPE3bMlhAStpbTngI=
Subject key identifier:   31:C8:9B:94:38:B1:F9:8C:35:6B:01:3F:F6:8A:97:6B:1D:AC:9B:1F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9E6C72B6D89F2E5416EF68
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ea9c1f5-8218-3949-80c6-fa1a77a2983d.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33660
IP address blocks:        98.33.250.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:6c:72:b6:d8:9f:2e:54:16:ef:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=1f4ca172-2e69-429b-8a42-e19592736109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:af:b1:d6:d3:02:58:9e:a9:14:41:d0:95:93:
                    88:92:1b:19:e2:73:cb:a6:04:c2:88:20:71:7d:6e:
                    47:d3:c6:59:03:4a:67:7a:54:56:94:a4:31:09:2d:
                    2f:2c:40:ea:67:d5:b7:92:b0:9b:a6:7d:a3:aa:d6:
                    d3:a6:1a:c2:88:a8:ed:b5:f4:01:85:2a:f7:10:ad:
                    91:11:ee:bb:97:d8:f7:29:73:86:66:18:08:b5:84:
                    4e:db:a6:0a:2f:be:bc:51:00:02:8d:6a:25:8a:40:
                    23:e3:dc:17:4e:84:33:8e:bb:e1:8a:53:22:d5:9b:
                    a9:cb:4c:a2:c0:5e:de:56:e3:2e:2a:47:3f:94:4a:
                    6e:e6:f0:73:a9:4f:48:f5:4a:ce:87:b0:39:cd:9a:
                    c2:a0:2d:ae:5f:d7:15:ed:a0:e1:09:a3:db:34:c8:
                    3a:4e:5a:a8:c3:23:ef:b2:d4:ad:47:c8:20:9d:cd:
                    8e:99:85:1b:4f:ee:ef:cf:c8:f5:4c:df:97:49:62:
                    65:56:83:21:a0:cd:ba:b5:ad:9b:47:ed:1b:87:0d:
                    e8:61:e0:14:e7:0c:4a:03:b7:dc:a7:76:56:b3:39:
                    6e:69:e7:77:d8:06:55:ef:71:58:bc:ab:44:81:ee:
                    bd:0c:3f:e4:08:c3:dc:4a:83:4f:d7:50:7f:7b:7e:
                    71:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C8:9B:94:38:B1:F9:8C:35:6B:01:3F:F6:8A:97:6B:1D:AC:9B:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ea9c1f5-8218-3949-80c6-fa1a77a2983d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.33.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:14:ca:e4:65:25:99:7d:8a:46:0b:3a:66:5e:99:ec:43:86:
         47:f5:22:d8:28:38:2c:d8:48:ee:63:66:94:31:10:4a:03:dc:
         fe:bb:87:18:c2:22:31:46:2a:9c:e7:22:3f:c5:32:e7:6f:59:
         08:b4:8d:27:f8:67:70:f4:31:f0:bb:4c:7d:cc:2e:5c:b4:1e:
         f4:cb:47:4d:ce:ad:66:4e:71:ac:fc:64:dd:dd:31:4b:18:1a:
         ce:61:21:35:31:69:5e:cf:22:fa:49:54:55:09:47:c8:f5:c3:
         d3:71:13:1b:f4:10:12:fc:db:be:db:89:87:15:e6:f3:63:e4:
         bd:d8:7b:6e:c6:e9:9a:29:f3:cf:1f:6d:7e:a7:94:6c:8f:1a:
         02:17:7f:ca:44:3c:50:d6:93:e8:cc:e1:3d:4e:f7:65:45:74:
         ce:bd:09:55:b9:f4:06:53:ae:ec:5b:c0:e1:5e:90:d3:bf:95:
         c9:6d:93:41:c5:0f:3c:ff:94:fe:4a:ee:c3:36:8a:0d:1b:b3:
         f9:da:ca:e2:6d:ba:e0:cf:9e:47:1c:83:c9:b5:d7:17:89:dd:
         0e:1f:1d:57:ae:ab:3c:bf:91:cd:73:fc:c5:94:a7:33:89:6d:
         71:93:a5:17:ca:e3:68:f9:84:4d:2a:00:b5:eb:76:38:8f:81:
         f2:fb:a8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:08:41 2024 by rpki-client on console-ams.rpki-client.org