Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ead55f9-6bbd-30b5-aa6c-b3a275e7689c.roa
File:                     9ead55f9-6bbd-30b5-aa6c-b3a275e7689c.roa (raw, json)
Hash identifier:          FAdEe7CSRi5ORCGfXeiNvXVjZrLbe44hlss78tUpIYw=
Subject key identifier:   A4:9C:76:20:65:AE:CA:EC:1F:8F:AC:51:0C:17:20:4D:40:43:72:72
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF856410D45242DBACBF280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ead55f9-6bbd-30b5-aa6c-b3a275e7689c.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22909
IP address blocks:        98.40.116.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:56:41:0d:45:24:2d:ba:cb:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=5c94542e-3f7a-433a-aa6c-461657c67a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e3:4e:f3:e9:ea:4b:d3:2d:ed:51:7c:0e:8d:
                    80:ec:f1:d3:62:15:54:c9:32:89:80:0e:08:2a:26:
                    2a:85:63:fc:b5:44:81:a2:df:9b:73:64:a2:d6:98:
                    35:34:c8:7a:53:b1:86:c0:bc:86:da:79:c1:eb:0a:
                    6a:5e:45:5a:20:1f:16:8b:87:74:34:a0:bc:22:3a:
                    00:96:82:5e:14:c5:0c:66:3f:37:14:d4:68:ea:d2:
                    9f:90:6b:f0:ee:a4:36:77:d6:18:d5:ea:ef:52:99:
                    93:7b:68:54:63:4f:ab:ee:74:68:71:54:ab:04:31:
                    1d:5a:e4:71:20:ef:0b:3f:32:4d:a5:08:f8:e7:27:
                    dc:3b:33:a6:47:ba:e6:eb:ea:ba:ff:d4:e6:e1:66:
                    12:38:06:cc:ec:44:49:2e:67:d9:6d:cc:a9:cf:4e:
                    61:f0:f6:42:84:da:1e:4e:18:13:68:13:ad:3f:33:
                    95:79:f2:f2:94:e6:37:d1:8c:8c:ab:05:62:56:d1:
                    4e:02:d4:8f:63:20:bd:60:f6:44:f8:81:b2:b0:b2:
                    af:95:e8:8c:b4:d7:b0:ce:2c:f2:4d:94:14:27:28:
                    c1:68:48:75:94:14:21:88:66:ee:04:8a:fd:8b:9e:
                    b7:9b:1e:c2:8a:53:c4:ee:d8:7c:7f:5f:cd:86:78:
                    33:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9C:76:20:65:AE:CA:EC:1F:8F:AC:51:0C:17:20:4D:40:43:72:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ead55f9-6bbd-30b5-aa6c-b3a275e7689c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.40.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:d4:49:4f:73:41:37:b4:f5:d0:d7:bb:e3:63:db:0f:42:55:
         62:f2:83:2e:f6:41:3a:48:4f:9a:33:06:69:68:4f:8e:1a:99:
         77:30:67:91:41:1a:d1:0e:f4:9e:1e:d4:20:34:c6:10:40:99:
         40:94:aa:e8:61:9c:ee:f2:49:bd:59:fd:ad:d2:fa:ca:03:8d:
         76:42:33:e9:28:32:b8:93:82:92:2a:8f:bd:d6:46:1b:20:30:
         64:71:7b:b2:b2:70:d5:9d:7c:0f:7a:64:44:1a:cc:ea:92:7f:
         32:da:bb:cb:40:7a:2b:0c:78:f5:01:f7:70:c1:96:04:fd:28:
         bd:a5:c7:2e:b8:ba:d6:e3:67:0f:aa:35:35:e1:91:90:7f:ff:
         c1:bc:89:3d:8f:6c:99:22:2d:0d:68:f9:44:c4:8b:f8:29:84:
         7d:5f:38:34:e4:d7:36:c2:ba:63:de:f1:46:e0:c4:1c:6c:6e:
         b6:5a:d8:58:63:fb:e2:b2:99:78:ae:07:02:f7:d8:1f:da:f3:
         ed:17:00:50:82:ea:e6:97:24:3c:58:d2:be:64:26:b7:5b:8b:
         01:78:aa:16:1e:dd:1c:2f:30:95:75:e4:e6:0e:bd:df:e5:e5:
         88:42:53:c5:7b:37:85:90:a9:16:ee:05:ef:20:2d:23:b8:48:
         47:81:54:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:24:10 2024 by rpki-client on console-fra.rpki-client.org