Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f55e1b6-c638-3f47-a10a-8169e4b7859b.roa
File:                     9f55e1b6-c638-3f47-a10a-8169e4b7859b.roa (raw, json)
Hash identifier:          8B+tyG8Ku82xdc02YoGIwKWKH6BnJHmQqhAL9Q+4lnA=
Subject key identifier:   CD:9A:98:90:DD:F5:D0:89:ED:E4:BA:B6:9E:A5:02:57:8F:14:FF:6B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9CC8962B8346A6EF24DF60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f55e1b6-c638-3f47-a10a-8169e4b7859b.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        98.228.144.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:c8:96:2b:83:46:a6:ef:24:df:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=c9143170-6239-490a-8a7d-1441bc642c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b7:ab:26:a1:bb:4c:5a:80:9f:05:2b:26:7b:
                    d7:64:1d:cd:31:3d:9d:06:be:36:c8:1d:0b:ba:ad:
                    b6:bf:fa:d9:90:65:21:99:2a:65:6c:f9:94:c9:03:
                    49:43:0e:fe:09:e1:e5:2c:10:56:9e:c6:57:5c:58:
                    53:3e:7d:fb:4f:ce:9f:99:19:c0:1c:09:10:94:77:
                    dc:75:ec:c8:1f:aa:65:4e:da:a8:ec:35:53:55:58:
                    3a:64:83:0b:9d:01:89:3b:d5:ff:16:de:b1:f9:c4:
                    7c:62:ad:f9:ec:f8:d8:26:80:ab:69:c7:6d:43:8d:
                    10:bc:9a:1c:77:49:93:5e:9f:38:7c:4f:e7:3b:10:
                    41:44:4a:b3:64:89:81:8c:24:20:40:b2:9f:9f:a8:
                    1e:f6:88:25:6d:64:ab:2a:5c:dd:be:a9:47:8b:c3:
                    14:d9:c8:e3:ee:99:6d:f5:46:98:9b:51:99:cc:3a:
                    23:a5:6d:6c:01:20:6b:b1:7a:49:d5:ff:09:de:cb:
                    53:ca:29:4d:99:d4:a4:1b:76:73:6f:da:17:9b:6f:
                    5f:c0:c4:7b:9f:19:c9:e6:bd:a4:b0:a7:c0:83:62:
                    1e:e5:c9:3c:3b:44:be:41:c4:6e:4c:d8:5e:1d:96:
                    68:da:d6:5d:6b:ff:eb:51:7b:b1:35:aa:b0:4c:5c:
                    5b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9A:98:90:DD:F5:D0:89:ED:E4:BA:B6:9E:A5:02:57:8F:14:FF:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f55e1b6-c638-3f47-a10a-8169e4b7859b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.228.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:1f:7c:63:3c:9e:11:65:6d:f7:8b:70:df:ef:af:ae:0b:f7:
         1f:ef:3c:16:b9:ef:51:52:75:3f:21:3f:be:30:cc:ad:b1:71:
         76:35:f0:33:34:a3:2f:4a:33:1f:f4:0d:f7:ed:7e:22:2f:91:
         39:53:48:ae:c5:6c:44:9d:d8:54:71:6c:79:40:59:a6:20:c8:
         94:67:ef:44:a5:45:02:79:b5:c4:d8:c5:e5:02:97:71:42:d2:
         02:31:53:1f:f5:9d:83:62:5a:e5:49:38:ed:79:d5:25:9d:2f:
         ea:15:ac:c5:05:54:a0:d6:f9:34:3b:b0:86:bf:24:de:5d:2f:
         67:b7:28:68:ea:a0:b1:bb:c8:28:31:7d:2e:fb:a4:aa:8c:f3:
         b1:d1:c8:34:c5:fc:fe:53:b8:6b:c1:34:1c:21:2f:ef:09:e4:
         d1:72:73:1b:8c:2d:f2:48:6e:97:7e:6d:7d:ef:74:69:6a:ab:
         cc:50:2e:98:8d:c6:ca:75:d9:be:9e:10:58:1e:1d:d4:c4:eb:
         33:eb:cb:dd:fc:6d:dd:3f:ef:37:b3:b1:87:f1:78:8e:08:db:
         0b:37:dc:25:c4:fd:b7:7d:6a:41:9c:fa:3d:2f:bc:d7:c7:fd:
         5f:48:58:a7:e3:72:af:f3:ed:eb:a9:57:7e:a5:36:42:ba:72:
         71:50:dc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:24:17 2024 by rpki-client on console-fra.rpki-client.org