Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fa8d404-8ceb-3a27-9677-21a23003f527.roa
File:                     9fa8d404-8ceb-3a27-9677-21a23003f527.roa (raw, json)
Hash identifier:          dceQbt81ki7jTTOZcUUN/3cYKKe9UvKwx05ZIuPYt5o=
Subject key identifier:   EE:AA:DE:94:88:2F:32:8D:9E:5B:38:35:65:C9:0C:39:F4:16:92:7E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9DA54DEFA9D9C1BA408900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fa8d404-8ceb-3a27-9677-21a23003f527.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        98.47.242.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:a5:4d:ef:a9:d9:c1:ba:40:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=c1d578bd-d38e-409f-af71-9321e3f1ecbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f0:a9:e5:88:57:45:e5:21:7b:fe:02:83:cc:
                    40:d3:99:5c:8b:54:b7:fe:11:68:bf:77:99:b5:ba:
                    8a:5a:e8:88:f4:1d:e1:20:48:0b:c5:47:60:37:45:
                    8f:16:b4:60:43:6f:22:87:83:de:40:09:85:bd:32:
                    df:19:96:78:43:19:ef:2d:51:14:65:15:36:56:a6:
                    d5:61:68:43:3d:8c:2e:8a:2e:a0:8b:ee:34:11:f9:
                    7b:c4:23:9a:f9:2a:7a:37:65:13:2a:df:05:ca:f0:
                    a2:8f:aa:c2:8b:e4:fa:82:5a:10:1a:1c:b6:48:4f:
                    39:18:0c:e4:f1:c9:6c:44:90:db:34:20:12:04:23:
                    df:ba:cb:10:a6:ec:0f:c4:85:09:df:fa:c3:3e:0c:
                    8d:d3:d6:aa:01:43:55:d8:e2:1a:72:96:79:4c:7a:
                    93:0e:43:db:24:2b:bf:a3:1e:12:58:f8:ad:dd:8e:
                    2d:16:82:f8:63:b1:e4:a8:53:8a:72:41:35:c4:20:
                    77:71:b7:33:57:ee:0f:c6:da:d7:65:05:85:f9:fd:
                    af:64:67:90:ff:af:9a:da:e4:80:31:c6:de:40:25:
                    71:de:ac:b3:ef:9f:3c:22:77:85:3a:3a:0f:cd:a1:
                    09:0b:ee:51:7d:37:ad:39:76:b7:dd:b9:11:fb:f7:
                    98:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AA:DE:94:88:2F:32:8D:9E:5B:38:35:65:C9:0C:39:F4:16:92:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fa8d404-8ceb-3a27-9677-21a23003f527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.47.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:55:84:ef:81:2f:fd:59:2d:81:25:93:d7:3d:ec:60:7c:38:
         13:3d:2f:62:61:2f:27:96:af:26:92:66:9b:61:c8:68:9d:78:
         22:c3:76:dc:10:ed:71:4a:78:16:62:19:4f:94:5a:6e:c0:d0:
         1d:dc:ba:4a:9a:01:c6:d1:a8:ab:07:e9:a7:9e:ff:48:f4:c2:
         24:d0:3a:9c:b1:c8:dd:ac:3c:46:d0:a3:a6:29:35:b2:3a:7f:
         74:be:a5:02:17:b6:5f:46:ed:ba:3e:b9:be:32:97:6d:b0:31:
         4c:cf:00:39:54:fb:19:f8:63:04:a5:42:8b:fa:f7:6f:50:a2:
         c7:58:ac:4f:79:24:f2:e3:5d:54:dc:0c:ea:96:47:cc:04:ba:
         3a:cc:93:15:79:a7:e7:d0:1a:ee:a5:c4:fa:b9:f7:79:33:01:
         68:77:4d:4e:d3:25:01:b3:da:57:04:d8:5f:a4:d4:c2:4c:c2:
         25:71:ae:25:29:7b:a8:8f:db:e6:61:9f:cb:8d:59:dc:b1:fd:
         11:44:9f:90:86:4c:1b:b5:df:ba:7e:f3:f3:e9:3e:f6:d0:d1:
         df:b1:b4:e8:82:ad:e9:6d:56:24:d7:fc:c2:1f:58:3d:55:2d:
         90:43:96:5b:ac:53:28:2e:50:c6:81:68:ea:4d:a6:ac:a5:05:
         94:6f:83:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:02:01 2024 by rpki-client on console-ams.rpki-client.org