Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a29e54c2-2961-3c29-9d05-cac99e06376b.roa
File:                     a29e54c2-2961-3c29-9d05-cac99e06376b.roa (raw, json)
Hash identifier:          901xE38TO+Xhg4rs7uAsJaaWp/z32UsrcmH0xSMqSyo=
Subject key identifier:   06:77:7A:9C:3A:97:FD:C1:B3:38:40:4C:A4:16:B3:41:1B:1D:F8:4D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF855C8261081E267979280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a29e54c2-2961-3c29-9d05-cac99e06376b.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22909
IP address blocks:        98.40.60.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:55:c8:26:10:81:e2:67:97:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=1e9935f3-2d1c-474a-9d80-d42b7eacc140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:99:7a:47:87:22:c3:80:bc:1e:34:01:b6:83:
                    48:d3:64:4b:bd:1c:76:72:70:be:03:97:d1:2f:ba:
                    2b:22:0e:dc:c8:0a:9b:ad:e2:df:1b:ff:35:ec:06:
                    c7:78:65:5f:56:0e:a8:45:0f:02:ff:d5:96:c7:ff:
                    38:9d:98:d8:2a:ef:cf:c7:50:4f:d5:5a:f3:6b:ec:
                    87:b6:f9:57:64:cb:a0:0c:71:92:f6:e4:a1:6a:d9:
                    6d:01:15:48:96:3b:db:f0:44:8f:12:f4:7b:1c:b8:
                    d5:de:e9:a5:14:59:98:ff:33:56:5b:38:83:62:fb:
                    8b:6c:4e:fe:a8:ed:29:30:35:75:5e:96:33:49:06:
                    dd:46:0d:69:27:ef:7f:8e:66:9c:07:60:e5:38:e5:
                    c7:b4:f9:b3:53:4a:e5:95:8a:52:e6:c7:9e:9c:0d:
                    1c:20:db:a8:57:82:c6:b4:9d:4d:d0:b1:8b:21:45:
                    a0:83:14:1a:09:11:5c:e3:a4:b7:41:dd:75:0e:0f:
                    1c:17:62:f0:6f:e7:4e:5d:8a:96:99:3d:ac:14:d0:
                    fa:27:b7:d1:d1:40:33:cc:92:50:5b:17:ef:d1:f5:
                    ee:f2:da:43:7f:7b:23:f3:56:36:59:7b:14:51:ad:
                    27:4f:25:39:a7:1a:cb:40:11:7e:32:65:2c:17:f5:
                    55:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:77:7A:9C:3A:97:FD:C1:B3:38:40:4C:A4:16:B3:41:1B:1D:F8:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a29e54c2-2961-3c29-9d05-cac99e06376b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.40.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:bf:ae:c4:14:eb:cb:1b:0b:39:49:12:e2:4c:6e:e9:7e:67:
         06:76:b4:a0:3e:e3:db:74:7e:fa:f6:ee:ab:d9:7e:8c:cb:fd:
         05:25:54:fa:53:c8:17:1d:25:1b:0d:86:2f:02:7a:80:09:f3:
         a5:13:04:87:e5:d3:f9:c9:56:a8:1a:57:2d:99:37:c3:3e:31:
         1a:91:07:08:5c:48:44:49:fd:3a:44:27:ac:13:4d:9e:25:d0:
         15:93:a9:64:e3:aa:1a:85:97:b1:b4:8d:af:fa:82:5e:1d:db:
         a2:9c:a1:3a:cd:56:25:9f:fe:69:26:f5:ba:11:62:45:bc:55:
         e9:f9:f0:a7:2a:a6:fd:59:6c:17:2d:1c:7a:e7:f6:e1:6c:b9:
         d0:66:de:4e:36:65:ee:aa:08:c3:6d:8f:b1:53:97:79:a4:4f:
         12:89:35:b5:37:fd:30:04:67:2d:3e:98:3b:28:1c:ed:83:49:
         03:20:10:18:df:08:0c:db:c5:40:a3:de:ad:af:a7:fd:d1:24:
         16:f5:56:34:0b:15:62:50:d0:68:a4:36:e3:8e:da:f3:18:5b:
         0a:62:10:7d:72:cd:54:48:0b:d9:99:70:63:b2:38:e9:9f:61:
         1e:4a:f3:35:36:bc:33:c4:65:f3:b6:fe:d4:6f:b5:b8:4e:5a:
         61:d6:1e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:24:56 2024 by rpki-client on console-fra.rpki-client.org