Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a57e32b9-41ea-3561-94d9-4a1ef36c975a.roa
File:                     a57e32b9-41ea-3561-94d9-4a1ef36c975a.roa (raw, json)
Hash identifier:          pK/1xv/Dhc5OF9Xnh5/lMmymeEwdxPOh8V4IReLA2P8=
Subject key identifier:   C2:24:AD:41:7F:EE:62:AA:2D:96:15:88:C6:A3:4E:36:EF:19:EF:69
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C85FDCC636FFC93E51D920
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a57e32b9-41ea-3561-94d9-4a1ef36c975a.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        98.200.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:5f:dc:c6:36:ff:c9:3e:51:d9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=e494470d-e505-405f-87a7-976fe2026b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ed:b6:91:b1:d9:ba:ef:68:63:fa:0f:2a:ba:
                    e7:91:a9:45:d1:d3:92:bb:49:58:ce:a9:e3:1f:0b:
                    92:45:73:79:de:e6:c4:38:34:16:58:38:c8:a2:ca:
                    2c:96:04:e8:fc:ec:cf:c5:85:46:b8:44:15:c2:58:
                    13:f9:0b:76:d4:8b:18:84:a0:c5:c5:96:d4:e7:be:
                    db:ce:5c:df:01:a6:ab:19:1b:56:8a:ab:a9:aa:5f:
                    0c:24:84:a6:55:35:40:2e:2d:a9:19:6d:1b:48:90:
                    4a:d4:81:fb:1b:f7:ef:aa:53:31:60:6e:4c:ad:19:
                    9a:04:cd:3f:00:8e:0c:ce:ad:47:2c:55:6d:23:1e:
                    be:37:e9:70:9b:48:1e:94:5d:9a:c3:29:85:3a:2b:
                    c4:ae:25:7b:52:9a:d0:c2:9a:5e:0d:40:94:8f:d9:
                    56:82:e3:19:b9:f3:dd:3d:c2:50:f4:88:b4:c8:a3:
                    db:0a:eb:25:ac:26:80:63:51:6c:16:b7:86:59:1b:
                    ee:06:10:55:89:3b:f6:b0:cd:ba:74:e5:0f:e8:0e:
                    6a:3e:30:b1:54:e0:56:de:a3:90:6d:d6:56:f7:ff:
                    17:5a:85:d7:12:f5:a4:0e:e6:d2:cc:7b:c3:d4:fc:
                    a0:ca:1b:d7:fc:bd:c1:5c:ed:2e:a2:21:fb:c6:5f:
                    83:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:24:AD:41:7F:EE:62:AA:2D:96:15:88:C6:A3:4E:36:EF:19:EF:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a57e32b9-41ea-3561-94d9-4a1ef36c975a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.200.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:7c:ae:03:7a:07:fc:cc:08:98:b9:de:50:22:64:8f:a7:fb:
         34:53:03:e9:af:7b:d8:19:69:90:b9:b5:65:6c:20:78:b7:7f:
         b2:b5:8c:d5:31:b2:2b:16:2e:52:cd:b8:8d:84:b1:c0:0f:e3:
         97:b1:12:d6:ab:fc:60:cf:ff:51:c0:d7:84:39:51:78:d0:a0:
         6f:b5:e2:b5:e6:da:d5:94:39:97:7d:f4:a4:e4:1a:1e:2a:46:
         0f:51:60:b1:8f:62:d9:aa:af:61:a2:e5:8a:9d:af:5b:a9:6e:
         b6:5e:93:4a:05:1b:5a:9e:a9:b6:4e:e3:4d:a5:15:ef:25:a6:
         26:e6:b9:37:0b:2d:d5:c3:da:20:ff:d0:a2:55:e1:c1:2b:75:
         d7:76:87:2c:83:f0:e6:9c:42:c4:97:c9:7d:9d:a3:1c:bd:98:
         dc:40:84:b6:b5:65:9a:f2:1e:3d:6c:19:3a:f6:4d:5f:c5:37:
         78:8a:14:ee:6b:35:45:fe:ab:49:f7:67:5d:2e:f6:d9:ca:a7:
         32:cd:13:29:97:96:4e:85:42:0a:62:84:be:5a:f1:cb:54:d5:
         20:db:59:45:7a:8b:2b:d9:9c:6c:6d:19:24:cd:5a:eb:95:49:
         13:c5:75:b1:23:b8:66:a7:81:40:7b:1e:32:4a:ad:f0:2b:ea:
         da:57:8b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:42:29 2024 by rpki-client on console-fra.rpki-client.org