Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acbbea55-8969-3e8b-b8d3-81542e160912.roa
File:                     acbbea55-8969-3e8b-b8d3-81542e160912.roa (raw, json)
Hash identifier:          4FbAl2gz8axRi4Yqn5pWPOla+xdxtSA1t6LLVvWW6lA=
Subject key identifier:   CB:E4:0F:78:5D:32:DA:70:D9:3F:D5:76:B1:2B:0D:00:C4:58:CF:FF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF856A91E14DE3A23167280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acbbea55-8969-3e8b-b8d3-81542e160912.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22909
IP address blocks:        98.193.164.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:56:a9:1e:14:de:3a:23:16:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=b5749f64-e491-4d9f-bc7f-4506ffdd0f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:16:90:bf:1a:89:32:76:53:50:23:ba:03:f7:
                    a4:1b:a9:46:36:8e:9b:eb:0f:05:46:9a:61:e6:0c:
                    e9:3c:a6:f1:57:2a:3f:e3:79:3d:4c:3f:23:e4:74:
                    51:c8:4f:1a:36:68:99:9b:db:65:fa:4e:e6:88:1c:
                    63:cf:52:a2:cb:63:1c:d4:83:ae:86:92:23:2a:3e:
                    70:27:72:19:d5:b5:c8:bf:c9:11:1c:01:3e:f3:33:
                    ec:49:f9:c6:35:8b:88:89:63:45:ab:a1:35:44:b8:
                    2d:01:8e:51:95:77:ab:7c:09:b6:d8:ec:6e:f7:a3:
                    e7:f1:f8:6a:33:0b:7e:0f:94:36:2e:17:ce:c7:51:
                    d4:34:bd:70:a7:30:4b:39:39:0f:9c:2a:18:a2:50:
                    6a:5b:5d:e3:a3:aa:66:e6:cb:b8:e1:41:a2:6b:b0:
                    a5:1d:fb:52:3e:93:91:6d:b7:6c:7b:f8:99:a1:e3:
                    c4:09:90:39:4f:75:2e:05:b6:12:04:45:83:eb:e0:
                    cd:b4:df:73:54:df:f9:95:68:d5:10:e9:bd:90:23:
                    ae:a1:aa:0c:0c:dc:71:15:ba:58:70:b6:45:e3:ee:
                    3f:ba:70:ed:87:98:40:71:fb:2e:87:55:f4:9e:34:
                    74:93:dc:77:88:53:de:95:1d:34:34:87:e6:89:8e:
                    6b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E4:0F:78:5D:32:DA:70:D9:3F:D5:76:B1:2B:0D:00:C4:58:CF:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acbbea55-8969-3e8b-b8d3-81542e160912.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.193.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:a8:a0:fc:98:c7:41:8d:de:fc:de:30:7e:e9:e2:2e:86:f9:
         73:e9:2b:9a:b8:e5:57:49:cf:83:5a:c1:81:1f:c4:4d:d1:6f:
         b5:15:76:a8:df:95:0c:80:dc:11:7b:d3:c4:f9:79:89:16:9e:
         f1:64:f4:c7:60:ad:fa:68:8b:db:cc:92:0f:d7:e0:e3:6f:7f:
         3a:9f:8e:4d:d5:e3:55:18:c7:ce:80:0b:af:fa:60:16:b5:2b:
         81:91:cd:79:33:31:91:dc:89:af:87:99:79:5b:e3:45:24:3f:
         e3:2d:eb:6e:be:8d:43:e9:5e:41:53:01:b1:59:02:38:d8:08:
         76:84:ed:d8:3e:9a:ae:fd:0e:71:60:50:02:31:67:43:85:19:
         3c:92:08:41:fb:8b:9f:da:b4:dd:81:52:ba:aa:89:69:2c:25:
         9c:bf:97:89:2e:13:9e:e1:bf:f4:f0:1f:07:96:23:4e:d4:7c:
         f5:9d:62:4e:6c:bd:af:92:88:87:fc:57:eb:d9:07:20:15:f3:
         e4:3f:41:da:1d:f5:da:76:ad:c0:5d:56:33:d5:9a:83:42:2f:
         61:d6:bf:05:ea:66:64:82:3a:ff:0a:79:1b:f8:ca:55:aa:1a:
         67:58:93:42:04:a8:c4:87:3d:09:c3:54:34:f2:4b:ab:d7:df:
         ef:68:3b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:13:47 2024 by rpki-client on console-ams.rpki-client.org