Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af4037e7-f338-32da-b3f6-c67b4b47fcd6.roa
File:                     af4037e7-f338-32da-b3f6-c67b4b47fcd6.roa (raw, json)
Hash identifier:          bi+dOaTnP+wOrfosovfgJRWBAq76khLISX4+/k61YZU=
Subject key identifier:   CD:66:C5:5B:EA:A0:7A:9C:60:05:3F:FB:48:7F:56:FC:F4:95:13:9B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C873BB546717D5BBDA5380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af4037e7-f338-32da-b3f6-c67b4b47fcd6.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        98.40.212.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:73:bb:54:67:17:d5:bb:da:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=cd25dd89-76e4-448a-b171-91d1e1215d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d5:30:7e:4a:32:c0:a6:40:96:33:1b:44:e7:
                    26:a3:c6:18:4f:da:be:e9:1a:48:d4:b5:1e:5d:ff:
                    fb:93:ef:83:86:2d:2e:ee:d3:49:66:d3:d6:de:7c:
                    c3:9c:0c:45:01:12:49:75:1a:a6:88:0a:81:02:60:
                    e1:37:ea:e5:25:ad:bb:a7:cb:9a:bd:d5:3d:c4:2e:
                    0a:40:6d:c9:24:99:41:ea:4e:18:71:d5:20:0f:23:
                    d5:6a:92:01:39:66:bc:1d:41:e5:e2:bb:cd:7b:af:
                    54:68:a2:d5:49:62:9a:3a:be:2b:48:62:3a:ad:e6:
                    d4:0e:3b:a6:2e:f3:5a:41:c6:1b:c5:95:4c:a9:0d:
                    80:70:34:24:df:7d:c6:b1:ed:02:6f:2b:ba:68:df:
                    fe:5f:ac:48:37:67:30:ff:60:d4:a9:68:b8:e3:3f:
                    19:5c:26:12:e5:61:63:cd:9b:89:3c:3c:19:40:7d:
                    b0:cb:2e:2c:97:f3:23:e5:6e:72:86:5d:3c:a9:f3:
                    34:ed:f8:47:ca:37:b9:fb:3d:49:c5:69:fe:ae:5d:
                    bf:3a:0d:41:2f:65:62:42:18:0e:60:14:bc:a5:cc:
                    a8:9a:20:0c:cb:4a:22:57:ef:68:04:f7:d4:ce:e9:
                    f1:b0:d3:8e:f6:74:b4:e3:70:39:3a:49:14:9b:3d:
                    7b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:66:C5:5B:EA:A0:7A:9C:60:05:3F:FB:48:7F:56:FC:F4:95:13:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af4037e7-f338-32da-b3f6-c67b4b47fcd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.40.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:c2:8d:d3:ec:c8:8d:a0:8d:49:10:86:13:72:12:07:da:d2:
         30:55:34:dc:a0:7a:6d:68:3d:cf:ed:e7:0e:bc:cb:38:c5:95:
         cf:5b:ef:e1:e2:bc:a3:99:b5:44:a9:5e:4d:4b:98:72:1f:f4:
         c9:17:59:c0:f9:7b:03:b1:38:8d:09:44:ed:f5:d2:a4:0b:0c:
         e5:b7:6f:b6:7c:fc:d0:40:f8:a4:12:de:15:cc:aa:5d:1d:43:
         3d:ee:e8:8f:8d:15:98:b5:6a:e7:c7:d2:84:e8:5d:b6:c2:6d:
         f2:f9:4d:2b:25:cc:c5:a1:80:da:ee:e6:fe:53:05:84:96:3c:
         0c:84:b3:0c:a3:59:d4:2b:7d:c9:7b:1b:7b:4c:f9:b9:45:47:
         40:f5:de:85:c0:80:21:92:a6:d7:a6:c0:8a:c6:cb:74:1b:21:
         ad:2a:c4:d4:bd:75:45:18:61:82:ff:97:42:13:7c:1a:5d:7b:
         bc:77:77:1c:64:00:f8:40:29:2a:16:84:f6:77:48:04:0b:1b:
         e5:05:8f:71:af:40:1f:04:e1:f4:6f:67:26:6f:3a:63:49:b4:
         28:de:c9:bf:ee:9f:4e:17:62:4e:37:d5:78:2b:73:4e:ed:9c:
         94:e6:2e:9b:fc:9d:df:20:94:0f:ee:f5:0a:1a:6f:e5:2d:2d:
         2c:23:fb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:43:20 2024 by rpki-client on console-fra.rpki-client.org