Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af6ac3ce-8e00-3d36-a4e4-ef68ac2d118e.roa
File:                     af6ac3ce-8e00-3d36-a4e4-ef68ac2d118e.roa (raw, json)
Hash identifier:          uCl9YBNmErLFPu1s7YxrC/p2hqZtCCw3spFAGsljcyo=
Subject key identifier:   6B:D9:14:95:43:AC:56:EF:94:C7:6C:85:AF:78:8A:0C:8E:C2:FB:5A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9CCFCB86852891244EF980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af6ac3ce-8e00-3d36-a4e4-ef68ac2d118e.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        98.253.186.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:cf:cb:86:85:28:91:24:4e:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=d672cefe-983a-4967-979d-5627133b1d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7c:7d:c5:73:9e:ae:dd:02:59:8a:71:44:de:
                    2f:ff:c5:16:8b:59:5e:e2:97:f9:ce:f1:f4:f2:5b:
                    75:02:a6:aa:4a:d1:ae:00:20:e3:4e:25:18:70:7c:
                    7e:44:2c:52:3b:7a:2c:5f:76:4d:2f:f1:b5:cd:16:
                    f6:36:7d:e6:a3:58:d9:6c:bd:66:70:fb:3b:2b:d9:
                    69:d5:1e:d7:7e:70:9b:60:16:02:af:65:2a:dc:f3:
                    13:68:bd:22:6b:e0:f5:ce:c4:13:31:ea:e6:91:82:
                    da:ea:18:83:62:e9:f7:ee:43:9f:8c:8e:1e:b4:d5:
                    02:ff:c1:50:a5:95:b7:6e:c5:c8:a1:7b:f0:9a:2f:
                    7c:6e:65:bb:09:d9:90:98:b4:c7:ed:bf:a1:ec:75:
                    95:c5:b9:54:b4:cf:f8:8f:b9:b9:4c:54:1d:98:d3:
                    9e:5b:3d:ef:27:01:a2:11:ea:00:52:51:51:f7:c2:
                    b3:58:c4:eb:32:e3:e3:a5:38:0d:a5:87:b1:fd:8a:
                    c5:7f:76:f3:98:50:31:40:e3:41:44:3f:95:4d:ad:
                    b7:1d:71:1a:f2:69:2d:86:c8:ce:02:c7:e3:4d:69:
                    e4:09:ad:b0:bf:72:b5:c9:f3:4c:d2:45:0f:a1:35:
                    e7:a5:26:36:6c:95:d7:5a:ec:f8:26:1c:06:3d:30:
                    e0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D9:14:95:43:AC:56:EF:94:C7:6C:85:AF:78:8A:0C:8E:C2:FB:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af6ac3ce-8e00-3d36-a4e4-ef68ac2d118e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.253.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:a6:73:50:61:dc:d6:4a:22:ac:53:b6:3e:24:66:30:e6:fc:
         49:9c:9b:b9:20:3e:27:44:5f:43:e1:8e:62:00:0c:69:9d:70:
         fc:80:9a:b3:d4:90:fa:93:ea:0d:37:31:e8:91:a8:77:ac:e8:
         4b:63:e5:59:f8:e9:31:0f:71:a4:33:e3:dc:91:df:48:4b:8a:
         ba:86:5c:0d:a7:f3:5b:5f:cd:eb:7e:7a:fd:da:94:b5:db:af:
         4e:66:67:dc:26:cd:5d:8a:e1:4f:cb:91:9d:4a:af:1e:ca:b0:
         3b:b0:2f:f3:9e:13:c6:d9:a3:cd:75:e2:b0:d7:8d:16:ed:72:
         bf:e9:5b:12:e5:18:22:50:98:03:f7:ef:56:70:1d:01:42:dc:
         cd:dc:72:36:41:e0:6d:29:96:f6:cf:dd:49:01:d2:b7:10:20:
         7d:0a:f8:c6:e1:e9:c9:02:9b:8c:e8:82:b0:59:c7:9b:1b:b6:
         6d:a4:00:64:be:06:98:57:de:5c:26:0e:75:0f:83:24:de:5b:
         56:7f:d4:1d:05:1e:0c:9a:72:4d:8a:e5:b0:bf:a3:b3:94:2f:
         65:d3:a3:44:84:bd:3c:1d:26:bb:34:c9:18:d1:30:94:73:19:
         c9:38:10:8b:0d:aa:ed:50:7c:49:ab:5e:bc:bb:e6:e3:82:5a:
         d7:0a:24:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:14:18 2024 by rpki-client on console-ams.rpki-client.org