Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b18d8b9c-2c5d-309c-bf80-7eb6f3c3e738.roa
File:                     b18d8b9c-2c5d-309c-bf80-7eb6f3c3e738.roa (raw, json)
Hash identifier:          eDEMGL1RBPlRM7MwMbkPxAw7lPms/WecFkkQHG354a8=
Subject key identifier:   CE:02:ED:1A:18:94:C5:40:2F:F7:AA:BC:67:CB:C6:59:F4:2D:EC:FC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9CE066AA75CC01DB96E300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b18d8b9c-2c5d-309c-bf80-7eb6f3c3e738.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        98.52.194.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:e0:66:aa:75:cc:01:db:96:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=3f2e2425-f8f8-4e2f-aabf-dee38b2164f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:30:e3:9e:b8:92:08:94:75:a6:4e:2b:1e:0e:
                    1c:b7:31:30:30:f8:df:1e:e7:d9:f1:53:44:e3:8e:
                    9e:ac:4c:ba:54:88:4f:59:a6:1d:e7:f3:24:a2:16:
                    28:96:32:94:3c:44:c3:4d:7b:6f:e3:68:a5:f6:d8:
                    11:fb:af:8e:84:c0:74:17:61:90:87:68:3d:16:d0:
                    6e:f6:90:6b:20:86:4a:cf:42:aa:5d:26:36:a4:6b:
                    5c:c8:1d:0d:2c:f2:61:87:2f:da:b3:f4:19:46:86:
                    15:da:af:3a:d5:38:c2:b9:58:b6:d0:7c:c4:fb:e4:
                    c4:65:5a:3e:a3:ec:b3:4e:4d:9f:1b:65:32:ae:51:
                    ff:7f:b7:79:33:df:ce:52:d9:dc:9b:73:6f:79:c5:
                    a7:4c:ec:3a:b6:07:ea:80:91:29:94:af:22:d7:b9:
                    67:12:85:21:58:05:8a:e7:07:8f:c5:87:0f:cf:3f:
                    f5:31:5e:da:a0:80:a7:41:17:7c:ce:f9:f0:c3:8d:
                    e0:1f:03:83:a8:06:a9:6f:8c:86:eb:9e:0e:52:20:
                    1d:51:18:b1:47:d2:d6:ce:d9:a3:28:4c:d5:16:0d:
                    07:d0:d1:6c:ce:19:86:b4:91:9d:5d:af:f6:4e:13:
                    88:84:17:26:7a:23:95:46:a2:6d:fd:4a:1d:b0:3e:
                    73:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:02:ED:1A:18:94:C5:40:2F:F7:AA:BC:67:CB:C6:59:F4:2D:EC:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b18d8b9c-2c5d-309c-bf80-7eb6f3c3e738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.52.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:e6:9a:e0:56:b2:e5:e5:50:ab:77:bc:1f:35:ae:f7:2d:b2:
         b3:43:a1:36:fa:de:a1:25:8c:d2:1f:b9:ee:5d:70:f3:3f:e1:
         5a:42:65:3c:1a:61:31:c7:00:ec:87:82:d8:6a:12:4d:f1:44:
         1b:e7:c7:66:8d:cb:8a:dd:4a:68:36:bd:02:c3:48:2d:4f:26:
         a5:44:89:a8:99:44:56:83:6a:31:0d:0f:a5:b4:11:1e:4a:0d:
         dc:1d:e6:92:f9:13:cc:49:23:59:ba:b3:8f:78:45:b1:bb:c5:
         e8:08:32:91:43:a8:35:55:8d:89:15:41:51:45:85:4b:0f:4f:
         c0:67:33:d2:c6:e0:6d:56:fd:21:74:12:71:d4:0e:e0:c5:60:
         23:27:ce:71:12:0d:65:1e:30:59:69:92:f7:7c:e1:65:4d:01:
         8c:23:bd:cc:98:c6:6d:fe:5f:12:90:87:10:b7:63:fa:90:5f:
         c0:a7:d4:2d:9d:a2:e2:06:c9:32:c7:6c:04:b4:c0:6d:d7:d2:
         bd:06:4c:a1:70:df:4f:7d:32:91:ed:72:60:03:a1:08:d2:81:
         d7:e1:0c:22:6a:21:38:0d:64:cd:45:77:9d:10:f8:fa:1d:8a:
         24:4c:7b:4f:cf:e5:9d:a1:d9:2a:32:96:f8:e7:a3:86:8d:be:
         06:8a:3b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:14:46 2024 by rpki-client on console-ams.rpki-client.org