Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5172e30-ec18-3603-92f1-079f327c5622.roa
File:                     b5172e30-ec18-3603-92f1-079f327c5622.roa (raw, json)
Hash identifier:          2tMliw8IGLzlnWh7nguhVqVd3+vy9B6Ty8mckksHukA=
Subject key identifier:   05:C5:11:D2:00:EE:B2:F5:A7:1F:6D:B7:BA:E0:58:0E:31:51:57:66
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9CC97D1A0B3BF8653B9C10
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5172e30-ec18-3603-92f1-079f327c5622.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        98.228.200.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:c9:7d:1a:0b:3b:f8:65:3b:9c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=e89906cd-30c2-4b8e-828e-80ab339bc6e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ca:b8:bc:55:c4:3f:db:bd:6c:2f:fa:b0:38:
                    0d:62:03:4a:06:f7:d0:63:04:4a:56:63:a1:9e:b6:
                    eb:38:a1:cd:8f:03:2d:5e:51:30:8f:26:0c:4a:d0:
                    20:63:1c:10:22:f6:c3:b0:92:00:fa:83:9f:f5:01:
                    e0:36:3c:be:c3:8e:a4:b7:25:b6:e9:0d:51:28:fa:
                    44:59:d2:b9:69:26:c5:bb:64:cf:7c:6c:9b:eb:cf:
                    b7:83:17:85:52:7b:22:84:a1:bc:ce:f5:9b:0a:b6:
                    38:a6:30:d9:af:56:bf:e3:af:60:8a:bb:1a:aa:80:
                    30:65:cb:fb:c2:f7:f8:f9:2b:fa:16:77:66:81:6d:
                    45:dc:24:e9:58:91:14:0f:f4:04:09:db:3c:3b:c9:
                    05:61:9e:5e:43:c0:31:8e:38:23:1b:8e:82:58:28:
                    c1:80:37:77:b6:44:a1:15:7e:f9:cc:16:ee:99:ee:
                    7f:1a:c3:60:0a:12:94:ac:43:3d:7a:68:12:d0:ae:
                    60:34:b5:39:c8:c9:35:f9:0c:48:32:f3:a7:63:6a:
                    71:38:43:65:c8:38:53:11:04:ff:3a:15:40:2b:16:
                    2a:91:5f:ea:c9:2a:72:3f:33:a0:b5:75:7e:7e:77:
                    ad:be:63:75:77:83:87:7a:27:3c:f0:84:66:aa:83:
                    40:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C5:11:D2:00:EE:B2:F5:A7:1F:6D:B7:BA:E0:58:0E:31:51:57:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5172e30-ec18-3603-92f1-079f327c5622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.228.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:b4:ef:af:ef:05:55:dd:b4:25:e9:98:d0:d3:08:09:96:70:
         0c:8f:87:de:9d:50:ff:f6:25:1b:b1:01:6d:da:a5:ba:9c:ae:
         f5:bc:3c:1c:7f:95:82:51:45:fe:d5:09:7b:27:28:e8:f8:20:
         fc:50:91:6e:20:a4:c9:04:68:93:1f:bd:49:e5:f8:9c:6f:db:
         ef:73:d0:56:a9:66:25:b9:c6:1a:19:42:48:71:ed:c7:48:30:
         5f:f8:d6:92:1c:83:40:75:9d:b7:a9:e4:69:35:00:c4:5f:4a:
         00:d2:f2:bb:a7:a1:af:1f:e2:2a:00:d5:7e:52:dd:17:6d:59:
         30:25:d8:d1:04:25:ec:28:1e:36:91:77:8c:82:b2:d4:2f:00:
         90:78:21:51:08:d6:31:8a:e3:61:fe:d4:ea:e1:69:d1:cd:4a:
         49:4f:c6:23:5d:f7:31:12:b0:46:e7:10:0f:b7:12:2a:6d:8c:
         71:55:06:02:5a:2b:a7:e7:58:6b:31:79:ad:a4:c8:8c:ac:62:
         d8:22:a1:63:e0:da:39:df:1c:9e:1e:3d:fd:2e:5b:7a:8c:92:
         ca:5a:34:37:15:a8:61:ab:2a:28:eb:0c:c9:15:c5:1c:24:f3:
         e9:28:33:7e:41:7d:42:76:ee:17:49:80:c1:0d:ac:e1:49:d7:
         c7:c7:b5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:15:22 2024 by rpki-client on console-ams.rpki-client.org