Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6a64c35-0082-3a63-b5e2-d5766e43d43d.roa
File:                     b6a64c35-0082-3a63-b5e2-d5766e43d43d.roa (raw, json)
Hash identifier:          5BlGQYlkcbIOa+PMVZZQrBbx8h0+qkZ2Gy5oEBIzOyc=
Subject key identifier:   49:5B:6B:E1:11:27:E7:0E:46:BD:04:89:6A:20:43:74:03:6B:E9:F9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E6065FC9EF97D739809D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6a64c35-0082-3a63-b5e2-d5766e43d43d.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        98.251.30.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e6:06:5f:c9:ef:97:d7:39:80:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=c2a03011-50f5-4c92-b947-132cbf707bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8a:eb:75:87:44:a2:c1:d8:bb:54:17:66:5e:
                    00:ad:a4:d4:48:b5:f5:6d:38:aa:2b:e9:69:bc:55:
                    07:e7:70:49:7e:ce:8a:28:e9:ce:43:ff:48:f3:df:
                    e9:f2:51:55:f1:2d:72:79:2c:56:ac:fe:87:ef:fc:
                    df:5b:cf:45:01:36:61:55:54:3e:8b:15:78:f8:d0:
                    e3:f5:5a:00:55:7e:9a:0d:14:a1:99:7b:65:d1:e3:
                    c5:fa:c2:95:db:1c:41:22:a0:4d:36:64:5f:16:9e:
                    d3:eb:b0:8e:89:70:5a:d4:6c:db:a2:11:a7:41:52:
                    7e:d4:97:8a:58:1c:a2:1a:ee:41:84:f5:7f:58:f9:
                    bb:ed:e8:26:48:3f:46:51:79:17:06:54:20:e0:28:
                    61:bb:63:c6:9b:5f:3c:24:42:aa:8a:cb:14:30:e5:
                    71:7c:96:f5:ed:4c:3a:68:de:14:0c:7f:31:f4:47:
                    fe:1c:62:10:27:54:f6:f0:d0:f7:f0:18:d7:a6:b8:
                    5a:7b:b0:5b:4d:8b:a5:58:7a:ae:a8:16:1f:76:d3:
                    d5:4d:dc:bf:f2:e7:ad:9c:fe:1c:74:4c:d5:cc:5d:
                    29:90:c9:55:3b:72:e1:e9:d2:ab:97:a6:d7:e9:c4:
                    84:b1:4e:39:a7:9d:67:81:4f:e4:d0:83:aa:89:e1:
                    8c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5B:6B:E1:11:27:E7:0E:46:BD:04:89:6A:20:43:74:03:6B:E9:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6a64c35-0082-3a63-b5e2-d5766e43d43d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.251.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:a1:48:1a:b6:50:67:a4:74:55:e3:57:07:8d:be:f3:56:1c:
         69:0d:8e:45:88:e4:e8:01:ab:98:04:7f:22:ff:26:52:06:6d:
         13:80:2a:ca:1d:6f:b1:2d:df:cd:4e:e2:73:30:54:ad:0f:20:
         4e:49:4e:cb:ac:b6:7d:84:3a:59:80:11:5f:cd:54:37:9e:0d:
         54:b5:c6:19:ec:e7:61:8c:2c:80:18:8a:93:3b:c2:ec:b4:78:
         96:65:bc:f6:c5:dc:48:0f:32:ac:3c:f4:6c:99:ff:db:e7:65:
         4e:1a:83:14:12:91:a6:81:07:14:4f:a3:08:9f:f3:b7:f1:7b:
         c3:7f:c2:86:8b:40:ec:02:a7:a1:ce:f8:50:d6:30:d1:f1:02:
         81:bc:3a:82:55:ec:39:25:3b:64:e5:58:d3:3b:25:ee:98:8c:
         8f:b8:ee:5f:c8:a8:9c:80:88:32:e6:ce:5e:2f:ea:94:a3:73:
         56:55:e8:cc:89:47:b7:17:18:ad:fe:8e:55:9f:51:5c:b1:b9:
         12:30:81:c8:ac:cd:9c:b4:50:ce:36:2f:5a:83:f0:c7:25:1c:
         21:b9:fc:3b:f6:9d:85:ca:d9:30:40:bc:bd:19:bd:45:6c:0e:
         b9:52:f9:88:69:49:c0:8a:19:5a:50:9f:1d:4b:d6:26:f2:2b:
         94:5a:ec:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:28:35 2024 by rpki-client on console-fra.rpki-client.org