Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be5d2894-040c-363c-a295-268a70fda36d.roa
File:                     be5d2894-040c-363c-a295-268a70fda36d.roa (raw, json)
Hash identifier:          PQROr4MVU1q/DigmkGiG6KlWDJ/vNNZaX21n5t9nMKA=
Subject key identifier:   38:D3:96:33:81:06:42:AE:B2:BD:D5:6F:4B:74:79:DF:61:B7:07:30
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC88ED86F0CC0B55E5A14C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be5d2894-040c-363c-a295-268a70fda36d.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33660
IP address blocks:        98.33.148.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:ed:86:f0:cc:0b:55:e5:a1:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=05e6e162-d230-415f-9d37-fd8c90968e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6b:3e:74:70:51:26:89:0d:73:60:37:fa:d6:
                    8e:8a:59:ab:9e:90:75:39:92:46:2f:c0:d3:e6:4b:
                    6f:c1:21:cd:e6:3d:fa:81:8b:40:2b:5b:a7:5d:bd:
                    ec:e4:6f:a7:67:4e:1b:a4:fc:4b:28:56:12:f4:79:
                    00:2d:b2:0f:03:6e:a0:3b:4f:9a:3c:ec:ce:f3:e8:
                    be:97:f6:0d:c4:b0:ff:20:43:da:e0:2e:bf:ab:af:
                    50:92:cd:9b:3e:32:91:32:1c:10:d8:d3:13:f1:c1:
                    67:4a:b9:63:3c:ba:5e:da:74:cb:fc:bd:cb:ca:20:
                    cc:70:4d:27:88:4b:28:62:a3:10:03:dd:fe:ff:d7:
                    04:f4:1a:9b:c0:be:32:d2:27:54:e0:8b:31:73:cf:
                    18:d9:16:8a:88:ec:21:ea:2a:37:09:80:92:35:ef:
                    f3:55:e6:f8:7a:d2:ba:f9:48:c8:9b:36:f1:b4:03:
                    05:91:bc:f4:1f:7c:49:12:9c:b0:c0:77:db:17:0f:
                    fe:14:23:8f:85:ee:38:0c:da:f3:e7:bd:a0:52:f4:
                    5d:ab:bc:8a:24:f9:30:2f:d4:11:33:fc:43:91:b0:
                    58:f9:9b:a9:e2:3a:84:bd:7f:8a:70:4c:a1:99:73:
                    c7:da:4c:42:d4:9f:86:84:67:c3:2d:0b:5d:42:ce:
                    cf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D3:96:33:81:06:42:AE:B2:BD:D5:6F:4B:74:79:DF:61:B7:07:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be5d2894-040c-363c-a295-268a70fda36d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.33.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:a4:e9:c4:8a:75:33:14:27:e9:b8:7c:04:72:19:64:0d:43:
         dc:36:52:9a:f0:6b:11:3e:95:f0:b1:61:88:d6:8d:54:4c:a6:
         83:95:4a:2b:ab:46:9f:be:5e:39:4b:34:95:e1:c1:f1:a3:13:
         21:29:0e:80:a4:12:19:85:13:7f:eb:e6:42:79:c2:48:ea:54:
         25:1e:2e:ed:9b:62:27:36:b6:92:03:88:43:d4:7f:cf:d7:95:
         3f:25:d7:c4:77:a8:f9:1d:e9:7a:c7:a5:a8:15:dd:43:a4:f5:
         5d:5f:e8:ca:ab:85:db:f5:ad:bc:7a:b9:78:87:85:66:4a:52:
         36:a6:0f:52:1e:f6:7b:26:d1:56:1f:93:5d:58:51:84:87:a5:
         ee:5a:67:cf:16:a5:39:1c:55:4c:8f:e5:9b:e7:c0:c6:91:53:
         ce:c4:be:55:3d:db:92:62:d0:05:15:76:a6:7f:0c:9f:83:87:
         94:54:70:8a:c1:2f:d6:de:50:55:91:ba:5f:9e:77:bf:b4:50:
         0f:b1:5a:48:54:18:50:48:d4:e8:4e:6f:41:64:cc:4b:2a:52:
         ef:97:f8:62:7b:9b:83:70:ec:10:6d:3e:05:33:34:6b:33:48:
         08:d0:53:5d:43:1c:65:b1:92:9f:43:8c:8f:24:15:1a:47:33:
         87:d5:b9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:57:00 2024 by rpki-client on console-ams.rpki-client.org