Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf82460c-79f0-3dd8-900e-7de0b77a258e.roa
File:                     bf82460c-79f0-3dd8-900e-7de0b77a258e.roa (raw, json)
Hash identifier:          HILgnrV3ni9ol8kDdaM6SoHAGaOJQwv655Uld0iETiA=
Subject key identifier:   98:D0:D2:9B:7F:C2:BB:CF:AD:5D:00:FE:94:C3:52:BE:18:0E:E2:BF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC88EDB83F98B30D89522712
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf82460c-79f0-3dd8-900e-7de0b77a258e.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33660
IP address blocks:        98.33.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:ed:b8:3f:98:b3:0d:89:52:27:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=04974e45-3dbf-4a93-99d0-5e4ae76334cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a7:9c:64:60:aa:ea:16:3a:00:45:bf:c4:df:
                    93:78:b9:5d:85:74:4d:63:6f:8f:4f:36:05:38:4d:
                    2e:5c:1f:17:dc:f2:22:91:cb:5a:d5:53:b5:06:cb:
                    f4:2e:a0:15:f8:5b:b7:ec:18:d4:02:41:c3:07:d1:
                    fa:4f:e9:23:a8:1f:e9:7f:a9:da:7f:e3:da:bd:8d:
                    a7:ff:b1:92:da:97:d9:81:a7:b9:78:a2:3a:af:6c:
                    0e:47:47:1c:4e:31:cd:81:5e:e6:c5:98:ea:03:b3:
                    98:d2:6a:2b:3c:94:53:7f:74:d9:0f:8d:ee:b7:54:
                    5a:f5:0c:ab:c1:65:ea:a4:3e:17:19:07:6d:17:68:
                    28:4a:88:ab:a7:2f:ea:4d:53:3c:de:f3:dc:55:4d:
                    d7:5f:62:c9:0d:2d:17:ad:2a:87:fe:f9:b6:02:a5:
                    b0:a7:92:c9:fe:00:d6:3e:a8:17:0a:07:dc:4e:f6:
                    ed:ea:7e:97:b0:11:aa:b9:ac:ff:20:eb:75:68:25:
                    10:de:8b:0c:38:65:a8:53:d8:e6:64:1b:3e:79:52:
                    b0:ec:62:c2:87:c2:6a:2a:7d:27:84:a2:91:9a:d6:
                    e1:41:6e:93:b5:b3:77:83:07:ba:13:23:11:71:fc:
                    5e:a8:86:11:3d:30:a9:3d:5d:2d:f3:9b:1a:12:91:
                    dc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D0:D2:9B:7F:C2:BB:CF:AD:5D:00:FE:94:C3:52:BE:18:0E:E2:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf82460c-79f0-3dd8-900e-7de0b77a258e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.33.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:08:68:a3:fa:e2:4c:3f:97:f2:be:5a:08:c4:61:57:54:39:
         1e:e0:0c:bf:cd:e4:fa:b8:a9:c7:02:16:27:a8:b8:8f:0c:21:
         dd:ab:60:90:83:94:f1:bd:d8:01:69:66:21:53:21:ef:4b:08:
         8f:1c:4b:f8:b5:19:ce:81:f2:b5:c9:71:37:eb:b4:e6:69:9d:
         03:11:d3:34:89:26:69:66:08:08:59:c3:63:3a:56:00:a9:c7:
         17:89:bd:72:94:05:fc:43:d2:ae:9f:bb:67:ac:52:8e:8f:80:
         81:b3:53:1e:42:be:c5:e5:b9:d3:bc:7a:9b:40:ba:a5:5c:3c:
         4d:52:01:cb:18:65:a8:91:a3:1c:f2:e6:ce:38:c3:36:86:f5:
         e1:87:cb:c4:2a:eb:45:8e:22:5e:1a:4d:dc:98:37:37:a2:42:
         c5:d5:19:66:ae:fa:d4:a9:c7:04:b2:ac:bc:20:49:59:e3:d6:
         86:0d:87:ed:79:59:67:f5:88:df:1e:e9:3a:42:52:c3:90:fd:
         91:de:e3:51:ba:ec:c4:08:7a:32:9a:46:e4:c8:ee:80:9a:94:
         4f:a8:3d:a7:1d:18:39:30:da:53:7e:c7:75:8b:09:8e:b2:8b:
         13:61:2d:6d:28:e2:61:99:f1:e3:5d:74:36:99:2d:4a:79:3c:
         2a:02:c7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:21:37 2024 by rpki-client on console-ams.rpki-client.org