Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3b0be54-8607-3f6b-91a2-99abdf42bc13.roa
File:                     c3b0be54-8607-3f6b-91a2-99abdf42bc13.roa (raw, json)
Hash identifier:          AAgtWFztxrRDeMOs33fFaUEqI/0lAcJ6eapdsbzdMaU=
Subject key identifier:   E1:FE:24:7F:D6:90:D6:60:C9:60:DB:93:C1:A6:12:9B:EA:3F:03:57
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C8736155C140F436BC8DC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3b0be54-8607-3f6b-91a2-99abdf42bc13.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        98.40.166.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:73:61:55:c1:40:f4:36:bc:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=77031ac8-2f11-4155-8eec-0e2b3525565f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:56:ff:76:85:a2:20:63:af:60:a6:6a:01:f9:
                    9f:6a:f4:8c:b6:40:f2:cc:86:68:d1:eb:64:43:5b:
                    99:98:40:b1:33:a2:7c:ac:84:89:a4:d6:d4:bd:ab:
                    5b:ec:4f:80:33:8c:9b:20:20:6f:08:a2:8e:5b:10:
                    fb:4f:aa:3f:87:24:fd:de:42:0c:f7:0c:cd:06:17:
                    5f:7c:8f:81:b6:59:07:4d:fe:67:5c:b8:44:b2:f6:
                    44:84:3d:b7:bc:1d:9b:24:b6:3d:60:c0:e1:70:dc:
                    ed:e6:a9:7c:fe:91:f0:4d:6c:98:35:94:fe:70:f2:
                    ed:38:80:95:56:ed:c0:a2:3c:06:86:0c:b6:42:2f:
                    59:c2:46:66:a8:a0:7f:70:5f:7e:b4:e5:69:89:2a:
                    0d:de:bf:1d:6b:6a:79:8e:3f:89:ba:93:d8:4f:9d:
                    ea:a2:40:f0:cf:a2:5d:e0:f4:f0:76:70:fa:2a:1e:
                    c8:68:a3:e4:13:0d:b6:ea:63:3c:71:b8:04:43:e6:
                    da:a8:9c:86:66:8f:0d:62:6a:be:6d:45:b5:e2:28:
                    15:f9:f6:d4:ce:4f:7c:1f:4f:72:a3:f8:c1:68:eb:
                    2b:c0:fa:22:80:bf:29:27:22:ed:75:fc:85:25:f5:
                    6e:bb:a3:9e:c5:55:31:8e:74:ff:02:fb:3d:35:97:
                    c9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FE:24:7F:D6:90:D6:60:C9:60:DB:93:C1:A6:12:9B:EA:3F:03:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3b0be54-8607-3f6b-91a2-99abdf42bc13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.40.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:7b:47:23:92:c4:02:43:19:90:88:bd:23:82:60:e0:60:dc:
         f4:e1:21:ce:3b:46:b7:eb:d6:df:cb:b5:b5:00:75:29:b3:39:
         20:66:3e:79:56:4a:b6:0f:aa:d6:b6:ce:40:fb:b3:7d:ea:62:
         e3:b6:7b:3f:90:88:32:a8:3a:78:74:ad:57:d6:f1:77:10:47:
         5b:d0:1c:ae:03:05:0d:82:7c:17:63:0f:69:ca:88:0c:33:cc:
         e8:b8:69:1e:a5:6c:5a:e7:64:2a:e5:3b:24:7a:a5:39:59:fd:
         6d:7c:5f:1d:f6:a3:41:88:99:0b:73:ff:c9:34:41:57:4a:67:
         03:04:31:5b:1c:e4:aa:25:01:7d:4d:c5:6a:05:ac:74:84:fc:
         9e:40:9a:d3:56:02:03:65:d3:18:21:11:7b:8c:e1:dd:f8:18:
         a7:e3:cf:8e:70:f4:8c:95:d6:f2:3a:7a:1a:cd:77:b4:bc:7b:
         37:93:42:06:52:7f:b7:88:91:27:a0:67:af:94:19:d8:10:b3:
         f6:36:62:53:8c:83:23:73:7e:e2:d6:9f:fb:65:45:5d:22:2e:
         8f:73:33:a2:db:61:37:ca:50:54:2a:93:5b:29:be:38:41:3d:
         ea:4e:04:32:45:ea:fa:5b:80:32:c4:1b:9f:8e:02:ff:af:4f:
         3a:95:66:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:12:07 2024 by rpki-client on console-ams.rpki-client.org