Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5cd4b68-6bc9-3997-a545-e306b26d8103.roa
File:                     c5cd4b68-6bc9-3997-a545-e306b26d8103.roa (raw, json)
Hash identifier:          XV+kDpowS5qcDp4P0amQVc0oEGJdPpMn78WdklBXnKY=
Subject key identifier:   09:5A:95:3B:0F:2E:3C:70:DA:E0:D9:CB:D8:32:63:EF:D1:42:11:D1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7E824008ADBC9B35EE2A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5cd4b68-6bc9-3997-a545-e306b26d8103.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        98.250.80.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:e8:24:00:8a:db:c9:b3:5e:e2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=204edeac-b499-4f76-a4dc-e3abc7dd9cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b0:94:6d:b9:de:e9:d4:bd:f8:7f:9d:53:c3:
                    fb:ad:44:c8:6e:d4:ca:af:f5:c0:0b:9b:83:f4:16:
                    19:f8:bb:bc:f5:fe:30:9d:f8:9a:9b:2f:d4:13:ce:
                    5c:f4:50:6b:04:02:c6:c5:52:5c:fe:ce:6c:b8:16:
                    05:74:cd:8c:de:d8:2b:21:d8:ce:06:50:54:6c:d9:
                    dd:33:46:fb:b4:f8:9c:40:b7:c5:55:4c:b5:d0:68:
                    bb:81:45:89:4c:60:a7:3c:8c:e1:93:31:7a:b8:54:
                    de:29:fa:aa:4f:95:4c:e4:d2:08:f2:c6:aa:0b:30:
                    82:60:60:1a:77:a9:ce:bb:8a:12:57:04:c8:b3:5a:
                    ea:ac:5e:7d:1c:51:b1:8a:ba:05:b1:04:48:bb:ea:
                    71:99:08:ff:bc:86:d3:1b:7c:58:18:87:5a:d8:f0:
                    5c:f4:46:f2:59:0f:49:48:be:95:3d:ae:28:55:5e:
                    a7:66:b9:44:35:4f:93:63:5d:de:7f:fd:27:7b:c5:
                    84:c0:41:4c:3a:44:12:dc:68:7b:bf:88:8e:c7:40:
                    81:30:7a:96:6d:5e:35:de:1e:d7:36:b3:52:b2:e9:
                    fb:ea:82:49:a3:9a:45:02:61:92:1b:60:9e:36:67:
                    70:bb:0a:42:44:92:d5:c6:fb:14:4b:2d:c7:aa:52:
                    ee:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5A:95:3B:0F:2E:3C:70:DA:E0:D9:CB:D8:32:63:EF:D1:42:11:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5cd4b68-6bc9-3997-a545-e306b26d8103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.250.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:b7:f8:29:1a:63:1f:3e:76:1b:fb:15:88:f7:1a:59:4d:38:
         b6:be:d9:95:06:92:00:9f:de:cf:2e:5b:7c:0e:bc:0d:24:97:
         84:91:a0:04:29:c1:fb:65:4d:47:1c:3a:34:bc:89:f4:1b:73:
         d1:61:cb:d3:32:82:ea:e4:de:51:74:ee:0b:1b:de:f0:36:0c:
         e4:5e:96:7b:f5:fd:60:52:42:f8:0d:a6:26:78:7e:9e:a1:35:
         09:27:2e:8f:0b:8f:6f:5e:ae:4c:90:34:b1:a6:d5:2c:04:b8:
         d4:6f:ab:b6:e3:6a:76:8b:07:c2:c2:5c:a4:50:29:ab:5f:8e:
         9a:3e:55:9a:5a:c7:f8:2b:56:41:aa:00:48:dd:27:b6:c4:a4:
         5d:bb:5f:c9:b4:5d:1e:c5:c2:92:61:99:cc:f1:fa:0d:c3:4a:
         ef:1c:dc:32:a8:cb:2d:48:5e:f4:6e:8f:e7:83:a2:0a:2e:bf:
         26:b4:2a:88:78:47:80:c7:0d:f1:18:67:ad:79:5f:67:53:ce:
         b8:0c:36:05:39:38:01:56:fa:be:cc:01:e8:95:02:3d:d2:74:
         75:32:96:ac:2f:db:dd:be:e1:d5:e2:a4:ae:bc:dc:53:73:2b:
         99:50:b5:b3:9b:14:d7:d2:5a:67:ab:79:2b:61:8e:53:e4:81:
         74:00:a6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:12:57 2024 by rpki-client on console-ams.rpki-client.org